• Registrarse
  • Iniciar sesión


  • Página 2 de 2 PrimeroPrimero 12
    Resultados 11 al 14 de 14

    Virus "22find"

    Hola, lo que trate de decir con "sin ser la página de inicio", es que cuando voy a opciones del explorador la pagina de inicio es otra, este caso google. Te dejo el reporte. OTL ...

    1. #11
      Usuario Avatar de pablo_canaya
      Registrado
      ago 2008
      Ubicación
      Argentina
      Mensajes
      91

      Re: Virus "22find"

      Hola, lo que trate de decir con "sin ser la página de inicio", es que cuando voy a opciones del explorador la pagina de inicio es otra, este caso google.

      Te dejo el reporte.

      OTL logfile created on: 28/01/2013 23:50:40 - Run 2
      OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\usuario\Desktop
      64bit- Ultimate Edition (Version = 6.1.7600) - Type = NTWorkstation
      Internet Explorer (Version = 8.0.7600.16385)
      Locale: 00000c0a | Country: España | Language: ESN | Date Format: dd/MM/yyyy

      3,50 Gb Total Physical Memory | 2,58 Gb Available Physical Memory | 73,73% Memory free
      6,99 Gb Paging File | 5,43 Gb Available in Paging File | 77,63% Paging File free
      Paging file location(s): ?:\pagefile.sys [binary data]

      %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
      Drive C: | 465,48 Gb Total Space | 299,20 Gb Free Space | 64,28% Space Free | Partition Type: NTFS

      Computer Name: USUARIO-PC | User Name: usuario | Logged in as Administrator.
      Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
      Company Name Whitelist: Off | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

      ========== Processes (SafeList) ==========

      PRC - C:\Users\usuario\Desktop\OTL.exe (OldTimer Tools)
      PRC - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe (Malwarebytes Corporation)
      PRC - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
      PRC - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe (Malwarebytes Corporation)
      PRC - C:\Archivos de programa\AVAST Software\Avast\AvastUI.exe (AVAST Software)
      PRC - C:\Archivos de programa\AVAST Software\Avast\AvastSvc.exe (AVAST Software)
      PRC - C:\Program Files (x86)\Software Plate\svcgdp.exe (Beijing Xing Technology Co., Ltd.)
      PRC - C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexStoreSvr.exe (Nero AG)
      PRC - C:\Program Files (x86)\Common Files\Ahead\Lib\NMBgMonitor.exe (Nero AG)


      ========== Modules (No Company Name) ==========


      ========== Services (SafeList) ==========

      SRV:64bit: - (AMD External Events Utility) -- C:\Windows\SysNative\atiesrxx.exe (AMD)
      SRV:64bit: - (AppMgmt) -- C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation)
      SRV - (MozillaMaintenance) -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe (Mozilla Foundation)
      SRV - (AdobeFlashPlayerUpdateSvc) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe (Adobe Systems Incorporated)
      SRV - (MBAMService) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe (Malwarebytes Corporation)
      SRV - (MBAMScheduler) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe (Malwarebytes Corporation)
      SRV - (avast! Antivirus) -- C:\Archivos de programa\AVAST Software\Avast\AvastSvc.exe (AVAST Software)
      SRV - (svcgdp) -- C:\Program Files (x86)\Software Plate\svcgdp.exe (Beijing Xing Technology Co., Ltd.)
      SRV - (wlidsvc) -- C:\Archivos de programa\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft Corp.)
      SRV - (clr_optimization_v2.0.50727_32) -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (Microsoft Corporation)


