Desde hace algun tiempo no he podidio entrar a mi bandeja de entrada de hotmail, de echo si lo puedo hacer a gmail y yahoo. ademas si puedo entrar en el messenger.

el mensaje que me aparece es cuando intento etrar a mi correo es. error (HTTP 400 Solicitud incorrecta), aqui les envio mi log para que puedan verificarlo.


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 09:01:27 a.m., on 05/08/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5700.0007)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Archivos de programa\ESET\ESET NOD32 Antivirus\ekrn.exe
C:\Archivos de programa\Power Translator\LogoMedia TranslateDotNet Server.exe
C:\Archivos de programa\Archivos comunes\Microsoft Shared\VS7DEBUG\mdm.exe
C:\WINDOWS\system32\svchost.exe
C:\Archivos de programa\Canon\CAL\CALMAIN.exe
C:\WINDOWS\system32\WgaTray.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\VTTimer.exe
C:\WINDOWS\system32\S3trayp.exe
C:\Archivos de programa\SlySoft\CloneCD\CloneCDTray.exe
C:\Archivos de programa\ESET\ESET NOD32 Antivirus\egui.exe
C:\Archivos de programa\Java\jre1.6.0_07\bin\jusched.exe
C:\Archivos de programa\Windows Live\Protección infantil\fssui.exe
C:\Archivos de programa\Windows Live\Messenger\MsnMsgr.Exe
C:\WINDOWS\system32\ctfmon.exe
C:\Archivos de programa\Microsoft Student\Microsoft Student con Encarta Premium 2008 DVD\EDICT.EXE
C:\Archivos de programa\Internet Explorer\IEXPLORE.EXE
C:\Archivos de programa\Webshots\WebshotsTray.exe
C:\WINDOWS\System32\svchost.exe
C:\Archivos de programa\Internet Explorer\IEXPLORE.EXE
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\logonui.exe
C:\WINDOWS\system32\rdpclip.exe
C:\Archivos de programa\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.hotmail.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=54729
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=55245&clcid={SUB_CLCID}
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Vínculos
O2 - BHO: Aplicación auxiliar de vínculos de Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Archivos de programa\Archivos comunes\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Windows Live OneCare Family Safety Browser Helper - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - C:\Archivos de programa\Windows Live\Protección infantil\fssbho.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Archivos de programa\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Aplicación auxiliar de inicio de sesión - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Archivos de programa\Archivos comunes\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Archivos de programa\Windows Live Toolbar\msntb.dll
O3 - Toolbar: LEC - {1DBAB667-A486-421e-AFE4-CF07DD0088E5} - C:\Archivos de programa\Power Translator\Applications\LEC IE Translation Extension.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Archivos de programa\Windows Live Toolbar\msntb.dll
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
O4 - HKLM\..\Run: [S3Trayp] S3trayp.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Archivos de programa\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Archivos de programa\Archivos comunes\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [CloneCDTray] "C:\Archivos de programa\SlySoft\CloneCD\CloneCDTray.exe" /s
O4 - HKLM\..\Run: [PowerTranslator Pro OLR] C:\ARCHIV~1\BVRPSO~1\POWERT~1\BVRPOlr.exe /PowerTranslator Pro
O4 - HKLM\..\Run: [egui] "C:\Archivos de programa\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Archivos de programa\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [Base road long save] C:\Documents and Settings\All Users\Datos de programa\File dvd base road\SEEK WAY.exe
O4 - HKLM\..\Run: [fssui] "C:\Archivos de programa\Windows Live\Protección infantil\fssui.exe" -autorun
O4 - HKCU\..\Run: [kava] C:\WINDOWS\system32\kavo.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Archivos de programa\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [kamsoft] C:\WINDOWS\system32\ckvo.exe
O4 - HKCU\..\Run: [L08EXLRD_2299375] "C:\Archivos de programa\Microsoft Student\Microsoft Student con Encarta Premium 2008 DVD\EDICT.EXE" -m
O4 - HKCU\..\Run: [bolt roam] C:\DOCUME~1\ISABEL~1\DATOSD~1\COPYRD~1\setup wait.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICIO LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Servicio de red')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Webshots.lnk = C:\Archivos de programa\Webshots\WebshotsTray.exe
O7 - HKCU\Software\Microsoft\Windows\CurrentVersion\Pol icies\System, DisableRegedit=1
O8 - Extra context menu item: &Windows Live Search - res://C:\Archivos de programa\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - http://favorites.live.com/quickadd.aspx
O8 - Extra context menu item: E&xportar a Microsoft Excel - res://C:\ARCHIV~1\MICROS~3\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Archivos de programa\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Consola de Sun Java - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Archivos de programa\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: Agregar entrada - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Archivos de programa\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Agregar entrada en Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Archivos de programa\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\ARCHIV~1\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: Barra de búsqueda de Encarta - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Archivos de programa\Archivos comunes\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Archivos de programa\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Archivos de programa\Messenger\msmsgs.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1216257469578
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.6.0) - http://dl8-cdn-01.sun.com/s/ESD44/JSCDL/jdk/6u7/jinstall-6u7-windows-i586-jc.cab?e=1215565248110&h=2d2c13a6c54474d4cce1a063e 43f825f/&filename=jinstall-6u7-windows-i586-jc.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O22 - SharedTaskScheduler: IE Component Categories cache daemon - {553858A7-4922-4e7e-B1C1-97140C1C16EF} - C:\WINDOWS\system32\ieframe.dll
O23 - Service: Canon Camera Access Library 8 (CCALib8) - Canon Inc. - C:\Archivos de programa\Canon\CAL\CALMAIN.exe
O23 - Service: Eset HTTP Server (EhttpSrv) - ESET - C:\Archivos de programa\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: Eset Service (ekrn) - ESET - C:\Archivos de programa\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: LEC TranslateDotNet Server - Language Engineering Corporation, LLC - C:\Archivos de programa\Power Translator\LogoMedia TranslateDotNet Server.exe
O23 - Service: NBService - Nero AG - C:\Archivos de programa\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Archivos de programa\Archivos comunes\Ahead\Lib\NMIndexingService.exe

--
End of file - 8589 bytes

Hola tioche, te doy la bienvenida al Foro de InfoSpyware.


ForoSpyware lo mantenemos voluntarios que tenemos nuestros trabajos y obligaciones fuera, por lo que no estamos 24/7, a lo que te pedimos paciencia en el análisis y respuesta de tu caso. Si 48hrs después de dejarnos el reporte de ComboFix.txt no recibes una respuesta me puedes enviar un mp de recordatorio.

