Foro de InfoSpyware - Foro de Hijackthis - Foro de Virus

hola amigos tengo laptos hp y un problemita el puntero se mueve solo al lado derecho no se que sea avese no deja hacer nada, si me pueden colaborar gracias dejo mi Hijathis

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 23:14:53, on 07/09/2008
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\SYSTEM32\WISPTIS.EXE
C:\Program Files\Bioscrypt\VeriSoft\Bin\AsGHost.exe
C:\Program Files\Common Files\microsoft shared\ink\TabTip.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\HP\QuickPlay\QPService.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Windows\ehome\ehtray.exe
C:\Windows\System32\rundll32.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Common Files\Microsoft Shared\Ink\InputPersonalization.exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: Aplicación auxiliar de vínculos de Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: VeriSoft Access Manager - {DF21F1DB-80C6-11D3-9483-B03D0EC10000} - C:\Program Files\Bioscrypt\VeriSoft\Bin\ItIEAddIn.dll
O4 - HKLM\..\Run: [QPService] "C:\Program Files\HP\QuickPlay\QPService.exe"
O4 - HKLM\..\Run: [QlbCtrl] %ProgramFiles%\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start
O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICIO LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICIO LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'Servicio de red')
O8 - Extra context menu item: E&xportar a Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O13 - Gopher Prefix:
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/spanish/kavwebscan_unicode.cab
O16 - DPF: {56762DEC-6B0D-4AB4-A8AD-989993B5D08B} (OnlineScanner Control) - http://www.eset.eu/buxus/docs/OnlineScanner.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O20 - AppInit_DLLs: avgrsstx.dll
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O23 - Service: Ares Chatroom server (AresChatServer) - Ares Development Group - C:\Program Files\Ares\chatServer.exe
O23 - Service: AVG8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: AVG8 Firewall (avgfws8) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgfws8.exe
O23 - Service: Com4Qlb - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4Qlb.exe
O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: QuickPlay Background Capture Service (QBCS) (QPCapSvc) - Unknown owner - C:\Program Files\HP\QuickPlay\Kernel\TV\QPCapSvc.exe
O23 - Service: QuickPlay Task Scheduler (QTS) (QPSched) - Unknown owner - C:\Program Files\HP\QuickPlay\Kernel\TV\QPSched.exe
O23 - Service: @%SystemRoot%\System32\TuneUpDefragService.exe,-1 (TuneUp.Defrag) - TuneUp Software GmbH - C:\Windows\System32\TuneUpDefragService.exe

--
End of file - 5192 bytes
les agradesco que me ayuden ya me tiene mamado este virus
suerte

Hola te doy la Bienvenida al Foro de Infospyware

Solo una pregunta, intentaste con otro y el problema es igual.?

Realiza lo siguiente:

Descarga, actualiza y ejecuta el programa:

• SUPERAntiSpyware

Descarga CCleaner y ejecútalo usando primero su opción de "Limpiador" para borrar cookies, temporales de Internet y todos los archivos que este te muestre como obsoletos, y luego usa su opción de "Registro" para limpiar todo el registro de Windows (haciendo copia de seguridad).


- Descarga la herramienta ComboFix.exe y guárdala en el escritorio.

• Desactiva temporalmente el Antivirus y/o Antispyware.
• Cierra todas las ventanas abiertas.
• Hacele doble clic al archivo ComboFix.exe y seguí las instrucciones.
• Cuando termine, generara un registro en C:\ComboFix.txt.
  • *Nota* Mientras CF este trabajando no mover el mouse ya que pararía su proceso.
  • *Nota* ComboFix puede reiniciar automáticamente el PC para completar el proceso de eliminación.

• Reinicia y pega el reporte de C:\ComboFix.txt en este mismo mensaje. para analizarlo.

Saludos.

hola thecat re ,gracias por ayudarme
aunque todavia se sigue moviendo el puntero a la derecha y se para en la barra de tareas
este es el reporte combofix

ComboFix 08-09-05.09 - personal 2008-09-08 20:25:23.2 - NTFSx86
Microsoft® Windows Vista™ Home Premium 6.0.6001.1.1252.1.3082.18.2140 [GMT -4.5:30]
Se ejecuta desde: C:\Users\personal\Desktop\ComboFix.exe
.

(((((((((((((((((( Archivos creados desde 2008-08-09 - 2008-09-09 )))))))))))))))))))))))))))))))))
.

