Como quitar, Snap.do.(Solucionado)

Hola a tod@s, tengo de hace unos dias el Snap.do de pagina principal en Firefox y en chrome, lo cambio y al reiniciar vuelve,
he pasado antivirus y spiwares, y el unico que lo detecta es Spy Hunter, y ademas una cantidad de virus que no me creo.
Por favor alguién me puede ayudar, gracias

Hola el programa que tú dices DESINSTÁLALO PERO YA!

Es un falso programa de Seguridad que instala de todo vamos.

Realiza lo siguiente por favor => Descarga esta Herramienta: Revo Uninstaller | InfoSpyware | Manual de Revo Uninstaller me vas a desinstalar en Modo AVANZADO el famoso SpyHunter.

Descarga esta Herramienta: AT-Destroyer 1.7 (by InfoSpyware) | InfoSpyware. Colócala en el escritorio.

Desactiva temporalmente tu antivirus/antispyware y cualquier protección residente que tengas => Cómo deshabilitar temporalmente su Antivirus. Ejecuta como Administrador el AT.

Al Principio te saldrá un Disclaimer, aceptas y después te saldrá un Menú: escoge la opción buscar y destruir (los iconos del escritorio desaparecerán temporalmente) cuando haya terminado te pedirá reiniciar, lo haces y después una vez reiniciado el Equipo saldrá una ventana con los resultados LA GUARDAS.

Activa de nuevo tu Antivirus.

IMPORTÁNTISIMO NO SE TE OCURRA EJECUTAR NINGÚN PROGRAMA DE LIMPIEZA

Me reportas Informe del AT-destroyer.

######################## AT-Destroyer [2.1] By Infospyware.
Hora/Día/Mes/Año: 15:53:05 \\\ 15/01/2013
AT-Destroyer 2.1 By Infospyware ---> InfoSpyware
Última actualización: 30/11/2012
Opción escogida: 2 :Buscar y Destruir
Versión Internet Explorer:9.0.8112.16421
Mozilla Firefox:18.0.0.4752
Google Chrome:24.0.1312.52
Privilegios: usuario - Administrador
Modo Actual: Modo Normal.
Nombre del pc: USUARIO-PC
Información del sistema operativo:X64-WIN_7-Service Pack 1
nombre del usuario:usuario
Lenguaje del sistema: Español



>>>>>>> Servicios <<<<<<<



>>>>>> Carpetas <<<<<<

C:\Users\usuario\AppData\Roaming\SkyMonk\config.ini (W32/Hijacker.MailRu)
C:\Users\usuario\AppData\Roaming\SkyMonk\md5cache.ini (W32/Hijacker.MailRu)
C:\Users\usuario\AppData\Roaming\SkyMonk (W32/Hijacker.MailRu)
C:\Users\usuario\AppData\Roaming\FFSJ\FFSJ.cfg 44
C:\Users\usuario\AppData\Roaming\FFSJ 44


>>>>>> Archivos <<<<<<



>>>>>> Registro <<<<<<

HKEY_CURRENT_USER\Software\Mail.Ru
HKEY_LOCAL_MACHINE\SOFTWARE\Mail.Ru
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}


>>>>>> Heurística <<<<<<

C:\Users\usuario\AppData\Roaming\inst.exe ((Heur malware.win32.generic))
C:\Users\usuario\AppData\Local\funmoods.exe (Heur malware.win32.generic)


>>>>>> Internet Explorer <<<<<<

Start Page==www.google.com
Local Page==
Search Page==http://go.microsoft.com/fwlink/?LinkId=54896
Default_search_url==http://go.microsoft.com/fwlink/?LinkId=54896
Default_Page_URL==http://acer.msn.com


''HKCU\Software\Microsoft\Internet Explorer\Main''
Start Page==www.google.com
Local Page==C:\Windows\system32\blank.htm
Search Page==http://feed.snap.do/?publisher=SnapdoOpenCandy&dpid=SnapdoOpenCandy&co=ES&userid=9fa18af6-ad37-42cb-b929-7eb174e804a5&searchtype=ds&q={searchTerms}
Default_search_url==
Default_Page_URL==http://es.msn.com/?ocid=OIE9HP