Descarga, actualiza y ejecuta el programa:

• Malwarebytes' Anti-Malware
  *Nota* Es importante que envíes a "Cuarentena" todo lo que este detecte antes de copiar y pegarnos su reporte.

- Descarga la herramienta ComboFix.exe y guárdala en el escritorio.

1. Desactiva temporalmente el Antivirus y/o Antispyware.
2. Cierra todas las ventanas abiertas.
3. Hacele doble clic al archivo ComboFix.exe y seguí las instrucciones.
4. Cuando termine, generara un registro en C:\ComboFix.txt.
   • *Nota* Mientras CF este trabajando no mover el mouse ya que pararía su proceso.
   • *Nota* ComboFix puede reiniciar automáticamente el PC para completar el proceso de eliminación.

• Una vez generado el reporte es importante que no reinicies tu equipo ya que algunos malwares contienen nombres aleatorios que se modifican en cada reinicio.
  
  
• Al momento de efectuar los pasos es importante que estén los navegadores y programas cerrados por lo que o imprime los pasos o cópialos al bloc de notas para que los tengas a mano.
  
  
• Te recomiendo suscribirte al feed de nuestro Blog de InfoSpyware para estar al tanto de las nuevas amenazas que circulan por la red y así en un futuro puedas prevenirlas.

Salu2

aca te envio el reporte de malwarebytes
te comento que envie a cuarentena todo lo detectado pero aún no he podido entrar a mi correo de hotmail.

Malwarebytes' Anti-Malware 1.24
Versión de la Base de Datos: 1030
Windows 5.1.2600 Service Pack 2

06:01:12 p.m. 06/08/2008
mbam-log-8-6-2008 (18-01-12).txt

Tipo de examen : Examen Completo (A:\|C:\|D:\|E:\|F:\|)
Objetos examinados: 74662
Tiempo transcurrido: 40 minute(s), 23 second(s)

Procesos en Memoria Infectados: 0
Módulos en Memoria Infectados: 0
Claves del Registro Infectadas: 0
Valores del Registro Infectados: 1
Elementos de Datos del Registro Infectados: 1
Carpetas Infectadas: 0
Ficheros Infectados: 124

Procesos en Memoria Infectados:
(No se han detectado elementos maliciosos)

Módulos en Memoria Infectados:
(No se han detectado elementos maliciosos)

Claves del Registro Infectadas:
(No se han detectado elementos maliciosos)

Valores del Registro Infectados:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Curre ntVersion\Run\kamsoft (Trojan.Agent) -> Quarantined and deleted successfully.

Elementos de Datos del Registro Infectados:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Explorer\Advanced\Folder\Hidden\SHOWALL \CheckedValue (Hijack.System.Hidden) -> Bad: (0) Good: (1) -> Quarantined and deleted successfully.

Carpetas Infectadas:
(No se han detectado elementos maliciosos)