2008-09-05 12:45 . 2008-09-05 12:45 <DIR> d-------- C:\Program Files\Trend Micro
2008-09-04 10:22 . 2008-09-05 12:21 <DIR> d--h----- C:\$AVG8.VAULT$
2008-09-04 10:02 . 2008-09-04 10:02 268 --ah----- C:\sqmdata19.sqm
2008-09-04 10:02 . 2008-09-04 10:02 244 --ah----- C:\sqmnoopt19.sqm
2008-09-03 23:44 . 2008-09-03 23:44 268 --ah----- C:\sqmdata18.sqm
2008-09-03 23:44 . 2008-09-03 23:44 244 --ah----- C:\sqmnoopt18.sqm
2008-09-03 23:39 . 2008-09-03 23:39 268 --ah----- C:\sqmdata17.sqm
2008-09-03 23:39 . 2008-09-03 23:39 244 --ah----- C:\sqmnoopt17.sqm
2008-09-03 23:34 . 2008-09-03 23:34 268 --ah----- C:\sqmdata16.sqm
2008-09-03 23:34 . 2008-09-03 23:34 244 --ah----- C:\sqmnoopt16.sqm
2008-09-03 22:55 . 2008-09-08 20:11 <DIR> d-------- C:\Windows\System32\drivers\Avg
2008-09-03 22:55 . 2008-09-03 23:17 <DIR> d-------- C:\Program Files\AVG
2008-09-03 22:55 . 2008-09-03 23:33 97,928 --a------ C:\Windows\System32\drivers\avgldx86.sys
2008-09-03 22:55 . 2008-09-03 23:33 69,128 --a------ C:\Windows\System32\drivers\avgwfpx.sys
2008-09-03 22:55 . 2008-09-03 23:33 12,936 --a------ C:\Windows\System32\drivers\avgrkx86.sys
2008-09-03 22:55 . 2008-09-03 23:33 10,520 --a------ C:\Windows\System32\avgrsstx.dll
2008-09-03 22:51 . 2008-09-03 22:51 268 --ah----- C:\sqmdata15.sqm
2008-09-03 22:51 . 2008-09-03 22:51 244 --ah----- C:\sqmnoopt15.sqm
2008-09-03 22:42 . 2008-09-03 22:42 268 --ah----- C:\sqmdata14.sqm
2008-09-03 22:42 . 2008-09-03 22:42 244 --ah----- C:\sqmnoopt14.sqm
2008-09-03 22:13 . 2008-09-07 23:31 268 --ah----- C:\sqmdata13.sqm
2008-09-03 22:13 . 2008-09-07 23:31 244 --ah----- C:\sqmnoopt13.sqm
2008-09-03 19:36 . 2008-09-03 19:36 <DIR> d-------- C:\Windows\System32\Kaspersky Lab
2008-09-03 19:29 . 2008-09-07 14:28 268 --ah----- C:\sqmdata12.sqm
2008-09-03 19:29 . 2008-09-07 14:28 244 --ah----- C:\sqmnoopt12.sqm
2008-09-02 22:06 . 2008-06-19 17:24 28,544 --a------ C:\Windows\System32\drivers\pavboot.sys
2008-09-02 22:02 . 2008-09-02 22:02 <DIR> d-------- C:\Program Files\Panda Security
2008-09-02 16:50 . 2008-09-03 21:08 <DIR> d-------- C:\Program Files\EsetOnlineScanner
2008-09-02 16:20 . 2008-09-02 16:20 <DIR> d-------- C:\Program Files\CCleaner
2008-09-02 16:11 . 2008-09-02 16:11 <DIR> d-------- C:\Users\personal\AppData\Roaming\SUPERAntiSpyware .com
2008-09-02 16:11 . 2008-09-02 16:11 <DIR> d-------- C:\Users\All Users\SUPERAntiSpyware.com
2008-09-02 16:11 . 2008-09-02 16:11 <DIR> d-------- C:\ProgramData\SUPERAntiSpyware.com
2008-09-02 16:11 . 2008-09-04 19:23 <DIR> d-------- C:\Program Files\SUPERAntiSpyware
2008-09-02 12:52 . 2008-09-03 22:55 <DIR> d-------- C:\Users\All Users\avg8
2008-09-02 12:52 . 2008-09-03 22:55 <DIR> d-------- C:\ProgramData\avg8
2008-08-30 20:40 . 2008-09-04 12:08 <DIR> d-------- C:\Users\personal\AppData\Roaming\Lavasoft
2008-08-21 23:20 . 2008-08-21 23:20 <DIR> d-------- C:\Program Files\Microsoft Silverlight
2008-08-21 20:32 . 2008-07-19 00:39 1,811,656 --a------ C:\Windows\System32\wuaueng.dll
2008-08-21 20:32 . 2008-07-18 23:14 1,524,736 --a------ C:\Windows\System32\wucltux.dll
2008-08-21 20:32 . 2008-07-19 00:40 53,448 --a------ C:\Windows\System32\wuauclt.exe
2008-08-21 20:32 . 2008-07-19 00:40 45,768 --a------ C:\Windows\System32\wups2.dll
2008-08-21 20:31 . 2008-07-19 00:39 563,912 --a------ C:\Windows\System32\wuapi.dll
2008-08-21 20:31 . 2008-07-18 22:08 163,904 --a------ C:\Windows\System32\wuwebv.dll
2008-08-21 20:31 . 2008-07-18 23:14 83,456 --a------ C:\Windows\System32\wudriver.dll
2008-08-21 20:31 . 2008-07-19 00:40 36,552 --a------ C:\Windows\System32\wups.dll