HKEY_USERS\S-1-5-21-791309590-3875487122-1467578003-1000\Software\Microsoft\Internet Explorer\Main''
Start Page==www.google.com
Local Page==C:\Windows\system32\blank.htm
Search Page==http://feed.snap.do/?publisher=SnapdoOpenCandy&dpid=SnapdoOpenCandy&co=ES&userid=9fa18af6-ad37-42cb-b929-7eb174e804a5&searchtype=ds&q={searchTerms}
Default_search_url==
Default_Page_URL==http://es.msn.com/?ocid=OIE9HP


>>>>>> Firefox <<<<<<

user_pref("browser.startup.homepage", "http://feed.snap.do/?publisher=SnapdoOpenCandy&dpid=SnapdoOpenCandy&co=ES&userid=9fa18af6-ad37-42cb-b929-7eb174e804a5&searchtype=hp");
user_pref("browser.startup.homepage_override.buildID", "20130104151925");
user_pref("browser.startup.homepage_override.mstone", "18.0");


>>>>>> Extensiones Firefox <<<<<<


C:\Program Files (x86)\{972ce4c6-7e08-4474-a285-3208198ce6fd}

>>>>>> Plugins Firefox <<<<<<

HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer
HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Google.com/GoogleEarthPlugin
HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=10.10.2
HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=10.10.2
HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE
HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0
HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922
HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@nvidia.com/3DVision
HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@nvidia.com/3DVisionStreaming
HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=3

>>>>>> Google Chrome <<<<<<

"homepage": "http://www.google.com/",
"homepage_changed": true,
"homepage_is_newtabpage": false,


>>>>>> Extensiones Google Chrome <<<<<<

C:\Users\usuario\AppData\Local\Google\Chrome\User Data\Default\Extensions\5
C:\Users\usuario\AppData\Local\Google\Chrome\User Data\Default\Extensions\chemohaemmfhjpmlgkmkanfpfbkaihop
C:\Users\usuario\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejbapkdkkdiagoekedlglccfpcobfnfb
C:\Users\usuario\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom
C:\Users\usuario\AppData\Local\Google\Chrome\User Data\Default\Extensions\mdjbgnpehbhpibonmjjjbjaoechnlcaf
C:\Users\usuario\AppData\Local\Google\Chrome\User Data\Default\Extensions\olnconaknblgbkfgknkfmmfhhbebkekd