Ficheros Infectados:
C:\System Volume Information\_restore{591E90BF-11C5-4D10-9885-C70E4D86705B}\RP29\A0002529.exe (Trojan.Vaklik) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{591E90BF-11C5-4D10-9885-C70E4D86705B}\RP29\A0002531.exe (Trojan.Vaklik) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{591E90BF-11C5-4D10-9885-C70E4D86705B}\RP29\A0002549.exe (Trojan.Vaklik) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{591E90BF-11C5-4D10-9885-C70E4D86705B}\RP29\A0002574.exe (Trojan.Vaklik) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{591E90BF-11C5-4D10-9885-C70E4D86705B}\RP29\A0002594.exe (Trojan.Vaklik) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{591E90BF-11C5-4D10-9885-C70E4D86705B}\RP29\A0002630.exe (Trojan.Vaklik) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{591E90BF-11C5-4D10-9885-C70E4D86705B}\RP29\A0002655.exe (Trojan.Vaklik) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{591E90BF-11C5-4D10-9885-C70E4D86705B}\RP29\A0002676.exe (Trojan.Vaklik) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{591E90BF-11C5-4D10-9885-C70E4D86705B}\RP30\A0002692.exe (Trojan.Vaklik) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{591E90BF-11C5-4D10-9885-C70E4D86705B}\RP30\A0002897.exe (Trojan.Vaklik) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{591E90BF-11C5-4D10-9885-C70E4D86705B}\RP30\A0002915.exe (Trojan.Vaklik) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{591E90BF-11C5-4D10-9885-C70E4D86705B}\RP30\A0002930.exe (Trojan.Vaklik) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{591E90BF-11C5-4D10-9885-C70E4D86705B}\RP30\A0002946.exe (Trojan.Vaklik) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{591E90BF-11C5-4D10-9885-C70E4D86705B}\RP30\A0002959.exe (Trojan.Vaklik) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{591E90BF-11C5-4D10-9885-C70E4D86705B}\RP30\A0002981.exe (Trojan.Vaklik) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{591E90BF-11C5-4D10-9885-C70E4D86705B}\RP30\A0003004.exe (Trojan.Vaklik) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{591E90BF-11C5-4D10-9885-C70E4D86705B}\RP30\A0003028.exe (Trojan.Vaklik) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{591E90BF-11C5-4D10-9885-C70E4D86705B}\RP30\A0003045.exe (Trojan.Vaklik) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{591E90BF-11C5-4D10-9885-C70E4D86705B}\RP30\A0003064.exe (Trojan.Vaklik) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{591E90BF-11C5-4D10-9885-C70E4D86705B}\RP30\A0003087.exe (Trojan.Vaklik) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{591E90BF-11C5-4D10-9885-C70E4D86705B}\RP30\A0003102.exe (Trojan.Vaklik) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{591E90BF-11C5-4D10-9885-C70E4D86705B}\RP31\A0003116.exe (Trojan.Vaklik) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{591E90BF-11C5-4D10-9885-C70E4D86705B}\RP31\A0003134.exe (Trojan.Vaklik) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{591E90BF-11C5-4D10-9885-C70E4D86705B}\RP32\A0003145.exe (Trojan.Vaklik) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{591E90BF-11C5-4D10-9885-C70E4D86705B}\RP33\A0003152.exe (Trojan.Vaklik) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{591E90BF-11C5-4D10-9885-C70E4D86705B}\RP33\A0003192.exe (Trojan.Vaklik) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{591E90BF-11C5-4D10-9885-C70E4D86705B}\RP33\A0003209.exe (Trojan.Vaklik) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{591E90BF-11C5-4D10-9885-C70E4D86705B}\RP33\A0004210.exe (Trojan.Vaklik) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{591E90BF-11C5-4D10-9885-C70E4D86705B}\RP33\A0006210.exe (Trojan.Vaklik) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{591E90BF-11C5-4D10-9885-C70E4D86705B}\RP33\A0007210.exe (Trojan.Vaklik) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{591E90BF-11C5-4D10-9885-C70E4D86705B}\RP33\A0007232.exe (Trojan.Vaklik) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{591E90BF-11C5-4D10-9885-C70E4D86705B}\RP33\A0007235.exe (Trojan.Vaklik) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{591E90BF-11C5-4D10-9885-C70E4D86705B}\RP33\A0008231.exe (Trojan.Vaklik) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{591E90BF-11C5-4D10-9885-C70E4D86705B}\RP33\A0008247.exe (Trojan.Vaklik) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{591E90BF-11C5-4D10-9885-C70E4D86705B}\RP34\A0008260.exe (Trojan.Vaklik) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{591E90BF-11C5-4D10-9885-C70E4D86705B}\RP34\A0008278.exe (Trojan.Vaklik) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{591E90BF-11C5-4D10-9885-C70E4D86705B}\RP34\A0008294.exe (Trojan.Vaklik) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{591E90BF-11C5-4D10-9885-C70E4D86705B}\RP34\A0008315.exe (Trojan.Vaklik) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{591E90BF-11C5-4D10-9885-C70E4D86705B}\RP35\A0008356.exe (Trojan.Vaklik) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{591E90BF-11C5-4D10-9885-C70E4D86705B}\RP35\A0008374.exe (Trojan.Vaklik) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{591E90BF-11C5-4D10-9885-C70E4D86705B}\RP35\A0009471.exe (Trojan.Vaklik) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{591E90BF-11C5-4D10-9885-C70E4D86705B}\RP35\A0008472.exe (Trojan.Vaklik) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{591E90BF-11C5-4D10-9885-C70E4D86705B}\RP35\A0009643.exe (Trojan.Vaklik) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{591E90BF-11C5-4D10-9885-C70E4D86705B}\RP36\A0009649.exe (Trojan.Vaklik) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{591E90BF-11C5-4D10-9885-C70E4D86705B}\RP36\A0010654.exe (Trojan.Vaklik) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{591E90BF-11C5-4D10-9885-C70E4D86705B}\RP36\A0010677.exe (Trojan.Vaklik) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{591E90BF-11C5-4D10-9885-C70E4D86705B}\RP37\A0010710.exe (Trojan.Vaklik) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{591E90BF-11C5-4D10-9885-C70E4D86705B}\RP38\A0010718.exe (Trojan.Vaklik) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{591E90BF-11C5-4D10-9885-C70E4D86705B}\RP38\A0010738.exe (Trojan.Vaklik) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{591E90BF-11C5-4D10-9885-C70E4D86705B}\RP39\A0010750.exe (Trojan.Vaklik) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{591E90BF-11C5-4D10-9885-C70E4D86705B}\RP39\A0010769.exe (Trojan.Vaklik) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{591E90BF-11C5-4D10-9885-C70E4D86705B}\RP39\A0010794.exe (Trojan.Vaklik) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{591E90BF-11C5-4D10-9885-C70E4D86705B}\RP39\A0010813.exe (Trojan.Vaklik) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{591E90BF-11C5-4D10-9885-C70E4D86705B}\RP39\A0010934.exe (Trojan.Vaklik) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{591E90BF-11C5-4D10-9885-C70E4D86705B}\RP40\A0010952.exe (Trojan.Vaklik) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{591E90BF-11C5-4D10-9885-C70E4D86705B}\RP40\A0010981.exe (Trojan.Vaklik) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{591E90BF-11C5-4D10-9885-C70E4D86705B}\RP40\A0011006.exe (Trojan.Vaklik) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{591E90BF-11C5-4D10-9885-C70E4D86705B}\RP40\A0012005.exe (Trojan.Vaklik) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{591E90BF-11C5-4D10-9885-C70E4D86705B}\RP40\A0012029.exe (Trojan.Vaklik) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{591E90BF-11C5-4D10-9885-C70E4D86705B}\RP40\A0012062.exe (Trojan.Vaklik) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{591E90BF-11C5-4D10-9885-C70E4D86705B}\RP41\A0012071.exe (Trojan.Vaklik) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{591E90BF-11C5-4D10-9885-C70E4D86705B}\RP41\A0012095.exe (Trojan.Vaklik) -> Quarantined and deleted successfully.
D:\l3v.exe (Trojan.Vaklik) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{591E90BF-11C5-4D10-9885-C70E4D86705B}\RP29\A0002595.exe (Trojan.Vaklik) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{591E90BF-11C5-4D10-9885-C70E4D86705B}\RP29\A0002530.exe (Trojan.Vaklik) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{591E90BF-11C5-4D10-9885-C70E4D86705B}\RP29\A0002551.exe (Trojan.Vaklik) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{591E90BF-11C5-4D10-9885-C70E4D86705B}\RP29\A0002575.exe (Trojan.Vaklik) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{591E90BF-11C5-4D10-9885-C70E4D86705B}\RP29\A0002633.exe (Trojan.Vaklik) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{591E90BF-11C5-4D10-9885-C70E4D86705B}\RP29\A0002656.exe (Trojan.Vaklik) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{591E90BF-11C5-4D10-9885-C70E4D86705B}\RP29\A0002677.exe (Trojan.Vaklik) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{591E90BF-11C5-4D10-9885-C70E4D86705B}\RP30\A0002693.exe (Trojan.Vaklik) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{591E90BF-11C5-4D10-9885-C70E4D86705B}\RP30\A0002899.exe (Trojan.Vaklik) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{591E90BF-11C5-4D10-9885-C70E4D86705B}\RP30\A0002916.exe (Trojan.Vaklik) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{591E90BF-11C5-4D10-9885-C70E4D86705B}\RP30\A0002931.exe (Trojan.Vaklik) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{591E90BF-11C5-4D10-9885-C70E4D86705B}\RP30\A0002948.exe (Trojan.Vaklik) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{591E90BF-11C5-4D10-9885-C70E4D86705B}\RP30\A0002962.exe (Trojan.Vaklik) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{591E90BF-11C5-4D10-9885-C70E4D86705B}\RP30\A0002984.exe (Trojan.Vaklik) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{591E90BF-11C5-4D10-9885-C70E4D86705B}\RP30\A0003006.exe (Trojan.Vaklik) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{591E90BF-11C5-4D10-9885-C70E4D86705B}\RP30\A0003029.exe (Trojan.Vaklik) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{591E90BF-11C5-4D10-9885-C70E4D86705B}\RP30\A0003046.exe (Trojan.Vaklik) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{591E90BF-11C5-4D10-9885-C70E4D86705B}\RP30\A0003067.exe (Trojan.Vaklik) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{591E90BF-11C5-4D10-9885-C70E4D86705B}\RP30\A0003088.exe (Trojan.Vaklik) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{591E90BF-11C5-4D10-9885-C70E4D86705B}\RP30\A0003103.exe (Trojan.Vaklik) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{591E90BF-11C5-4D10-9885-C70E4D86705B}\RP31\A0003117.exe (Trojan.Vaklik) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{591E90BF-11C5-4D10-9885-C70E4D86705B}\RP31\A0003135.exe (Trojan.Vaklik) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{591E90BF-11C5-4D10-9885-C70E4D86705B}\RP32\A0003147.exe (Trojan.Vaklik) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{591E90BF-11C5-4D10-9885-C70E4D86705B}\RP33\A0003154.exe (Trojan.Vaklik) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{591E90BF-11C5-4D10-9885-C70E4D86705B}\RP33\A0003194.exe (Trojan.Vaklik) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{591E90BF-11C5-4D10-9885-C70E4D86705B}\RP33\A0003212.exe (Trojan.Vaklik) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{591E90BF-11C5-4D10-9885-C70E4D86705B}\RP33\A0004212.exe (Trojan.Vaklik) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{591E90BF-11C5-4D10-9885-C70E4D86705B}\RP33\A0006213.exe (Trojan.Vaklik) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{591E90BF-11C5-4D10-9885-C70E4D86705B}\RP33\A0007213.exe (Trojan.Vaklik) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{591E90BF-11C5-4D10-9885-C70E4D86705B}\RP33\A0007233.exe (Trojan.Vaklik) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{591E90BF-11C5-4D10-9885-C70E4D86705B}\RP33\A0008234.exe (Trojan.Vaklik) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{591E90BF-11C5-4D10-9885-C70E4D86705B}\RP33\A0008249.exe (Trojan.Vaklik) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{591E90BF-11C5-4D10-9885-C70E4D86705B}\RP34\A0008261.exe (Trojan.Vaklik) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{591E90BF-11C5-4D10-9885-C70E4D86705B}\RP34\A0008279.exe (Trojan.Vaklik) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{591E90BF-11C5-4D10-9885-C70E4D86705B}\RP34\A0008295.exe (Trojan.Vaklik) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{591E90BF-11C5-4D10-9885-C70E4D86705B}\RP34\A0008316.exe (Trojan.Vaklik) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{591E90BF-11C5-4D10-9885-C70E4D86705B}\RP35\A0008357.exe (Trojan.Vaklik) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{591E90BF-11C5-4D10-9885-C70E4D86705B}\RP35\A0008376.exe (Trojan.Vaklik) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{591E90BF-11C5-4D10-9885-C70E4D86705B}\RP35\A0008473.exe (Trojan.Vaklik) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{591E90BF-11C5-4D10-9885-C70E4D86705B}\RP35\A0009474.exe (Trojan.Vaklik) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{591E90BF-11C5-4D10-9885-C70E4D86705B}\RP35\A0009646.exe (Trojan.Vaklik) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{591E90BF-11C5-4D10-9885-C70E4D86705B}\RP36\A0009651.exe (Trojan.Vaklik) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{591E90BF-11C5-4D10-9885-C70E4D86705B}\RP36\A0010655.exe (Trojan.Vaklik) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{591E90BF-11C5-4D10-9885-C70E4D86705B}\RP36\A0010678.exe (Trojan.Vaklik) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{591E90BF-11C5-4D10-9885-C70E4D86705B}\RP37\A0010711.exe (Trojan.Vaklik) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{591E90BF-11C5-4D10-9885-C70E4D86705B}\RP38\A0010720.exe (Trojan.Vaklik) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{591E90BF-11C5-4D10-9885-C70E4D86705B}\RP38\A0010741.exe (Trojan.Vaklik) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{591E90BF-11C5-4D10-9885-C70E4D86705B}\RP39\A0010751.exe (Trojan.Vaklik) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{591E90BF-11C5-4D10-9885-C70E4D86705B}\RP39\A0010773.exe (Trojan.Vaklik) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{591E90BF-11C5-4D10-9885-C70E4D86705B}\RP39\A0010795.exe (Trojan.Vaklik) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{591E90BF-11C5-4D10-9885-C70E4D86705B}\RP39\A0010814.exe (Trojan.Vaklik) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{591E90BF-11C5-4D10-9885-C70E4D86705B}\RP39\A0010936.exe (Trojan.Vaklik) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{591E90BF-11C5-4D10-9885-C70E4D86705B}\RP40\A0010954.exe (Trojan.Vaklik) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{591E90BF-11C5-4D10-9885-C70E4D86705B}\RP40\A0010982.exe (Trojan.Vaklik) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{591E90BF-11C5-4D10-9885-C70E4D86705B}\RP40\A0011007.exe (Trojan.Vaklik) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{591E90BF-11C5-4D10-9885-C70E4D86705B}\RP40\A0012006.exe (Trojan.Vaklik) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{591E90BF-11C5-4D10-9885-C70E4D86705B}\RP40\A0012030.exe (Trojan.Vaklik) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{591E90BF-11C5-4D10-9885-C70E4D86705B}\RP40\A0012063.exe (Trojan.Vaklik) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{591E90BF-11C5-4D10-9885-C70E4D86705B}\RP41\A0012073.exe (Trojan.Vaklik) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{591E90BF-11C5-4D10-9885-C70E4D86705B}\RP41\A0012098.exe (Trojan.Vaklik) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\ckvo.exe (Trojan.Agent) -> Quarantined and deleted successfully.