2008-08-21 20:31 . 2008-07-18 20:44 31,232 --a------ C:\Windows\System32\wuapp.exe
2008-08-19 23:48 . 2008-09-07 14:04 268 --ah----- C:\sqmdata11.sqm
2008-08-19 23:48 . 2008-09-07 14:04 244 --ah----- C:\sqmnoopt11.sqm
2008-08-19 23:36 . 2008-08-19 23:36 355,584 --a------ C:\Windows\System32\TuneUpDefragService.exe
2008-08-19 23:36 . 2008-05-29 09:28 28,416 --a------ C:\Windows\System32\uxtuneup.dll
2008-08-19 23:36 . 2008-05-29 09:28 16,640 --a------ C:\Windows\System32\authuitu.dll
2008-08-19 23:03 . 2008-08-19 23:03 0 --a------ C:\Windows\cfgedit.INI
2008-08-19 22:37 . 2008-09-07 11:04 268 --ah----- C:\sqmdata10.sqm
2008-08-19 22:37 . 2008-09-07 11:04 244 --ah----- C:\sqmnoopt10.sqm
2008-08-19 22:15 . 2008-09-06 23:53 268 --ah----- C:\sqmdata09.sqm
2008-08-19 22:15 . 2008-09-06 23:53 244 --ah----- C:\sqmnoopt09.sqm
2008-08-19 21:21 . 2008-08-19 21:21 0 --ah----- C:\Windows\System32\drivers\Msft_User_WpdFs_01_00_ 00.Wdf
2008-08-19 00:15 . 2008-08-19 00:15 <DIR> d-------- C:\PerfLogs
2008-08-18 20:01 . 2008-08-18 20:08 1,905 --a------ C:\Windows\diagwrn.xml
2008-08-18 20:01 . 2008-08-18 20:08 1,905 --a------ C:\Windows\diagerr.xml
2008-08-18 11:26 . 2008-08-18 11:26 <DIR> d-------- C:\Users\All Users\WLInstaller
2008-08-18 11:26 . 2008-08-18 11:26 <DIR> d-------- C:\ProgramData\WLInstaller
2008-08-18 11:26 . 2008-08-18 11:43 <DIR> d-------- C:\Program Files\Windows Live
2008-08-18 11:26 . 2008-08-18 11:43 <DIR> d--hsc--- C:\Program Files\Common Files\WindowsLiveInstaller
2008-08-18 10:37 . 2006-11-09 00:48 356,352 --a------ C:\Windows\System32\nvusmb.exe
2008-08-18 10:37 . 2006-10-20 01:36 1,864 --a------ C:\Windows\System32\nvsmb.nvu
2008-08-16 23:22 . 2008-08-16 23:22 0 -rahs---- C:\Windows\System32\drivers\103C_HP_cNB_Pavilion tx2000 Notebook PC_Y5335KV_0U_QCNF8172M4C_EU_4A_I30E5_SQuanta_V88. 0A_F.08_T080418_WV3-0_LC0A_M3006_J250_7AMD_8F82_92.10_#080816_N10DE026 9;14E44328_(KN966UA#ABA)_XMOBILE_CN10_Z_2Rev 1.MRK
2008-08-15 12:06 . 2008-01-19 01:36 8,147,456 --a------ C:\Windows\System32\wmploc.DLL
2008-08-15 12:05 . 2008-01-19 03:06 704,512 --a------ C:\Windows\System32\SmiEngine.dll
2008-08-15 12:04 . 2008-01-19 03:04 305,152 --a------ C:\Windows\System32\msdelta.dll
2008-08-15 12:04 . 2008-01-19 03:04 258,560 --a------ C:\Windows\System32\dpx.dll
2008-08-15 12:04 . 2008-01-19 03:04 246,784 --a------ C:\Windows\System32\drvstore.dll
2008-08-15 12:04 . 2008-01-19 03:06 218,624 --a------ C:\Windows\System32\wdscore.dll
2008-08-15 12:04 . 2008-01-19 03:03 130,560 --a------ C:\Windows\System32\PkgMgr.exe
2008-08-15 12:04 . 2008-01-19 03:05 35,328 --a------ C:\Windows\System32\mspatcha.dll
2008-08-15 11:07 . 2008-07-15 21:02 2,048 --a------ C:\Windows\System32\tzres.dll
2008-08-15 11:03 . 2008-04-10 00:42 738,304 --a------ C:\Windows\System32\inetcomm.dll
2008-08-13 21:18 . 2008-08-19 09:04 <DIR> d-------- C:\DVDVideoSoft
2008-08-13 21:03 . 2008-08-13 21:22 <DIR> d-------- C:\Program Files\DVDVideoSoft
2008-08-13 21:03 . 2008-08-13 21:22 <DIR> d-------- C:\Program Files\Common Files\DVDVideoSoft
2008-08-12 00:05 . 2008-08-12 00:05 <DIR> d-------- C:\Users\personal\AppData\Roaming\Malwarebytes
2008-08-12 00:05 . 2008-08-12 00:05 <DIR> d-------- C:\Users\All Users\Malwarebytes
2008-08-12 00:05 . 2008-08-12 00:05 <DIR> d-------- C:\ProgramData\Malwarebytes
2008-08-10 23:48 . 2008-08-10 23:48 0 --a------ C:\Windows\nsreg.dat
2008-08-10 21:34 . 2008-08-10 21:34 <DIR> d-------- C:\Users\personal\AppData\Roaming\HP
2008-08-10 21:34 . 2008-08-10 21:34 <DIR> d-------- C:\Users\All Users\HP
2008-08-10 21:34 . 2008-08-10 21:34 <DIR> d-------- C:\ProgramData\HP