======== Listado ===========

[16/11/2012 17:06] [16/11/2012 17:06] [DI] C:\Users\usuario\AppData\Roaming\AVG2013
[ 22/03/2012 8:43] [ 21/03/2012 23:32] [DI] C:\Users\usuario\AppData\Roaming\BITS
[31/12/2012 17:23] [31/12/2012 17:07] [DI] C:\Users\usuario\AppData\Roaming\calibre
[20/12/2011 10:54] [20/12/2011 10:54] [DI] C:\Users\usuario\AppData\Roaming\CyberLink
[ 19/03/2012 8:30] [ 19/03/2012 7:42] [DI] C:\Users\usuario\AppData\Roaming\DMCache
[13/08/2012 10:28] [08/12/2011 9:19] [DI] C:\Users\usuario\AppData\Roaming\dvdcss
[ 30/09/2011 0:09] [ 30/09/2011 0:09] [DI] C:\Users\usuario\AppData\Roaming\ESET
[21/03/2012 23:32] [21/03/2012 23:32] [DI] C:\Users\usuario\AppData\Roaming\FlashGet
[10/06/2012 10:48] [10/06/2012 10:48] [DI] C:\Users\usuario\AppData\Roaming\Free AVI MPEG WMV MP4 FLV Video Joiner
[04/02/2012 11:32] [30/01/2012 8:16] [DI] C:\Users\usuario\AppData\Roaming\Gekih
[19/12/2011 16:09] [06/10/2011 19:36] [DI] C:\Users\usuario\AppData\Roaming\HP
[08/01/2013 21:49] [30/09/2011 21:11] [DI] C:\Users\usuario\AppData\Roaming\HpUpdate
[ 19/03/2012 8:59] [ 19/03/2012 7:42] [DI] C:\Users\usuario\AppData\Roaming\IDM
[24/10/2012 17:27] [19/08/2011 0:38] [DI] C:\Users\usuario\AppData\Roaming\IObit
[01/02/2012 15:29] [30/01/2012 8:16] [DI] C:\Users\usuario\AppData\Roaming\Ipog
[ 02/01/2013 0:02] [ 02/01/2013 0:02] [DI] C:\Users\usuario\AppData\Roaming\JDownloaderPackages
[10/03/2011 20:02] [10/03/2011 20:02] [DI] C:\Users\usuario\AppData\Roaming\Macromedia
[ 15/01/2013 9:00] [ 15/01/2013 9:00] [DI] C:\Users\usuario\AppData\Roaming\Malwarebytes
[ 15/01/2013 9:22] [ 10/03/2011 19:59] [SDI] C:\Users\usuario\AppData\Roaming\Microsoft
[ 15/01/2013 0:55] [ 18/08/2011 22:20] [DI] C:\Users\usuario\AppData\Roaming\Mipony
[ 30/09/2011 0:08] [ 18/08/2011 22:04] [DI] C:\Users\usuario\AppData\Roaming\Mozilla
[ 26/01/2012 9:32] [ 26/01/2012 9:32] [DI] C:\Users\usuario\AppData\Roaming\Nero
[ 24/12/2012 0:55] [ 24/12/2012 0:55] [DI] C:\Users\usuario\AppData\Roaming\NVIDIA
[ 30/09/2011 0:09] [ 30/09/2011 0:09] [DI] C:\Users\usuario\AppData\Roaming\OEM
C:\Users\usuario\AppData\Roaming\pcouffin.cat [AI] 7,67 KB ( )
C:\Users\usuario\AppData\Roaming\pcouffin.inf [AI] 1,13 KB ( )
C:\Users\usuario\AppData\Roaming\pcouffin.sys [AI] 80,8 KB ( )
[29/09/2011 16:32] [24/09/2011 20:25] [DI] C:\Users\usuario\AppData\Roaming\PEERNET
[ 04/11/2012 0:57] [ 04/11/2012 0:57] [DI] C:\Users\usuario\AppData\Roaming\Playrix Entertainment
[20/12/2011 10:54] [20/12/2011 10:54] [DI] C:\Users\usuario\AppData\Roaming\PowerCinema
[02/09/2012 14:44] [02/09/2012 14:44] [DI] C:\Users\usuario\AppData\Roaming\Samsung
[06/11/2012 12:56] [06/11/2012 12:56] [DI] C:\Users\usuario\AppData\Roaming\Sony
[06/11/2012 12:56] [06/11/2012 12:56] [DI] C:\Users\usuario\AppData\Roaming\Sony Setup
[01/10/2011 13:55] [01/10/2011 13:12] [DI] C:\Users\usuario\AppData\Roaming\Thinstall
[22/11/2012 15:29] [19/08/2011 0:43] [DI] C:\Users\usuario\AppData\Roaming\TuneUp Software
[13/01/2013 21:13] [20/08/2011 0:04] [DI] C:\Users\usuario\AppData\Roaming\vlc
[06/01/2013 19:07] [07/09/2011 20:47] [DI] C:\Users\usuario\AppData\Roaming\Vso