Aca le envio el reporte de combofix, no he podido entrar aun a mi correo de hotmailComboFix 08-08-08.01 - ISABEL CRIS 2008-08-08 8:57:21.1 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.2.1252.1.3082.18.130 [GMT -5:00]
Se ejecuta desde: C:\Documents and Settings\ISABEL CRIS\Escritorio\ComboFix.exe
* Creado un nuevo punto de restauración

ADVERTENCIA - ESTE EQUIPO NO TIENE INSTALADA LA CONSOLA DE RECUPERACION!
.

(((((((((((((((((((((((((((((((((((( Otras eliminaciones )))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\1rfw8hjr.com
C:\6.bat
C:\autorun.inf
C:\ffojc.com
C:\fi.cmd
C:\hgu.bat
C:\k6wkwon2.exe
C:\kn6jhgc.cmd
C:\svdioajm.cmd
C:\tyktjfww.exe
C:\vmhr.bat
C:\WINDOWS\system32\ckvo.exe
C:\WINDOWS\system32\ckvo0.dll
C:\WINDOWS\system32\ckvo1.dll
D:\1rfw8hjr.com
D:\33gmhso.bat
D:\6.bat
D:\Autorun.inf
D:\ffojc.com
D:\fi.cmd
D:\hgu.bat
D:\ivcvknr.bat
D:\k6wkwon2.exe
D:\kn6jhgc.cmd
D:\svdioajm.cmd
D:\tyktjfww.exe
D:\vmhr.bat

.
(((((((((((((((((( Archivos creados desde 2008-07-08 - 2008-08-08 )))))))))))))))))))))))))))))))))
.