.
(((((((((((((((((((((((((((((((((((((( Reporte Find3M )))))))))))))))))))))))))))))))))))))))))))))))))) )
.
2008-09-02 20:41 --------- d-----w C:\Program Files\Common Files\Wise Installation Wizard
2008-08-28 01:11 --------- d-----w C:\Program Files\AdVantage
2008-08-20 04:07 --------- d-----w C:\Program Files\TuneUp Utilities 2008
2008-08-19 04:55 --------- d-----w C:\ProgramData\NVIDIA
2008-08-19 04:53 174 --sha-w C:\Program Files\desktop.ini
2008-08-19 04:47 --------- d-----w C:\Program Files\Windows Sidebar
2008-08-19 04:47 --------- d-----w C:\Program Files\Windows Photo Gallery
2008-08-19 04:47 --------- d-----w C:\Program Files\Windows Mail
2008-08-19 04:47 --------- d-----w C:\Program Files\Windows Journal
2008-08-19 04:47 --------- d-----w C:\Program Files\Windows Defender
2008-08-19 04:47 --------- d-----w C:\Program Files\Windows Collaboration
2008-08-19 04:47 --------- d-----w C:\Program Files\Windows Calendar
2008-08-19 04:36 82,432 ----a-w C:\Windows\System32\axaltocm.dll
2008-08-19 04:36 101,888 ----a-w C:\Windows\System32\ifxcardm.dll
2008-08-19 03:59 --------- d-----w C:\ProgramData\Microsoft Help
2008-08-17 04:48 --------- d-----w C:\Program Files\HP
2008-08-17 03:52 --------- d-----w C:\Program Files\Hewlett-Packard
2008-08-14 00:11 28,124 ----a-w C:\Users\personal\AppData\Roaming\nvModes.dat
2008-08-13 03:16 --------- d-----w C:\Program Files\Winamp
2008-08-07 14:10 --------- d-----w C:\Users\personal\AppData\Roaming\TuneUp Software
2008-08-07 14:10 --------- d-----w C:\ProgramData\TuneUp Software
2008-08-07 04:41 --------- d-----w C:\Users\personal\AppData\Roaming\VeriSoft Access Manager
2008-08-07 03:33 --------- d-----w C:\ProgramData\ESET
2008-08-07 03:15 --------- d-----w C:\Users\personal\AppData\Roaming\PeerNetworking
2008-08-06 02:49 9,892,864 ----a-w C:\Windows\System32\NlsLexicons000a.dll
2008-08-06 02:48 988,216 ----a-w C:\Windows\System32\winload.exe
2008-08-06 02:48 927,288 ----a-w C:\Windows\System32\winresume.exe
2008-08-06 02:48 615,992 ----a-w C:\Windows\System32\ci.dll
2008-08-06 02:48 6,656 ----a-w C:\Windows\System32\kbd106n.dll
2008-08-06 02:48 46,592 ----a-w C:\Windows\System32\setbcdlocale.dll
2008-08-06 02:48 40,960 ----a-w C:\Windows\System32\srclient.dll
2008-08-06 02:48 378,368 ----a-w C:\Windows\System32\srcore.dll
2008-08-06 02:48 318,464 ----a-w C:\Windows\System32\rstrui.exe
2008-08-06 02:48 19,000 ----a-w C:\Windows\System32\kd1394.dll
2008-08-06 02:48 14,848 ----a-w C:\Windows\System32\srdelayed.exe
2008-08-06 02:47 295,936 ----a-w C:\Windows\System32\gdi32.dll
2008-08-06 02:47 2,032,128 ----a-w C:\Windows\System32\win32k.sys
2008-08-06 02:45 14,848 ----a-w C:\Windows\System32\wshrm.dll
2008-08-06 02:45 113,664 ----a-w C:\Windows\system32\drivers\rmcast.sys
2008-08-06 02:44 540,672 ----a-w C:\Windows\AppPatch\AcLayers.dll
2008-08-06 02:44 458,752 ----a-w C:\Windows\AppPatch\AcSpecfc.dll
2008-08-06 02:44 4,240,384 ----a-w C:\Windows\System32\GameUXLegacyGDFs.dll
2008-08-06 02:44 2,560 ----a-w C:\Windows\AppPatch\AcRes.dll
2008-08-06 02:44 2,153,984 ----a-w C:\Windows\AppPatch\AcGenral.dll
2008-08-06 02:44 173,056 ----a-w C:\Windows\AppPatch\AcXtrnal.dll
2008-08-06 02:44 1,695,744 ----a-w C:\Windows\System32\gameux.dll
