Foro de InfoSpyware - Foro de Hijackthis - Foro de Virus

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\HJT\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.planetatv.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.planetatv.com/
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://windowsupdate.microsoft.com/
O1 - Hosts: 63.171.232.112 staging.v2.extremo.etb.net.co
O1 - Hosts: 200.52.207.141 www.megared.com.mx
O1 - Hosts: 200.52.207.141 portal.gdl.megared.net.mx
O1 - Hosts: 66.119.70.92 staging.pagoseguroonline.com
O1 - Hosts: 201.225.226.51 staging.mundofreedom.com
O1 - Hosts: 66.119.70.89 ecuavisa.planetatv.com
O1 - Hosts: 66.119.70.87 ondemand.planetastream.com
O1 - Hosts: 66.119.70.90 www.planetacentral.com
O1 - Hosts: 62.42.230.238 pub.ono.com
O1 - Hosts: 62.42.230.238 cms.ono.com
O1 - Hosts: 62.42.230.238 cms.ono.es
O1 - Hosts: 62.42.230.238 pub.ono.es
O1 - Hosts: 62.42.230.239 www.ono.com
O1 - Hosts: 62.42.230.232 www.ono2.es
O1 - Hosts: 66.119.70.90 www.cinemania.tv
O1 - Hosts: 66.119.70.90 www.multicine.com
O1 - Hosts: 200.52.167.10 staging.cln.megared.net.mx
O1 - Hosts: 38.100.192.29 testlb.planetatv.com
O1 - Hosts: 38.100.192.29 www.planetatv.com
O1 - Hosts: 38.100.192.6 www1.planetatv.com
O1 - Hosts: 38.100.192.7 www2.planetatv.com
O1 - Hosts: 38.100.192.8 www3.planetatv.com
O1 - Hosts: 38.100.192.29 actualidad.planetatv.com
O1 - Hosts: 38.100.192.6 actualidad1.planetatv.com
O1 - Hosts: 38.100.192.7 actualidad2.planetatv.com
O1 - Hosts: 38.100.192.8 actualidad3.planetatv.com
O1 - Hosts: 38.100.192.29 gaby.planetatv.com
O1 - Hosts: 38.100.192.6 gaby1.planetatv.com
O1 - Hosts: 38.100.192.7 gaby2.planetatv.com
O1 - Hosts: 38.100.192.8 gaby3.planetatv.com
O1 - Hosts: 38.100.192.29 autos.planetatv.com
O1 - Hosts: 38.100.192.6 autos1.planetatv.com
O1 - Hosts: 38.100.192.7 autos2.planetatv.com
O1 - Hosts: 38.100.192.8 autos3.planetatv.com
O1 - Hosts: 38.100.192.29 chicas.planetatv.com
O1 - Hosts: 38.100.192.6 chicas1.planetatv.com
O1 - Hosts: 38.100.192.7 chicas2.planetatv.com
O1 - Hosts: 38.100.192.8 chicas3.planetatv.com
O1 - Hosts: 38.100.192.29 cine.planetatv.com
O1 - Hosts: 38.100.192.6 cine1.planetatv.com
O1 - Hosts: 38.100.192.7 cine2.planetatv.com
O1 - Hosts: 38.100.192.8 cine3.planetatv.com
O1 - Hosts: 38.100.192.29 deportes.planetatv.com
O1 - Hosts: 38.100.192.6 deportes1.planetatv.com
O1 - Hosts: 38.100.192.7 deportes2.planetatv.com
O1 - Hosts: 38.100.192.8 deportes3.planetatv.com
O1 - Hosts: 38.100.192.29 mujer.planetatv.com
O1 - Hosts: 38.100.192.6 mujer1.planetatv.com
O1 - Hosts: 38.100.192.7 mujer2.planetatv.com
O1 - Hosts: 38.100.192.8 mujer3.planetatv.com
O1 - Hosts: 38.100.192.29 musica.planetatv.com
O1 - Hosts: 38.100.192.6 musica1.planetatv.com
O1 - Hosts: 38.100.192.7 musica2.planetatv.com
O1 - Hosts: 38.100.192.8 musica3.planetatv.com
O1 - Hosts: 38.100.192.29 radio.planetatv.com
O1 - Hosts: 38.100.192.6 radio1.planetatv.com
O1 - Hosts: 38.100.192.7 radio2.planetatv.com
O1 - Hosts: 38.100.192.8 radio3.planetatv.com
O1 - Hosts: 38.100.192.29 globovision.planetatv.com
O1 - Hosts: 38.100.192.6 globovision1.planetatv.com
O1 - Hosts: 38.100.192.7 globovision2.planetatv.com
O1 - Hosts: 38.100.192.8 globovision3.planetatv.com
O1 - Hosts: 38.100.192.29 colombianfashion.planetatv.com
O1 - Hosts: 38.100.192.6 colombianfashion1.planetatv.com