2008-08-07 01:32 . 2008-08-07 01:32 <DIR> d-------- C:\Archivos de programa\Microsoft Silverlight
2008-08-06 09:51 . 2008-08-06 09:51 <DIR> d-------- C:\Documents and Settings\ISABEL CRIS\Datos de programa\Malwarebytes
2008-08-06 09:51 . 2008-08-06 09:51 <DIR> d-------- C:\Documents and Settings\All Users\Datos de programa\Malwarebytes
2008-08-06 09:51 . 2008-08-06 09:51 <DIR> d-------- C:\Archivos de programa\Malwarebytes' Anti-Malware
2008-08-06 09:51 . 2008-07-30 20:07 38,472 --a------ C:\WINDOWS\system32\drivers\mbamswissarmy.sys
2008-08-06 09:51 . 2008-07-30 20:07 17,144 --a------ C:\WINDOWS\system32\drivers\mbam.sys
2008-08-05 10:12 . 2008-08-05 10:12 <DIR> d-------- C:\WINDOWS\system32\Kaspersky Lab
2008-08-05 09:55 . 2008-08-05 09:55 <DIR> d-------- C:\Documents and Settings\All Users\Datos de programa\Yahoo! Companion
2008-08-05 09:50 . 2008-08-05 09:50 <DIR> d-------- C:\Archivos de programa\Yahoo!
2008-08-05 09:49 . 2008-08-05 09:50 <DIR> d-------- C:\Archivos de programa\CCleaner
2008-08-05 09:15 . 2008-08-05 09:15 <DIR> d-------- C:\WINDOWS\system32\DGL
2008-08-05 08:47 . 2008-08-05 09:16 90,474 -r-hs---- C:\xvlyb.exe
2008-08-04 16:32 . 2008-08-04 16:32 <DIR> d-------- C:\Archivos de programa\Trend Micro
2008-08-03 14:02 . 2008-08-04 11:19 89,885 -r-hs---- C:\xqf.com
2008-07-31 19:59 . 2008-07-31 19:59 <DIR> d-------- C:\Archivos de programa\MSXML 4.0
2008-07-31 19:20 . 2008-08-01 19:30 87,215 -r-hs---- C:\e.com
2008-07-31 11:03 . 2008-07-31 11:03 <DIR> d-------- C:\Archivos de programa\MSXML 6.0
2008-07-30 19:21 . 2008-06-14 12:59 272,512 --------- C:\WINDOWS\system32\drivers\bthport.sys
2008-07-30 19:21 . 2008-06-14 12:59 272,512 -----c--- C:\WINDOWS\system32\dllcache\bthport.sys
2008-07-30 18:19 . 2007-07-30 19:19 271,224 --a------ C:\WINDOWS\system32\mucltui.dll
2008-07-30 18:19 . 2007-07-30 19:19 207,736 --a------ C:\WINDOWS\system32\muweb.dll
2008-07-30 18:19 . 2007-07-30 19:18 30,072 --a------ C:\WINDOWS\system32\mucltui.dll.mui
2008-07-30 10:08 . 2008-07-30 10:08 0 --a------ C:\WINDOWS\nsreg.dat
2008-07-28 13:02 . 2008-07-28 13:02 <DIR> d-------- C:\Archivos de programa\AGEIA Technologies
2008-07-27 19:44 . 2008-08-04 10:59 <DIR> d-------- C:\Documents and Settings\ISABEL CRIS\Contacts
2008-07-27 19:43 . 2007-10-17 13:53 43,816 --a------ C:\WINDOWS\system32\drivers\fssfltr.sys
2008-07-27 19:42 . 2006-11-29 13:06 3,426,072 --a------ C:\WINDOWS\system32\d3dx9_32.dll
2008-07-27 19:41 . 2008-07-27 19:41 <DIR> d-------- C:\Archivos de programa\Microsoft SQL Server Compact Edition
2008-07-27 19:35 . 2008-07-27 19:35 244 --ah----- C:\sqmnoopt08.sqm
2008-07-27 19:35 . 2008-07-27 19:35 232 --ah----- C:\sqmdata08.sqm
2008-07-27 19:29 . 2008-07-27 19:29 268 --ah----- C:\sqmdata07.sqm
2008-07-27 19:29 . 2008-07-27 19:29 244 --ah----- C:\sqmnoopt07.sqm
2008-07-27 19:28 . 2008-07-27 19:29 <DIR> d-------- C:\Archivos de programa\Windows Live Toolbar
2008-07-27 19:28 . 2008-07-27 19:28 <DIR> d-------- C:\Archivos de programa\Windows Live Favorites
2008-07-27 19:26 . 2008-07-27 19:43 <DIR> d----c--- C:\WINDOWS\system32\DRVSTORE
2008-07-27 19:12 . 2008-07-27 19:25 <DIR> d--hsc--- C:\Archivos de programa\Archivos comunes\WindowsLiveInstaller
2008-07-27 19:11 . 2008-07-27 19:11 <DIR> d-------- C:\Documents and Settings\All Users\Datos de programa\WLInstaller
2008-07-26 12:59 . 2008-07-26 12:59 <DIR> d-------- C:\Archivos de programa\Copy Rdr Fast
2008-07-24 12:51 . 2008-07-25 21:14 87,297 -r-hs---- C:\g2pfnid.com
2008-07-22 19:59 . 2008-07-22 19:59 <DIR> d-------- C:\Documents and Settings\ISABEL CRIS\Datos de programa\ZoomBrowser EX
2008-07-22 19:56 . 2008-07-22 19:56 <DIR> d-------- C:\Documents and Settings\All Users\Datos de programa\ZoomBrowser
2008-07-22 19:56 . 2008-07-22 19:57 <DIR> d-------- C:\Archivos de programa\Canon
2008-07-22 19:55 . 2008-07-22 19:55 <DIR> d-------- C:\Archivos de programa\Archivos comunes\Canon
2008-07-22 13:59 . 2008-07-22 13:59 <DIR> d-------- C:\Archivos de programa\Windows Media Connect 2
2008-07-22 13:59 . 2007-04-03 19:00 221,184 --a------ C:\WINDOWS\system32\wmpns.dll
2008-07-22 13:56 . 2008-07-22 13:58 <DIR> d-------- C:\4f4d3c2a06eaeca3ff87a201986bb33f
2008-07-19 15:19 . 2008-07-19 15:19 <DIR> d-------- C:\KONAMI
2008-07-18 17:29 . 2008-07-21 07:54 118,782 -r-hs---- C:\ybj8df.exe
2008-07-18 13:39 . 2008-07-18 13:39 587,264 --a------ C:\WINDOWS\WLXPGSS.SCR
2008-07-16 20:31 . 2008-07-16 20:31 <DIR> d-------- C:\Documents and Settings\ISABEL CRIS\Datos de programa\MSNInstaller
2008-07-16 20:19 . 2007-07-30 19:19 43,352 --a------ C:\WINDOWS\system32\wups2.dll
2008-07-16 20:19 . 2007-07-30 19:19 38,232 --a------ C:\WINDOWS\system32\wucltui.dll.mui
2008-07-16 20:19 . 2007-07-30 19:18 30,040 --a------ C:\WINDOWS\system32\wuaucpl.cpl.mui
2008-07-16 20:19 . 2007-07-30 19:20 30,040 --a------ C:\WINDOWS\system32\wuapi.dll.mui
2008-07-16 20:19 . 2007-07-30 19:18 20,824 --a------ C:\WINDOWS\system32\wuaueng.dll.mui
2008-07-16 20:04 . 2008-07-17 12:34 <DIR> d-------- C:\WINDOWS\SxsCaPendDel
2008-07-16 13:06 . 2008-07-16 20:03 115,233 -r-hs---- C:\p83gjy.exe
2008-07-15 11:41 . 2008-07-26 12:59 <DIR> d-------- C:\Documents and Settings\All Users\Datos de programa\File dvd base road
2008-07-15 11:40 . 2008-07-26 13:00 <DIR> d-------- C:\Documents and Settings\ISABEL CRIS\Datos de programa\Copy Rdr Fast
2008-07-15 11:40 . 2008-07-15 11:40 <DIR> d-------- C:\Archivos de programa\Circle Developement