2008-08-05 14:08 428,544 ----a-w C:\Windows\System32\EncDec.dll
2008-08-05 14:08 293,376 ----a-w C:\Windows\System32\psisdecd.dll
2008-08-05 14:08 1,314,816 ----a-w C:\Windows\System32\quartz.dll
2008-08-05 14:07 --------- d-----w C:\Program Files\MSXML 4.0
2008-08-04 08:07 --------- d-----w C:\Program Files\Common Files\Adobe
2008-07-31 00:35 --------- d-----w C:\Users\personal\AppData\Roaming\CyberLink
2008-07-31 00:00 --------- d-----w C:\Users\personal\AppData\Roaming\Nero
2008-07-31 00:00 --------- d-----w C:\ProgramData\CyberLink
2008-07-31 00:00 --------- d-----w C:\Program Files\Real Alternative
2008-07-31 00:00 --------- d-----w C:\Program Files\QT Lite
2008-07-31 00:00 --------- d-----w C:\Program Files\Ares
2008-07-30 23:58 --------- d--h--w C:\Program Files\InstallShield Installation Information
2008-07-30 23:58 --------- d-----w C:\Program Files\CyberLink
2008-07-30 23:57 --------- d-----w C:\Program Files\Nero
2008-07-30 23:57 --------- d-----w C:\Program Files\Adobe Photoshop Cs3
2008-07-30 23:56 0 ---ha-w C:\Windows\system32\drivers\Msft_Kernel_SynTP_0100 0.Wdf
2008-07-30 23:56 --------- d-----w C:\Program Files\Synaptics
2008-07-30 23:50 --------- d-----w C:\Program Files\MSECache
2008-07-30 23:48 --------- d-----w C:\Program Files\HPQ
2008-07-30 23:46 --------- d-----w C:\Program Files\Microsoft Works
2008-07-30 22:46 --------- d-----w C:\Program Files\Microsoft.NET
2008-07-30 22:44 --------- d-----w C:\Program Files\Bioscrypt
2008-07-30 22:42 --------- d-----w C:\Program Files\Fingerprint Sensor
2008-07-30 22:40 --------- d-----w C:\Program Files\DAMN NFO Viewer
2008-07-30 22:39 --------- d-----w C:\Users\personal\AppData\Roaming\ESET
2008-07-30 22:37 --------- d-----w C:\ProgramData\Apple Computer
2008-07-30 22:36 87,328 ----a-w C:\Windows\System32\bcmwlcoi.dll
2008-07-30 22:36 3,481,600 ----a-w C:\Windows\System32\bcmihvsrv.dll
2008-07-30 22:36 3,141,632 ----a-w C:\Windows\System32\bcmihvui.dll
2008-07-30 22:36 1,187,320 ----a-w C:\Windows\system32\drivers\BCMWL6.SYS
2008-07-30 22:36 --------- d-----w C:\Users\personal\AppData\Roaming\InstallShield
2008-07-30 22:36 --------- d-----w C:\Program Files\Common Files\InstallShield
2008-07-30 22:36 --------- d-----w C:\Program Files\Broadcom
2008-07-30 22:31 319,456 ----a-w C:\Windows\DIFxAPI.dll
2008-07-30 22:31 --------- d-----w C:\Program Files\Realtek
2008-07-30 22:30 315,392 ----a-w C:\Windows\HideWin.exe
2008-07-30 22:30 --------- d-----w C:\Program Files\Common Files\Nero
2008-07-30 22:29 --------- d-----w C:\ProgramData\Nero
2008-07-30 22:23 --------- d-----w C:\ProgramData\AppData
2008-07-30 22:22 --------- d-sh--w C:\ProgramData\Plantillas
2008-07-30 22:22 --------- d-sh--w C:\ProgramData\Menú Inicio
2008-07-30 22:22 --------- d-sh--w C:\ProgramData\Favoritos
2008-07-30 22:22 --------- d-sh--w C:\ProgramData\Escritorio
2008-07-30 22:22 --------- d-sh--w C:\ProgramData\Documentos
2008-07-30 22:22 --------- d-sh--w C:\ProgramData\Datos de programa
2008-07-30 22:22 --------- d-sh--w C:\Program Files\Archivos comunes
2008-06-27 04:15 827,392 ----a-w C:\Windows\System32\wininet.dll
2008-06-19 03:31 361,984 ----a-w C:\Windows\System32\IPSECSVC.DLL
.