O1 - Hosts: 38.100.192.7 colombianfashion2.planetatv.com
O1 - Hosts: 38.100.192.8 colombianfashion3.planetatv.com
O1 - Hosts: 38.100.192.29 batanga.planetatv.com
O1 - Hosts: 38.100.192.6 batanga1.planetatv.com
O1 - Hosts: 38.100.192.7 batanga2.planetatv.com
O1 - Hosts: 38.100.192.8 batanga3.planetatv.com
O1 - Hosts: 38.100.192.6 showbusiness1.planetatv.com
O1 - Hosts: 38.100.192.7 showbusiness2.planetatv.com
O1 - Hosts: 38.100.192.8 showbusiness3.planetatv.com
O1 - Hosts: 38.100.192.6 pub1.r2ventures.com
O1 - Hosts: 38.100.192.7 pub2.r2ventures.com
O1 - Hosts: 38.100.192.8 pub3.r2ventures.com
O1 - Hosts: 38.100.192.6 cms1.r2ventures.com
O1 - Hosts: 38.100.192.7 cms2.r2ventures.com
O1 - Hosts: 38.100.192.8 cms3.r2ventures.com
O1 - Hosts: 38.100.192.29 cinemania.planetatv.com
O1 - Hosts: 38.100.192.6 cinemania1.planetatv.com
O1 - Hosts: 38.100.192.7 cinemania2.planetatv.com
O1 - Hosts: 38.100.192.8 cinemania3.planetatv.com
O1 - Hosts: 38.100.192.6 nuevaestrella1.planetatv.com
O1 - Hosts: 38.100.192.7 nuevaestrella2.planetatv.com
O1 - Hosts: 38.100.192.8 nuevaestrella3.planetatv.com
O1 - Hosts: 38.100.192.29 telefe.planetatv.com
O1 - Hosts: 38.100.192.6 telefe1.planetatv.com
O1 - Hosts: 38.100.192.7 telefe2.planetatv.com
O1 - Hosts: 38.100.192.8 telefe3.planetatv.com
O1 - Hosts: 38.100.192.29 unionradio.planetatv.com
O1 - Hosts: 38.100.192.6 unionradio1.planetatv.com
O1 - Hosts: 38.100.192.7 unionradio2.planetatv.com
O1 - Hosts: 38.100.192.8 unionradio3.planetatv.com
O1 - Hosts: 38.100.192.29 clarin.planetatv.com
O1 - Hosts: 38.100.192.6 clarin1.planetatv.com
O1 - Hosts: 38.100.192.7 clarin2.planetatv.com
O1 - Hosts: 38.100.192.8 clarin3.planetatv.com
O1 - Hosts: 38.100.192.29 optonline.planetatv.com
O1 - Hosts: 38.100.192.6 optonline1.planetatv.com
O1 - Hosts: 38.100.192.7 optonline2.planetatv.com
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {3C7C10F1-1BE9-0286-15B6-8F03DF4CB103} - (no file)
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: PCTools Site Guard - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - C:\PROGRA~1\SPYWAR~1\tools\iesdsg.dll
O2 - BHO: Google Desktop Search Capture - {7c1ce531-09e9-4fc5-9803-1c2956615786} - C:\Program Files\Google\Google Desktop Search\GoogleDesktopIE.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll
O2 - BHO: PCTools Browser Monitor - {B56A7D7D-6927-48C8-A975-17DF180C71AC} - C:\PROGRA~1\SPYWAR~1\tools\iesdpb.dll
O3 - Toolbar: (no name) - {DC99E960-6594-45e3-9D5D-141D825B8096} - (no file)
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [OfficeScanNT Monitor] "C:\Program Files\Trend Micro\OfficeScan Client\pccntmon.exe" -HideWindow
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_02\bin\jusched.exe
O4 - HKLM\..\Run: [Share-to-Web Namespace Daemon] C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
O4 - HKLM\..\Run: [Ooze Date Ante Jugs] C:\Documents and Settings\All Users\Application Data\wave copy ooze date\Mapi load.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Windows Registry Repair Pro] C:\Program Files\3B Software\Windows Registry Repair Pro\RegistryRepairPro.exe 4
O4 - Global Startup: Adobe Acrobat Speed Launcher.lnk = ?
O4 - Global Startup: HotSync Manager.lnk = C:\Palm\HOTSYNC.EXE
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O4 - Global Startup: PowerReg Scheduler.exe