2008-07-15 11:36 . 2008-07-15 12:05 116,862 -r-hs---- C:\k.com
2008-07-14 19:34 . 2008-07-16 13:05 133,840 -r-hs---- C:\31n3b2h.exe
2008-07-10 20:04 . 2008-07-10 20:33 117,255 -r-hs---- C:\0gjn3yw.exe
2008-07-08 20:14 . 2008-07-08 20:14 <DIR> d-------- C:\WINDOWS\Sun
2008-07-08 20:08 . 2008-07-08 20:08 <DIR> d-------- C:\Archivos de programa\Sun
2008-07-08 20:08 . 2008-06-10 02:32 73,728 --a------ C:\WINDOWS\system32\javacpl.cpl
2008-07-08 20:07 . 2008-07-08 20:08 <DIR> d-------- C:\Archivos de programa\Java
2008-07-08 20:02 . 2008-07-08 20:02 <DIR> d-------- C:\Archivos de programa\Archivos comunes\Java
2008-07-08 19:18 . 2008-07-08 19:18 <DIR> d-------- C:\Documents and Settings\ISABEL CRIS\Datos de programa\Ahead
2008-07-08 18:32 . 2008-07-08 18:32 <DIR> d--hs---- C:\WINDOWS\ftpcache
2008-07-08 18:32 . 2008-07-08 18:32 917,504 --a------ C:\WINDOWS\system32\FLASH.OCX
2008-07-08 12:33 . 2008-07-08 12:33 268 --ah----- C:\sqmdata06.sqm
2008-07-08 12:33 . 2008-07-08 12:33 244 --ah----- C:\sqmnoopt06.sqm
2008-07-08 12:32 . 2008-07-08 12:32 268 --ah----- C:\sqmdata05.sqm
2008-07-08 12:32 . 2008-07-08 12:32 244 --ah----- C:\sqmnoopt05.sqm
2008-07-08 12:25 . 2008-07-08 13:57 132,906 -r-hs---- C:\n6j6pc0.com
2008-07-08 12:23 . 2008-07-08 12:23 268 --ah----- C:\sqmdata04.sqm
2008-07-08 12:23 . 2008-07-08 12:23 244 --ah----- C:\sqmnoopt04.sqm
2008-07-08 12:17 . 2008-07-08 12:17 <DIR> d-------- C:\Documents and Settings\All Users\Datos de programa\McAfee
2008-07-08 11:51 . 2006-04-05 04:17 77,824 -ra------ C:\WINDOWS\system32\HPZIDS01.dll
2008-07-08 11:51 . 2006-03-22 21:10 48,128 --a------ C:\WINDOWS\system32\hpzll463.dll
2008-07-08 11:49 . 2005-08-14 18:16 25,856 --a------ C:\WINDOWS\system32\drivers\usbprint.sys
2008-07-08 11:49 . 2005-08-14 18:16 25,856 --a--c--- C:\WINDOWS\system32\dllcache\usbprint.sys
2008-07-08 10:29 . 2008-07-08 10:29 172 --ah----- C:\sqmnoopt03.sqm
2008-07-08 10:29 . 2008-07-08 10:29 172 --ah----- C:\sqmdata03.sqm
2008-07-08 10:27 . 2008-07-08 10:27 268 --ah----- C:\sqmdata02.sqm
2008-07-08 10:27 . 2008-07-08 10:27 244 --ah----- C:\sqmnoopt02.sqm
2008-07-08 10:01 . 2008-07-08 10:01 268 --ah----- C:\sqmdata01.sqm
2008-07-08 10:01 . 2008-07-08 10:01 244 --ah----- C:\sqmnoopt01.sqm
2008-07-08 09:59 . 2008-07-08 10:55 <DIR> d-------- C:\Archivos de programa\Webshots
2008-07-08 09:59 . 2008-08-08 08:37 2,359,350 --a------ C:\WINDOWS\webshots.bmp
2008-07-08 09:59 . 2000-03-09 14:55 610,304 --a------ C:\WINDOWS\Webshots.scr
2008-07-08 09:59 . 2000-03-09 14:56 28,672 --a------ C:\WINDOWS\WebshotsUninstall.exe
2008-07-08 09:59 . 2008-08-08 08:37 1,067 --a------ C:\WINDOWS\webshots.ini
2008-07-08 09:54 . 2008-07-08 09:54 <DIR> d-------- C:\Documents and Settings\All Users\Datos de programa\ESET
2008-07-08 09:54 . 2008-07-08 09:54 <DIR> d-------- C:\Archivos de programa\ESET
2008-07-08 09:49 . 2008-08-08 08:42 <DIR> d-a------ C:\Documents and Settings\All Users\Datos de programa\TEMP
2008-07-08 09:49 . 2008-07-08 09:49 <DIR> d-------- C:\Archivos de programa\Classic Menu for Office
2008-07-08 09:39 . 2006-10-26 19:58 30,512 --a------ C:\WINDOWS\system32\mdimon.dll
2008-07-08 09:38 . 2008-07-08 09:38 <DIR> d-------- C:\Archivos de programa\Microsoft Works
2008-07-08 09:35 . 2008-07-08 09:35 <DIR> d-------- C:\Archivos de programa\Microsoft.NET
2008-07-08 09:32 . 2008-07-08 10:26 <DIR> d-------- C:\WINDOWS\SHELLNEW
2008-07-08 09:31 . 2008-07-31 11:06 <DIR> d-------- C:\Documents and Settings\All Users\Datos de programa\Microsoft Help
2008-07-08 09:30 . 2008-07-08 09:30 <DIR> dr-h----- C:\MSOCache
2008-07-08 09:28 . 2008-07-08 09:28 <DIR> d-------- C:\Documents and Settings\All Users\Datos de programa\Messenger Plus!
2008-07-08 09:26 . 2008-07-08 09:26 <DIR> d-------- C:\WINDOWS\system32\es-es
2008-07-08 09:21 . 2008-08-08 08:36 <DIR> d-------- C:\WINDOWS\system32\LogFiles
2008-07-08 09:20 . 2008-07-22 13:57 <DIR> d-------- C:\WINDOWS\system32\drivers\umdf
2008-07-08 09:18 . 2008-07-08 09:42 <DIR> d-------- C:\Archivos de programa\Power Translator
2008-07-08 09:17 . 2008-07-08 09:17 <DIR> d-------- C:\Archivos de programa\BVRP Software
2008-07-08 09:15 . 2008-07-08 09:15 <DIR> d-------- C:\Archivos de programa\XP Codec Pack
2008-07-08 09:15 . 2008-07-08 09:16 <DIR> d-------- C:\Archivos de programa\Winamp
2008-07-08 09:14 . 2008-07-15 11:40 <DIR> d-------- C:\Archivos de programa\Messenger Plus! Live
2008-07-08 09:14 . 2008-07-08 09:14 268 --ah----- C:\sqmdata00.sqm
2008-07-08 09:14 . 2008-07-08 09:14 244 --ah----- C:\sqmnoopt00.sqm
2008-07-08 09:13 . 2008-07-31 11:01 <DIR> d-------- C:\Archivos de programa\Windows Live
2008-07-08 09:12 . 2008-07-08 09:12 <DIR> d-------- C:\Archivos de programa\Elaborate Bytes
2008-07-08 09:11 . 2008-07-08 09:11 <DIR> d-------- C:\Archivos de programa\CloneCD-SM
2008-07-08 09:09 . 2008-07-08 09:09 <DIR> d-------- C:\Archivos de programa\SlySoft
2008-07-08 09:06 . 2008-07-08 09:06 <DIR> d-------- C:\Documents and Settings\All Users\Datos de programa\Ahead
2008-07-08 09:05 . 2008-07-08 09:05 <DIR> d-------- C:\Documents and Settings\All Users\Datos de programa\Nero
2008-07-08 09:05 . 2008-07-08 09:05 <DIR> d-------- C:\Archivos de programa\Nero
2008-07-08 09:05 . 2008-07-08 09:05 <DIR> d-------- C:\Archivos de programa\Archivos comunes\Ahead
2008-07-08 09:02 . 2008-07-08 09:02 <DIR> d-------- C:\Archivos de programa\Archivos comunes\Adobe
2008-07-08 08:55 . 2008-07-08 08:59 <DIR> d-------- C:\Archivos de programa\Microsoft Student