((((((((((((((((((((((((((((( snapshot@2008-09-04_22.08.31.44 )))))))))))))))))))))))))))))))))))))))))
.
- 2008-09-05 02:33:51 2,048 --sha-w C:\Windows\ServiceProfiles\LocalService\AppData\Lo cal\lastalive0.dat
+ 2008-09-09 00:39:19 2,048 --sha-w C:\Windows\ServiceProfiles\LocalService\AppData\Lo cal\lastalive0.dat
- 2008-09-05 02:33:51 2,048 --sha-w C:\Windows\ServiceProfiles\LocalService\AppData\Lo cal\lastalive1.dat
+ 2008-09-09 00:39:19 2,048 --sha-w C:\Windows\ServiceProfiles\LocalService\AppData\Lo cal\lastalive1.dat
- 2008-09-05 02:34:28 262,144 --sha-w C:\Windows\ServiceProfiles\LocalService\NTUSER.DAT
+ 2008-09-09 00:42:38 262,144 --sha-w C:\Windows\ServiceProfiles\LocalService\NTUSER.DAT
- 2008-09-05 02:35:32 262,144 --sha-w C:\Windows\ServiceProfiles\NetworkService\NTUSER.D AT
+ 2008-09-09 00:56:51 262,144 --sha-w C:\Windows\ServiceProfiles\NetworkService\NTUSER.D AT
+ 2008-09-09 00:56:51 262,144 ---ha-w C:\Windows\ServiceProfiles\NetworkService\ntuser.d at.LOG1
- 2008-09-05 02:30:55 262,144 ----a-w C:\Windows\System32\config\systemprofile\ntuser.da t
+ 2008-09-09 00:55:19 262,144 ----a-w C:\Windows\System32\config\systemprofile\ntuser.da t
- 2008-09-04 23:55:24 104,594 ----a-w C:\Windows\System32\perfc009.dat
+ 2008-09-09 00:45:54 104,594 ----a-w C:\Windows\System32\perfc009.dat
- 2008-09-04 23:55:24 132,782 ----a-w C:\Windows\System32\perfc00A.dat
+ 2008-09-09 00:45:54 132,782 ----a-w C:\Windows\System32\perfc00A.dat
- 2008-09-04 23:55:24 612,656 ----a-w C:\Windows\System32\perfh009.dat
+ 2008-09-09 00:45:54 612,656 ----a-w C:\Windows\System32\perfh009.dat
- 2008-09-04 23:55:24 692,480 ----a-w C:\Windows\System32\perfh00A.dat
+ 2008-09-09 00:45:54 692,480 ----a-w C:\Windows\System32\perfh00A.dat
- 2008-09-05 02:30:30 10,376 ----a-w C:\Windows\System32\WDI\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-2438782454-1923549343-292518445-1000_UserData.bin
+ 2008-09-09 00:44:06 11,226 ----a-w C:\Windows\System32\WDI\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-2438782454-1923549343-292518445-1000_UserData.bin
- 2008-09-05 02:30:30 62,968 ----a-w C:\Windows\System32\WDI\BootPerformanceDiagnostics _SystemData.bin
+ 2008-09-09 00:44:05 63,852 ----a-w C:\Windows\System32\WDI\BootPerformanceDiagnostics _SystemData.bin
- 2008-09-05 02:30:28 37,628 ----a-w C:\Windows\System32\WDI\ShutdownPerformanceDiagnos tics_SystemData.bin
+ 2008-09-09 00:44:03 38,026 ----a-w C:\Windows\System32\WDI\ShutdownPerformanceDiagnos tics_SystemData.bin
- 2008-08-21 03:28:53 82,612 ----a-w C:\Windows\System32\WDI\SuspendPerformanceDiagnost ics_SystemData_FastS4.bin
+ 2008-09-07 1547 104,354 ----a-w C:\Windows\System32\WDI\SuspendPerformanceDiagnost ics_SystemData_FastS4.bin
.
((((((((((((((((((((((((((((((((( Cargando Puntos Reg ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Nota* entradas vacías & entradas legítimas predeterminadas no son mostradas
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Curre ntVersion\Run]
"MsnMsgr"="C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" [2007-10-18 5724184]
"Sidebar"="C:\Program Files\Windows Sidebar\sidebar.exe" [2008-01-19 1233920]
"WMPNSCFG"="C:\Program Files\Windows Media Player\WMPNSCFG.exe" [2008-01-19 202240]
"ehTray.exe"="C:\Windows\ehome\ehTray.exe" [2008-01-19 125952]
"SUPERAntiSpyware"="C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe" [2008-09-04 1576176]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Run]
"QPService"="C:\Program Files\HP\QuickPlay\QPService.exe" [2007-12-19 468264]
"QlbCtrl"="C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe" [2007-12-06 202032]
"NvSvc"="C:\Windows\system32\nvsvc.dll" [2007-11-07 86016]
"NvCplDaemon"="C:\Windows\system32\NvCpl.dll" [2007-11-07 8501792]
"NvMediaCenter"="C:\Windows\system32\NvMcTray. dll" [2007-11-07 81920]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\curr entversion\policies\system]
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)