      ========== Driver Services (SafeList) ==========

      DRV:64bit: - (MBAMProtector) -- C:\Windows\SysNative\drivers\mbam.sys (Malwarebytes Corporation)
      DRV:64bit: - (aswTdi) -- C:\Windows\SysNative\drivers\aswTdi.sys (AVAST Software)
      DRV:64bit: - (aswSnx) -- C:\Windows\SysNative\drivers\aswSnx.sys (AVAST Software)
      DRV:64bit: - (aswSP) -- C:\Windows\SysNative\drivers\aswSP.sys (AVAST Software)
      DRV:64bit: - (aswMonFlt) -- C:\Windows\SysNative\drivers\aswMonFlt.sys (AVAST Software)
      DRV:64bit: - (aswFsBlk) -- C:\Windows\SysNative\drivers\aswFsBlk.sys (AVAST Software)
      DRV:64bit: - (aswRdr) -- C:\Windows\SysNative\drivers\aswRdr2.sys (AVAST Software)
      DRV:64bit: - (sptd) -- C:\Windows\SysNative\drivers\sptd.sys (Duplex Secure Ltd.)
      DRV:64bit: - (Fs_Rec) -- C:\Windows\SysNative\drivers\fs_rec.sys (Microsoft Corporation)
      DRV:64bit: - (EtronXHCI) -- C:\Windows\SysNative\drivers\EtronXHCI.sys (Etron Technology Inc)
      DRV:64bit: - (EtronHub3) -- C:\Windows\SysNative\drivers\EtronHub3.sys (Etron Technology Inc)
      DRV:64bit: - (RTHDMIAzAudService) -- C:\Windows\SysNative\drivers\RtHDMIVX.sys (Realtek Semiconductor Corp.)
      DRV:64bit: - (RTL8167) -- C:\Windows\SysNative\drivers\Rt64win7.sys (Realtek )
      DRV:64bit: - (amdkmdag) -- C:\Windows\SysNative\drivers\atikmdag.sys (ATI Technologies Inc.)
      DRV:64bit: - (amdkmdap) -- C:\Windows\SysNative\drivers\atikmpag.sys (Advanced Micro Devices, Inc.)
      DRV:64bit: - (amdsata) -- C:\Windows\SysNative\drivers\amdsata.sys (Advanced Micro Devices)
      DRV:64bit: - (amdxata) -- C:\Windows\SysNative\drivers\amdxata.sys (Advanced Micro Devices)
      DRV:64bit: - (amdsbs) -- C:\Windows\SysNative\drivers\amdsbs.sys (AMD Technologies Inc.)
      DRV:64bit: - (LSI_SAS2) -- C:\Windows\SysNative\drivers\lsi_sas2.sys (LSI Corporation)
      DRV:64bit: - (HpSAMD) -- C:\Windows\SysNative\drivers\HpSAMD.sys (Hewlett-Packard Company)
      DRV:64bit: - (stexstor) -- C:\Windows\SysNative\drivers\stexstor.sys (Promise Technology)
      DRV:64bit: - (ebdrv) -- C:\Windows\SysNative\drivers\evbda.sys (Broadcom Corporation)
      DRV:64bit: - (b06bdrv) -- C:\Windows\SysNative\drivers\bxvbda.sys (Broadcom Corporation)
      DRV:64bit: - (b57nd60a) -- C:\Windows\SysNative\drivers\b57nd60a.sys (Broadcom Corporation)
      DRV:64bit: - (hcw85cir) -- C:\Windows\SysNative\drivers\hcw85cir.sys (Hauppauge Computer Works, Inc.)
      DRV:64bit: - (rt61x64) -- C:\Windows\SysNative\drivers\netr6164.sys (Ralink Technology, Corp.)
      DRV - (WIMMount) -- C:\Windows\SysWOW64\drivers\wimmount.sys (Microsoft Corporation)


      ========== Standard Registry (SafeList) ==========


      ========== Internet Explorer ==========

      IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
      IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
      IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL =
      IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
      IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page =
      IE - HKLM\..\SearchScopes,DefaultScope =
      IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC


      IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

      IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0



      IE - HKU\S-1-5-21-3045825028-1641346135-152900933-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL =
      IE - HKU\S-1-5-21-3045825028-1641346135-152900933-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar =
      IE - HKU\S-1-5-21-3045825028-1641346135-152900933-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page =
      IE - HKU\S-1-5-21-3045825028-1641346135-152900933-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page =
      IE - HKU\S-1-5-21-3045825028-1641346135-152900933-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = MSN España: Hotmail, Messenger, Skype y Cuenta Microsoft
      IE - HKU\S-1-5-21-3045825028-1641346135-152900933-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = es
      IE - HKU\S-1-5-21-3045825028-1641346135-152900933-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = F0 1E 7E C2 C1 1D CD 01 [binary data]
      IE - HKU\S-1-5-21-3045825028-1641346135-152900933-1000\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL =
      IE - HKU\S-1-5-21-3045825028-1641346135-152900933-1000\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant =
      IE - HKU\S-1-5-21-3045825028-1641346135-152900933-1000\..\SearchScopes,DefaultScope = {33BB0A4E-99AF-4226-BDF6-49120163DE86}
      IE - HKU\S-1-5-21-3045825028-1641346135-152900933-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
      IE - HKU\S-1-5-21-3045825028-1641346135-152900933-1000\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = http://search.babylon.com/?q={searchTerms}&affID=110819&babsrc=SP_ss&mntrId=b86571b7000000000000000c0a498341
      IE - HKU\S-1-5-21-3045825028-1641346135-152900933-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

      ========== FireFox ==========

      FF - prefs.js..browser.search.defaultenginename: ""
      FF - prefs.js..browser.search.order.1: ""
      FF - prefs.js..browser.search.selectedEngine: "Google"
      FF - prefs.js..browser.search.useDBForOrder: true
      FF - prefs.js..browser.startup.homepage: "http://www.google.com.ar/"
      FF - prefs.js..extensions.enabledAddons: %7Ba3a5c777-f583-4fef-9380-ab4add1bc2a8%7D:5.0
      FF - prefs.js..extensions.enabledAddons: %7B14323AEE-F6B8-4DC8-BCE3-E62645830585%7D:1.0.1
      FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:18.0.1


      FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_5_502_146.dll File not found
      FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_5_502_146.dll ()
      FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
      FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\4.0.50401.0\npctrl.dll ( Microsoft Corporation)
      FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
      FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3555.0308: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
      FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)
      FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)
      FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
      FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\usuario\AppData\Local\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)
      FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\usuario\AppData\Local\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)

      FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 18.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2013/01/23 11:41:18 | 000,000,000 | ---D | M]
      FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 18.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2013/01/23 11:41:17 | 000,000,000 | ---D | M]

      [2012/04/18 21:26:15 | 000,000,000 | ---D | M] (No name found) -- C:\Users\usuario\AppData\Roaming\mozilla\Extensions
      [2013/01/25 17:42:44 | 000,000,000 | ---D | M] (No name found) -- C:\Users\usuario\AppData\Roaming\mozilla\Firefox\Profiles\t7o07l3a.default\extensions
      [2013/01/25 17:42:44 | 000,002,125 | ---- | M] () (No name found) -- C:\Users\usuario\AppData\Roaming\mozilla\firefox\profiles\t7o07l3a.default\extensions\{14323AEE-F6B8-4DC8-BCE3-E62645830585}.xpi
      [2012/12/19 23:42:40 | 000,013,972 | ---- | M] () (No name found) -- C:\Users\usuario\AppData\Roaming\mozilla\firefox\profiles\t7o07l3a.default\extensions\{a3a5c777-f583-4fef-9380-ab4add1bc2a8}.xpi
      [2013/01/23 11:41:16 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\extensions
      [2013/01/23 11:41:18 | 000,262,552 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll
      [2012/08/29 21:32:26 | 000,002,465 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\bing.xml
      [2012/12/07 13:56:23 | 000,004,095 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\drae.xml
      [2012/12/07 13:56:23 | 000,001,356 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\eBay-es.xml
      [2012/10/13 00:29:53 | 000,002,058 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\twitter.xml
      [2012/12/07 13:56:23 | 000,001,391 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-es.xml
      [2012/12/07 13:56:23 | 000,001,315 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\yahoo-es.xml