.
(((((((((((((((((((((((((((((((((((((( Reporte Find3M )))))))))))))))))))))))))))))))))))))))))))))))))) )
.
2008-07-08 12:47 --------- d-----w C:\Archivos de programa\microsoft frontpage
2008-07-08 12:44 --------- d-----w C:\Archivos de programa\Servicios en línea
2008-06-20 17:36 248,320 ----a-w C:\WINDOWS\system32\mswsock.dll
2008-06-20 10:44 360,960 ----a-w C:\WINDOWS\system32\drivers\tcpip.sys
2008-06-20 10:44 138,368 ----a-w C:\WINDOWS\system32\drivers\afd.sys
2008-06-20 09:32 225,920 ----a-w C:\WINDOWS\system32\drivers\tcpip6.sys
.

((((((((((((((((((((((((((((((((( Cargando Puntos Reg ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
REGEDIT4
*Nota* entradas vac¡as & entradas leg¡timas predeterminadas no son mostradas

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Curre ntVersion\Run]
"MsnMsgr"="C:\Archivos de programa\Windows Live\Messenger\MsnMsgr.Exe" [2007-10-18 11:34 5724184]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2007-04-03 19:00 15360]
"L08EXLRD_2299375"="C:\Archivos de programa\Microsoft Student\Microsoft Student con Encarta Premium 2008 DVD\EDICT.EXE" [2007-05-23 13:00 351000]
"bolt roam"="C:\DOCUME~1\ISABEL~1\DATOSD~1\COPYRD~1\setu p wait.exe" [2008-07-26 12:58 536064]
"SystemKbs"="C:\WINDOWS\SYSTEM32\DGL\SVCHOST.E XE" [2007-04-28 19:06 32768]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Curre ntVersion\RunOnce]
"PowerTranslator Pro BVRPOLR"="C:\ARCHIV~1\ARCHIV~1\INSTAL~1\PROFES~1\R unTime\0701\Intel32\Ctor.dll" [2002-12-02 13:33 57344]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Run]
"Adobe Reader Speed Launcher"="C:\Archivos de programa\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2007-05-11 02:06 40048]
"NeroFilterCheck"="C:\Archivos de programa\Archivos comunes\Ahead\Lib\NeroCheck.exe" [2007-03-01 15:57 153136]
"CloneCDTray"="C:\Archivos de programa\SlySoft\CloneCD\CloneCDTray.exe" [2006-09-28 14:21 57344]
"egui"="C:\Archivos de programa\ESET\ESET NOD32 Antivirus\egui.exe" [2008-02-29 14:54 1443072]
"SunJavaUpdateSched"="C:\Archivos de programa\Java\jre1.6.0_07\bin\jusched.exe" [2008-06-10 04:27 144784]
"Base road long save"="C:\Documents and Settings\All Users\Datos de programa\File dvd base road\SEEK WAY.exe" [2008-08-08 09:06 1002496]
"RTHDCPL"="RTHDCPL.EXE" [2006-10-30 06:49 16269312 C:\WINDOWS\RTHDCPL.exe]
"SkyTel"="SkyTel.EXE" [2006-05-16 05:04 2879488 C:\WINDOWS\SkyTel.exe]
"VTTimer"="VTTimer.exe" [2006-09-21 03:36 53248 C:\WINDOWS\system32\VTTimer.exe]
"S3Trayp"="S3trayp.exe" [2006-10-09 16:14 176128 C:\WINDOWS\system32\S3Trayp.exe]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\Cur rentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2007-04-03 19:00 15360]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"vidc.ffds"= ffdshow.ax