[11/03/2011 10:00] [11/03/2011 10:00] [DI] C:\Users\usuario\AppData\Roaming\VSSaver
[19/03/2012 12:03] [19/03/2012 12:03] [DI] C:\Users\usuario\AppData\Roaming\Windows Live Writer
[ 19/08/2011 0:19] [ 19/08/2011 0:11] [DI] C:\Users\usuario\AppData\Roaming\WinRAR
[10/10/2007 18:19] [10/10/2007 18:16] [D] C:\Program Files (x86)\Acer Arcade Deluxe
[01/04/2012 19:03] [28/08/2010 6:38] [D] C:\Program Files (x86)\Adobe
[10/10/2007 17:55] [10/10/2007 17:55] [D] C:\Program Files (x86)\AGEIA Technologies
[06/11/2012 13:07] [06/11/2012 13:07] [D] C:\Program Files (x86)\Avanquest update
[16/11/2012 17:06] [18/04/2012 15:41] [D] C:\Program Files (x86)\AVG
[01/05/2012 11:02] [01/05/2012 11:02] [D] C:\Program Files (x86)\Cheat Engine 6.1
[11/01/2013 16:34] [14/07/2009 5:20] [D] C:\Program Files (x86)\Common Files
[10/10/2007 18:17] [10/10/2007 18:17] [D] C:\Program Files (x86)\Cyberlink
C:\Program Files (x86)\desktop.ini [HSA] 174 bytes( 0)
[28/08/2010 6:34] [28/08/2010 6:33] [D] C:\Program Files (x86)\EgisTec IPS
[28/08/2010 6:33] [28/08/2010 6:33] [D] C:\Program Files (x86)\EgisTec MyWinLocker
[28/08/2010 6:33] [28/08/2010 6:33] [D] C:\Program Files (x86)\EgisTec MyWinLockerSuite
[28/08/2010 6:34] [28/08/2010 6:34] [D] C:\Program Files (x86)\EgisTec Shredder
[14/01/2013 15:16] [14/01/2013 15:16] [D] C:\Program Files (x86)\Enigma Software Group
[28/08/2010 6:21] [28/08/2010 6:21] [D] C:\Program Files (x86)\eSobi
[04/11/2012 0:55] [04/11/2012 0:55] [D] C:\Program Files (x86)\Fishdom
[26/02/2012 0:30] [26/02/2012 0:30] [D] C:\Program Files (x86)\FreeTime
[19/12/2012 9:09] [31/01/2012 23:05] [D] C:\Program Files (x86)\Google
[12/03/2012 20:53] [30/09/2011 21:06] [D] C:\Program Files (x86)\HP
[07/11/2012 16:14] [28/08/2010 6:15] [HD] C:\Program Files (x86)\InstallShield Installation Information
[28/08/2010 6:15] [28/08/2010 6:11] [D] C:\Program Files (x86)\Intel
[13/12/2012 8:32] [14/07/2009 5:20] [D] C:\Program Files (x86)\Internet Explorer
[25/10/2012 10:04] [19/08/2011 0:38] [D] C:\Program Files (x86)\IObit
[08/01/2013 9:02] [08/01/2013 9:02] [D] C:\Program Files (x86)\IObit Apps Toolbar
[18/12/2012 15:53] [19/08/2011 15:17] [D] C:\Program Files (x86)\Java
[05/01/2013 8:38] [02/01/2013 0:02] [D] C:\Program Files (x86)\JDownloader
[21/08/2011 13:28] [21/08/2011 13:28] [D] C:\Program Files (x86)\MahJongg Solitaire 3D
[13/04/2012 23:50] [16/03/2012 7:48] [D] C:\Program Files (x86)\Mail.Ru
[02/09/2012 14:41] [02/09/2012 14:41] [D] C:\Program Files (x86)\MarkAny
[15/01/2013 9:20] [10/10/2007 18:16] [D] C:\Program Files (x86)\Microsoft
[26/04/2012 15:46] [10/10/2007 18:20] [D] C:\Program Files (x86)\Microsoft Office
[19/05/2012 11:07] [19/05/2012 11:07] [D] C:\Program Files (x86)\Microsoft Silverlight
[10/10/2007 18:22] [10/10/2007 18:22] [D] C:\Program Files (x86)\Microsoft SQL Server Compact Edition
[26/04/2012 15:46] [26/04/2012 15:46] [D] C:\Program Files (x86)\Microsoft Visual Studio
[26/04/2012 15:43] [26/04/2012 15:43] [D] C:\Program Files (x86)\Microsoft Visual Studio 8
[27/04/2012 2:09] [26/04/2012 15:46] [D] C:\Program Files (x86)\Microsoft Works