[hkey_local_machine\software\microsoft\windows\curr entversion\explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= "C:\Program Files\SUPERAntiSpyware\SASSEH.DLL" [2008-05-13 77824]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
2008-07-23 16:28 352256 C:\Program Files\SUPERAntiSpyware\SASWINLO.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=avgrsstx.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Contro l\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
--a------ 2007-05-11 02:36 40048 C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AVG8_TRAY]
--a------ 2008-09-03 23:33 1235736 C:\PROGRA~1\AVG\AVG8\avgtray.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CognizanceTS]
-ra------ 2003-12-22 06:42 17920 C:\PROGRA~1\BIOSCR~1\VeriSoft\Bin\ASTSVCC.dll

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Software Update]
--a------ 2007-05-08 16:24 54840 C:\Program Files\HP\HP Software Update\hpwuSchd2.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LanguageShortcut]
--------- 2006-09-29 15:28 49152 C:\Program Files\CyberLink\PowerDVD\Language\Language.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RemoteControl]
--------- 2006-09-18 04:38 29696 C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SUPERAntiSpyware]
--a------ 2008-09-04 19:23 1576176 C:\Program Files\SUPERAntiSpyware\SUPERANTISPYWARE.EXE

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SynTPEnh]
--a------ 2008-03-28 02:05 1045800 C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WinampAgent]
--a------ 2008-08-03 18:32 36352 C:\Program Files\Winamp\winampa.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Windows Defender]
--a------ 2008-01-19 03:08 1008184 C:\Program Files\Windows Defender\MSASCui.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RtHDVCpl]
--a------ 2008-05-28 09:36 6144000 C:\Windows\RtHDVCpl.exe

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc\S-1-5-21-2438782454-1923549343-292518445-1000]
"EnableNotificationsRef"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpo licy\FirewallRules]
"{533F3A2E-4826-47CC-9D37-90E05834D09B}"= TCP:6004|C:\Program Files\Microsoft Office\Office12\outlook.exe:Microsoft Office Outlook
"{CEECDD36-92D5-4A97-9E3F-88E4E631B6AB}"= C:\Program Files\HP\QuickPlay\QP.exe:Quick Play
"{6B3EECA1-1583-4CEB-A59F-04DF949F886C}"= C:\Program Files\HP\QuickPlay\QPService.exe:Quick Play Resident Program
"TCP Query User{263DA02F-2896-479A-B178-7DF0E0B5D91E}C:\\program files\\ares\\ares.exe"= UDP:C:\program files\ares\ares.exe:Ares p2p for windows
"UDP Query User{FC5CDD19-27F1-4D3F-B78C-DDF244115A3C}C:\\program files\\ares\\ares.exe"= TCP:C:\program files\ares\ares.exe:Ares p2p for windows
"{A70E0FE9-069F-4F88-8A97-8BE1272385C4}"= UDP:C:\Program Files\Lphant\eLePhantClient.exe:Lphant
"{43ED8DDA-1B5D-4609-BAB6-FAEB7893CA98}"= TCP:C:\Program Files\Lphant\eLePhantClient.exe:Lphant
"{943BD6F9-C693-4BA8-BDD2-187CD721DF44}"= C:\Program Files\Windows Live\Messenger\livecall.exe:Windows Live Messenger (Phone)
"{E42F6F44-B7BC-4F6B-8995-FA4F123FDF79}"= C:\Program Files\Windows Live\Messenger\livecall.exe:Windows Live Messenger (Phone)
"{2A8C7E34-69CE-4C33-AAB5-2F271B85526A}"= C:\Program Files\Windows Live\Messenger\livecall.exe:Windows Live Messenger (Phone)
"{C22CC6F4-A33E-41A0-8C7F-0720832E8860}"= C:\Program Files\AVG\AVG8\avgupd.exe:avgupd.exe
"{15ECF4FD-B909-47F2-B278-E730241DF0B8}"= C:\Program Files\AVG\AVG8\avgnsx.exe:avgnsx.exe