O8 - Extra context menu item: Convert link target to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert link target to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert selected links to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Convert selected links to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Convert selection to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert selection to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll
O9 - Extra button: Spyware Doctor - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - C:\PROGRA~1\SPYWAR~1\tools\iesdpb.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\PROGRA~1\AIM\aim.exe
O9 - Extra button: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRA~1\Yahoo!\MESSEN~1\YPager.exe
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRA~1\Yahoo!\MESSEN~1\YPager.exe
O9 - Extra button: @C:\Program Files\Messenger\Msgslang.dll,-61144 - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: @C:\Program Files\Messenger\Msgslang.dll,-61144 - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=http://www.planetatv.com
O16 - DPF: {40F07A91-8E6F-11D0-8A0A-00A0C90C9B67} (MCSiLabelCtl Class) -
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
O16 - DPF: {60824B45-9D37-4E95-BB21-C8997F2C6F85} (pniFTP.FTPUpload) - http://cms.campeche.cablered.com.mx/cab/pniFTP302.CAB
O16 - DPF: {7B297BFD-85E4-4092-B2AF-16A91B2EA103} (WScanCtl Class) - http://www3.ca.com/securityadvisor/virusinfo/webscan.cab
O16 - DPF: {80DD2229-B8E4-4C77-B72F-F22972D723EA} - http://www.bitdefender.com/scan/Msie/bitdefender.cab
O16 - DPF: {9A54032D-31F7-400D-B184-83B33BDE65FA} (MSN File Upload Control) - http://sc.groups.msn.com/controls/FileUC/MsnUpld.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O16 - DPF: {CC05BC12-2AA2-4AC7-AC81-0E40F83B1ADF} (Live365Player Class) - http://www.live365.com/players/play365.cab
O16 - DPF: {E06E2E99-0AA1-11D4-ABA6-0060082AA75C} (GpcContainer Class) - https://premconf.webex.com/client/v_premconf/webex/ieatgpc.cab
O16 - DPF: {F2A84794-EE6D-447B-8C21-3BA1DC77C5B4} (SDKInstall Class) - http://activex.microsoft.com/activex/controls/sdkupdate/sdkinst.cab
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = r2ventures.com
O17 - HKLM\Software\..\Telephony: DomainName = r2ventures.com
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = r2ventures.com
O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O20 - Winlogon Notify: WRNotifier - WRLogonNTF.dll (file missing)
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: LaunchProgram - Unknown owner - C:\Temp\Svcrunap.exe (file missing)
O23 - Service: Macromedia Licensing Service - Unknown owner - C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe
O23 - Service: OfficeScanNT RealTime Scan (ntrtscan) - Trend Micro Inc. - C:\Program Files\Trend Micro\OfficeScan Client\ntrtscan.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini (file missing)
O23 - Service: PC Tools Spyware Doctor (SDhelper) - PC Tools - C:\Program Files\Spyware Doctor\sdhelp.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
O23 - Service: OfficeScanNT Listener (tmlisten) - Trend Micro Inc. - C:\Program Files\Trend Micro\OfficeScan Client\tmlisten.exe

Hola tofast_200 y bienvenido al foro, lee las Políticas del Foro

Tienes un tema abierto en este hilo:

problemas con barra azul aqui esta mi log

Se cierra el tema.

Saludos