[25/10/2011 13:57] [19/08/2011 2:32] [D] C:\Program Files (x86)\Microsoft.NET
[18/08/2011 22:20] [18/08/2011 22:20] [D] C:\Program Files (x86)\MiPony
[11/01/2013 16:15] [18/08/2011 22:04] [D] C:\Program Files (x86)\Mozilla Firefox
[26/04/2012 15:46] [14/07/2009 7:32] [D] C:\Program Files (x86)\MSBuild
[27/04/2012 0:45] [27/04/2012 0:45] [D] C:\Program Files (x86)\MSECache
[19/08/2011 1:17] [19/08/2011 1:17] [D] C:\Program Files (x86)\MSXML 4.0
[28/08/2010 6:36] [28/08/2010 6:35] [D] C:\Program Files (x86)\Nero
[16/11/2012 18:54] [10/10/2007 17:55] [D] C:\Program Files (x86)\NVIDIA Corporation
[11/04/2012 10:50] [11/04/2012 10:50] [D] C:\Program Files (x86)\Oberon Media
[10/03/2011 20:01] [10/03/2011 20:01] [D] C:\Program Files (x86)\OEM
[28/08/2010 6:18] [28/08/2010 6:18] [D] C:\Program Files (x86)\Realtek
[14/07/2009 7:32] [14/07/2009 7:32] [D] C:\Program Files (x86)\Reference Assemblies
[04/11/2012 0:54] [04/11/2012 0:54] [D] C:\Program Files (x86)\ReflexiveArcade
[02/09/2012 14:42] [02/09/2012 14:40] [D] C:\Program Files (x86)\Samsung
[27/04/2012 0:50] [26/04/2012 23:57] [D] C:\Program Files (x86)\Simpo Word to PDF
[12/04/2012 19:03] [12/04/2012 19:03] [D] C:\Program Files (x86)\SomePDF
[07/11/2012 16:14] [07/11/2012 16:14] [D] C:\Program Files (x86)\Sony
[07/11/2012 16:14] [06/11/2012 12:51] [D] C:\Program Files (x86)\Sony Ericsson
[28/08/2010 6:18] [28/08/2010 6:18] [HD] C:\Program Files (x86)\Temp
[08/01/2013 21:33] [22/11/2012 13:42] [D] C:\Program Files (x86)\TuneUp Utilities 2013
[14/07/2009 6:57] [14/07/2009 6:57] [HD] C:\Program Files (x86)\Uninstall Information
[20/08/2011 0:04] [20/08/2011 0:04] [D] C:\Program Files (x86)\VideoLAN
[07/09/2011 20:47] [07/09/2011 20:47] [D] C:\Program Files (x86)\VSO
[11/10/2007 3:44] [14/07/2009 7:32] [D] C:\Program Files (x86)\Windows Defender
[10/10/2007 18:22] [10/10/2007 18:21] [D] C:\Program Files (x86)\Windows Live
[21/08/2011 9:01] [14/07/2009 5:20] [D] C:\Program Files (x86)\Windows Mail
[21/08/2011 9:01] [14/07/2009 7:32] [D] C:\Program Files (x86)\Windows Media Player
[14/07/2009 7:32] [14/07/2009 5:20] [D] C:\Program Files (x86)\Windows NT
[21/08/2011 9:01] [14/07/2009 7:32] [D] C:\Program Files (x86)\Windows Photo Viewer
[21/08/2011 9:01] [14/07/2009 7:32] [D] C:\Program Files (x86)\Windows Portable Devices
[21/08/2011 9:01] [14/07/2009 7:32] [D] C:\Program Files (x86)\Windows Sidebar
[29/09/2011 16:07] [29/09/2011 16:07] [D] C:\Program Files (x86)\Xenocode
[18/11/2012 8:48] [28/08/2010 6:38] [DI] C:\ProgramData\Adobe
[14/07/2009 7:08] [14/07/2009 7:08] [HSDLI] C:\ProgramData\Application Data
[06/11/2012 13:07] [06/11/2012 13:07] [DI] C:\ProgramData\Avanquest
[17/04/2012 19:38] [31/01/2012 23:04] [DI] C:\ProgramData\AVAST Software
[16/11/2012 17:07] [18/04/2012 15:41] [DI] C:\ProgramData\AVG2012
[16/11/2012 17:05] [16/11/2012 17:02] [DI] C:\ProgramData\AVG2013
[06/11/2012 13:00] [06/11/2012 13:00] [DI] C:\ProgramData\BVRP Software
[18/04/2012 13:18] [18/04/2012 13:18] [HD] C:\ProgramData\Common Files
[20/12/2011 10:54] [10/10/2007 18:16] [DI] C:\ProgramData\CyberLink