R0 AvgRkx86;avgrkx86.sys;C:\Windows\system32\Drivers\ avgrkx86.sys [2008-09-03 12936]
R0 pavboot;pavboot;C:\Windows\system32\drivers\pavboo t.sys [2008-06-19 28544]
R1 AvgLdx86;AVG AVI Loader Driver x86;C:\Windows\system32\Drivers\avgldx86.sys [2008-09-03 97928]
R2 ASBroker;Broker de inicio de sesión;C:\Windows\System32\svchost.exe [2008-01-19 21504]
R2 ASChannel;Canal de comunicación local;C:\Windows\System32\svchost.exe [2008-01-19 21504]
R2 avg8wd;AVG8 WatchDog;C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe [2008-09-03 231704]
R2 avgfws8;AVG8 Firewall;C:\PROGRA~1\AVG\AVG8\avgfws8.exe [2008-09-03 1220888]
R2 QPCapSvc;QuickPlay Background Capture Service (QBCS);C:\Program Files\HP\QuickPlay\Kernel\TV\QPCapSvc.exe [2007-12-19 271760]
R2 QPSched;QuickPlay Task Scheduler (QTS);C:\Program Files\HP\QuickPlay\Kernel\TV\QPSched.exe [2007-12-19 112016]
R2 UxTuneUp;TuneUp Ampliación del thema;C:\Windows\System32\svchost.exe [2008-01-19 21504]
R3 AvgWfpX;AVG8 Firewall Driver x86;C:\Windows\system32\Drivers\avgwfpx.sys [2008-09-03 69128]
R3 HpqRemHid;HP Remote Control HID Device;C:\Windows\system32\DRIVERS\HpqRemHid.sys [2007-07-11 7168]
S3 TuneUp.Defrag;TuneUp Drive Defrag Service;C:\Windows\System32\TuneUpDefragService.ex e [2008-08-19 355584]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
bthsvcs REG_MULTI_SZ BthServ
Cognizance REG_MULTI_SZ ASBroker ASChannel

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
UxTuneUp
.
Contenido de carpeta 'Tareas Programadas'
.
.
------- Supplementary Scan -------
.
FireFox -: Profile - C:\Users\personal\AppData\Roaming\Mozilla\Firefox\ Profiles\46aibrj8.default\
.

************************************************** ************************

catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-09-08 20:27:07
Windows 6.0.6001 Service Pack 1 NTFS

escaneando procesos ocultos ...

escaneando entradas ocultas de autostart ...

escaneando archivos ocultos ...

el escaneo se completo con exito
archivos ocultos: 0

************************************************** ************************
.
Tiempo completado: 2008-09-08 20:28:30
ComboFix-quarantined-files.txt 2008-09-09 00:58:26
ComboFix2.txt 2008-09-05 02:39:04

Pre-Run: 13,356,888,064 bytes libres
Post-Run: 13,321,891,840 bytes libres

328 --- E O F --- 2008-09-07 02:41:21


espero que me ayudes a quitar ese virus
suerte y saludos

Hola,Todo Limpio. Para terminar solo quedaría desinstalar CF de la siguiente manera:

• Ir a Inicio > Ejecutar
• Escribir lo siguiente: ComboFix /u como muestra la imagen debajo:
  
  • 
• Esto activara el desinstalador de ComboFix abriendo su pantalla principal y luego de unos segundos veras ("ComboFix is uninstalled")

El problema del puntero no se debe a malware causante, por lo que te recomiendo que utilices otra a ver si el problema persiste.

saludos.

PD: puedes intentar as disitntas soluciones que comentan en la web, en cuanto a cambiar la base donde se ubica o apagar todo dispositivo alrededor entre otras posibles soluciones. LEER

Saludos nos comentas.

hola muchas gracias por revisar mi combofix estoy tranquilo que no tiene nada mi laptos..

repecto al puntero, al parecer el monitor de pc que esta serca del laptos provoca que el puntero se mueva, ya lo prove apagandolo la pantalla
y el puntero a dejado de moverse seguire provando,en otros sitios,

se le agradece su colaboracion thecat re, gracias muy amable