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusDisableNotify"=dword:00000001
"UpdatesDisableNotify"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpo licy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpo licy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"C:\\Archivos de programa\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"C:\\Archivos de programa\\Messenger\\msmsgs.exe"=
"C:\\Archivos de programa\\Windows Live\\Messenger\\msnmsgr.exe"=
"C:\\Archivos de programa\\Windows Live\\Messenger\\livecall.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpo licy\standardprofile\GloballyOpenPorts\List]
"9420:TCP"= 9420:TCP:Red Swoosh
"5000:UDP"= 5000:UDP:Red Swoosh
"3389:TCP"= 3389:TCP:@xpsp2res.dll,-22009

R0 videX32;videX32;C:\WINDOWS\system32\DRIVERS\videX3 2.sys [2006-02-22 22:38]
R0 xfilt;VIA SATA IDE Hot-plug Driver;C:\WINDOWS\system32\DRIVERS\xfilt.sys [2006-02-22 22:39]
R1 epfwtdir;epfwtdir;C:\WINDOWS\system32\DRIVERS\epfw tdir.sys [2008-02-29 14:56]
R2 fssfltr;FssFltr;C:\WINDOWS\system32\DRIVERS\fssflt r.sys [2007-10-17 13:53]
R2 fsssvc;Windows Live OneCare Protección infantil;C:\Archivos de programa\Windows Live\Protección infantil\fsssvc.exe []
R3 S3GIGP;S3GIGP;C:\WINDOWS\system32\DRIVERS\S3gIGPm. sys [2006-11-14 20:38]

[HKEY_CURRENT_USER\software\microsoft\windows\curre ntversion\explorer\mountpoints2\{00f04380-4cee-11dd-972d-00196628f8be}]
\Shell\AutoRun\command - G:\vmhr.bat
\Shell\explore\Command - G:\vmhr.bat
\Shell\open\Command - G:\vmhr.bat

[HKEY_CURRENT_USER\software\microsoft\windows\curre ntversion\explorer\mountpoints2\{00f04381-4cee-11dd-972d-00196628f8be}]
\Shell\AutoRun\command - H:\vmhr.bat
\Shell\explore\Command - H:\vmhr.bat
\Shell\open\Command - H:\vmhr.bat

[HKEY_CURRENT_USER\software\microsoft\windows\curre ntversion\explorer\mountpoints2\{25200ba1-4cfa-11dd-972f-00196628f8be}]
\Shell\AutoRun\command - I:\vmhr.bat
\Shell\explore\Command - I:\vmhr.bat
\Shell\open\Command - I:\vmhr.bat
.
Contenido de carpeta 'Tareas Programadas'

2008-08-08 C:\WINDOWS\Tasks\Comprobar actualizaciones de Windows Live Toolbar.job
- C:\Archivos de programa\Windows Live Toolbar\MSNTBUP.EXE [2007-10-19 11:20]
.
- - - - ORPHANS REMOVED - - - -

HKCU-Run-kamsoft - C:\WINDOWS\system32\ckvo.exe
HKLM-Run-fssui - C:\Archivos de programa\Windows Live\Protección infantil\fssui.exe


.
------- Supplementary Scan -------
.
FireFox -: Profile - C:\Documents and Settings\ISABEL CRIS\Datos de programa\Mozilla\Firefox\Profiles\obfu3ylp.default \
FireFox -: prefs.js - SEARCH.DEFAULTURL - hxxp://www.google.com/search?lr=&ie=UTF-8&oe=UTF-8&q=


************************************************** ************************

catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-08-08 09:06:20
Windows 5.1.2600 Service Pack 2 NTFS

escaneando procesos ocultos ...

escaneando entradas ocultas de autostart ...

escaneando archivos ocultos ...

el escaneo se completo con exito
archivos ocultos: 0

************************************************** ************************
.
------------------------ Other Running Processes ------------------------
.
C:\WINDOWS\system32\logonui.exe
C:\Archivos de programa\ESET\ESET NOD32 Antivirus\ekrn.exe
C:\Archivos de programa\Power Translator\LogoMedia TranslateDotNet Server.exe
C:\Archivos de programa\Archivos comunes\Microsoft Shared\VS7DEBUG\mdm.exe
C:\Archivos de programa\Canon\CAL\CALMAIN.exe
C:\Archivos de programa\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
C:\WINDOWS\system32\rdpclip.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\WgaTray.exe
C:\Archivos de programa\Internet Explorer\iexplore.exe
C:\Archivos de programa\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\DGL\SERVICES.EXE
C:\Archivos de programa\Webshots\WebshotsTray.exe
.
************************************************** ************************
.
Tiempo completado: 2008-08-08 939 - machine was rebooted
ComboFix-quarantined-files.txt 2008-08-08 1432

Pre-Run: 8,645,365,760 bytes libres
Post-Run: 8,765,579,264 bytes libres

280 --- E O F --- 2008-08-08 13:39:13

Descarga CCleaner y ejecútalo usando primero su opción de "Limpiador" para borrar cookies, temporales de internet y todos los archivos que este te muestre como obsoletos, y luego usa su opción de "Registro" para limpiar todo el registro de Windows (haciendo copia de seguridad).

Una vez que este termine de limpiar todo, actualiza "Java", hace una Desfragmentación del disco con la opción de Windows y pasa por www.windowsupdate.com para descargar todos los parches disponibles (si tu sistema lo permite)

• Descarga y ejecuta la utilidad Advanced WindowsCare, para reparar y optimizar a fondo tu PC.

Reinicia y nos contas los resultados.

Salu2