[10/03/2011 19:59] [10/03/2011 19:59] [HSDLI] C:\ProgramData\Datos de programa
[14/07/2009 7:08] [14/07/2009 7:08] [HSDLI] C:\ProgramData\Desktop
[10/03/2011 19:59] [10/03/2011 19:59] [HSDLI] C:\ProgramData\Documentos
[14/07/2009 7:08] [14/07/2009 7:08] [HSDLI] C:\ProgramData\Documents
[30/09/2011 0:09] [28/08/2010 6:33] [DI] C:\ProgramData\EgisTec IPS
[23/02/2012 11:30] [11/02/2012 20:58] [DI] C:\ProgramData\eMule
[10/03/2011 19:59] [10/03/2011 19:59] [HSDLI] C:\ProgramData\Escritorio
[28/08/2010 6:22] [28/08/2010 6:22] [DI] C:\ProgramData\eSobi
[14/07/2009 7:08] [14/07/2009 7:08] [HSDLI] C:\ProgramData\Favorites
[10/03/2011 19:59] [10/03/2011 19:59] [HSDLI] C:\ProgramData\Favoritos
[28/12/2012 15:37] [20/09/2011 20:22] [DI] C:\ProgramData\FLEXnet
[11/04/2012 13:03] [11/04/2012 13:03] [DI] C:\ProgramData\Friends Games
C:\ProgramData\FullRemove.exe [AI] 128 KB 0
[16/11/2012 22:35] [13/04/2012 16:11] [DI] C:\ProgramData\Guard.Mail.Ru
[06/10/2011 20:05] [30/09/2011 21:02] [DI] C:\ProgramData\HP
[30/09/2011 21:10] [30/09/2011 21:10] [DI] C:\ProgramData\HP Product Assistant
C:\ProgramData\hpe62A8.dll [AI] 145 KB 0
[07/12/2012 0:08] [19/08/2011 0:40] [DI] C:\ProgramData\IObit
[15/01/2013 9:00] [15/01/2013 9:00] [DI] C:\ProgramData\Malwarebytes
[14/09/2012 15:36] [28/08/2010 6:30] [DI] C:\ProgramData\McAfee
[10/03/2011 19:59] [10/03/2011 19:59] [HSDLI] C:\ProgramData\Menú Inicio
[15/01/2013 15:48] [18/04/2012 13:16] [DI] C:\ProgramData\MFAData
[15/01/2013 9:20] [14/07/2009 5:20] [SDI] C:\ProgramData\Microsoft
[09/01/2013 16:15] [26/04/2012 15:43] [DI] C:\ProgramData\Microsoft Help
[28/08/2010 6:36] [28/08/2010 6:35] [DI] C:\ProgramData\Nero
[15/01/2013 15:45] [10/10/2007 17:59] [DI] C:\ProgramData\NVIDIA
[16/11/2012 18:52] [16/11/2012 18:52] [DI] C:\ProgramData\NVIDIA Corporation
[28/08/2010 6:29] [28/08/2010 6:29] [DI] C:\ProgramData\OberonGameConsole
[10/03/2011 20:02] [28/08/2010 6:37] [DI] C:\ProgramData\oem
[10/03/2011 19:59] [10/03/2011 19:59] [HSDLI] C:\ProgramData\Plantillas
[02/09/2012 14:41] [02/09/2012 14:40] [DI] C:\ProgramData\Samsung
[07/11/2012 16:14] [07/11/2012 16:14] [DI] C:\ProgramData\Sony
[07/11/2012 16:14] [06/11/2012 12:51] [DI] C:\ProgramData\Sony Ericsson
[14/07/2009 7:08] [14/07/2009 7:08] [HSDLI] C:\ProgramData\Start Menu
[18/12/2012 15:54] [18/12/2012 15:54] [DI] C:\ProgramData\Sun
[27/05/2012 10:50] [10/10/2007 18:16] [DAI] C:\ProgramData\Temp
[14/07/2009 7:08] [14/07/2009 7:08] [HSDLI] C:\ProgramData\Templates
[08/01/2013 21:33] [19/08/2011 0:43] [DI] C:\ProgramData\TuneUp Software
[06/01/2013 19:07] [07/09/2011 21:28] [DI] C:\ProgramData\Vso
[06/10/2011 20:06] [06/10/2011 20:06] [DI] C:\ProgramData\WEBREG
[22/11/2012 15:41] [19/08/2011 0:43] [HSD] C:\ProgramData\{24036256-BFDB-4CD3-BE8A-A3D6160F2E16}
[22/11/2012 15:41] [15/01/2012 9:34] [HSD] C:\ProgramData\{32364CEA-7855-4A3C-B674-53D8E9B97936}
[08/01/2013 21:49] [22/11/2012 13:41] [HSD] C:\ProgramData\{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F}
[22/11/2012 15:41] [16/11/2012 17:42] [HSD] C:\ProgramData\{D1D4879F-2279-49C9-AEBF-3B95C84EAA8F}

==================== EOF ==================


Aqui está el resultado, lo bueno que ha desaparecido el Snap.do. Muchas gracias

Hola!

Descarga/Actualiza/Ejecuta este programa Malwarebytes Anti-Malware 1.65.1 | InfoSpyware => Manual de Malwarebytes Anti-Malware

Realiza un Análisis completo, seleccionando todo lo que te salga y borrándolo según la imagen que te muestro:



Péganos el Informe de la Pestaña REGISTROS del Programa.

Un saludo.

Tipos de Análisis: Análisis Rápido
Opciones de análisis activado: Memoria | Inicio | Registro | Sistema de archivos | Heurística/Extra | Heurística/Shuriken | PUP | PUM
Opciones de análisis desactivados: P2P
Objetos examinados: 231442
Tiempo transcurrido: 3 minuto(s), 11 segundo(s)

Procesos en Memoria Detectados: 0
(No se han detectado elementos maliciosos)

Módulos de Memoria Detectados: 0
(No se han detectado elementos maliciosos)

Claves del Registro Detectados: 0
(No se han detectado elementos maliciosos)

Valores del Registro Detectados: 0
(No se han detectado elementos maliciosos)

Elementos de Datos del Registro Detectados: 0
(No se han detectado elementos maliciosos)

Carpetas Detectadas: 0
(No se han detectado elementos maliciosos)

Archivos Detectados: 3
C:\$RECYCLE.BIN\S-1-5-21-791309590-3875487122-1467578003-1000\$RB761FR.exe (PUP.Adware.MediaGet) -> En cuarentena y eliminado con éxito.
C:\$RECYCLE.BIN\S-1-5-21-791309590-3875487122-1467578003-1000\$RI1I8MI.exe (PUP.Hacktool.Patcher) -> En cuarentena y eliminado con éxito.
C:\$RECYCLE.BIN\S-1-5-21-791309590-3875487122-1467578003-1000\$R4422FG.com_11_24_12\Patch.exe (PUP.Hacktool.Patcher) -> En cuarentena y eliminado con éxito.

fin)

Hola gemsa, muchas gracias por tu ayuda, y todo solucionado. Saludos

Pd: El mejor foro de ayuda desinteresada

Originalmente publicado por isama54

Hola gemsa, muchas gracias por tu ayuda, y todo solucionado. Saludos

Pd: El mejor foro de ayuda desinteresada

Hola encantado de haberte podido ayudar.

Cuando tengas un problema con tu Equipo ya sabes donde encontrarnos.

Recuerda que si tienes/necesitas reabrir el Tema por cualquier cuestión, solo has de pinchar en el triángulo que se ve en el lado inferior izquierdo y un Moderador atenderá tu consulta. En cualquier caso siempre puedes abrir un Tema de nuevo.

Paso a REPORTAR el Tema como => TERMINADO

Como recomendación final, te invitamos a seguirnos en nuestros canales de difusión: Blog, Twitter, Facebook,vía E-Mail, para estar al tanto de los nuevos malwares y como prevenirlos.
Salu2.