      ========== Chrome ==========

      CHR - homepage: 22Find Portal Site
      CHR - default_search_provider: 22find (Enabled)
      CHR - default_search_provider: search_url = http://search.22find.com/web/?utm_source=b&utm_medium=gdp&from=gdp&uid=WDCXWD5000AAKS-00E4A0_WD-WCATR358077380773&ts=1359146566&type=default&q={searchTerms}
      CHR - default_search_provider: suggest_url =
      CHR - homepage: 22Find Portal Site
      CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer
      CHR - plugin: Native Client (Enabled) = C:\Users\usuario\AppData\Local\Google\Chrome\Application\24.0.1312.56\ppGoogleNaClPluginChrome.dll
      CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Users\usuario\AppData\Local\Google\Chrome\Application\24.0.1312.56\pdf.dll
      CHR - plugin: Shockwave Flash (Enabled) = C:\Users\usuario\AppData\Local\Google\Chrome\Application\24.0.1312.56\gcswf32.dll
      CHR - plugin: Google Update (Enabled) = C:\Users\usuario\AppData\Local\Google\Update\1.2.183.39\npGoogleOneClick8.dll
      CHR - Extension: YouTube = C:\Users\usuario\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_1\
      CHR - Extension: B\u00FAsqueda de Google = C:\Users\usuario\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_1\
      CHR - Extension: Shopping price comparison = C:\Users\usuario\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbdabnfmdemcjjadpkpjibhhacggangd\2.2.0_0\
      CHR - Extension: avast! WebRep = C:\Users\usuario\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\
      CHR - Extension: 22find = C:\Users\usuario\AppData\Local\Google\Chrome\User Data\Default\Extensions\ijblflkdjdopkpdgllkmlbgcffjbnfda\2.0.1_0\
      CHR - Extension: Gmail = C:\Users\usuario\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\

      O1 HOSTS File: ([2012/04/18 11:18:05 | 000,000,864 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
      O1 - Hosts: 127.0.0.1 validation.sls.microsoft.com
      O2:64bit: - BHO: (avast! WebRep) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Archivos de programa\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
      O2:64bit: - BHO: (Windows Live ID Sign-in Helper) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Archivos de programa\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
      O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~3\Office12\GR469A~1.DLL (Microsoft Corporation)
      O2 - BHO: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Archivos de programa\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
      O3:64bit: - HKLM\..\Toolbar: (avast! WebRep) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Archivos de programa\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
      O3:64bit: - HKLM\..\Toolbar: (no name) - {ae07101b-46d4-4a98-af68-0333ea26e113} - No CLSID value found.
      O3 - HKLM\..\Toolbar: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Archivos de programa\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
      O3 - HKLM\..\Toolbar: (no name) - {ae07101b-46d4-4a98-af68-0333ea26e113} - No CLSID value found.
      O4:64bit: - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor)
      O4 - HKLM..\Run: [avast] C:\Program Files\AVAST Software\Avast\avastUI.exe (AVAST Software)
      O4 - HKLM..\Run: [StartCCC] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
      O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
      O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
      O4 - HKU\S-1-5-21-3045825028-1641346135-152900933-1000..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] C:\Program Files (x86)\Common Files\Ahead\Lib\NMBgMonitor.exe (Nero AG)
      O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
      O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
      O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
      O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
      O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
      O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
      O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
      O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
      O8:64bit: - Extra context menu item: E&xportar a Microsoft Excel - res://C:\PROGRA~2\MICROS~3\Office12\EXCEL.EXE/3000 File not found
      O8 - Extra context menu item: E&xportar a Microsoft Excel - res://C:\PROGRA~2\MICROS~3\Office12\EXCEL.EXE/3000 File not found
      O9 - Extra Button: Enviar a OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~3\Office12\ONBttnIE.dll (Microsoft Corporation)
      O9 - Extra 'Tools' menuitem : &Enviar a OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~3\Office12\ONBttnIE.dll (Microsoft Corporation)
      O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~3\Office12\REFIEBAR.DLL (Microsoft Corporation)
      O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000007 [] - C:\Archivos de programa\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL (Microsoft Corp.)
      O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000008 [] - C:\Archivos de programa\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL (Microsoft Corp.)
      O1364bit: - gopher Prefix: missing
      O13 - gopher Prefix: missing
      O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/ge...sh/swflash.cab (Shockwave Flash Object)
      O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 200.51.11.7 200.51.212.7
      O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{5003A53A-E9F0-4888-BE44-5213C1E22F9E}: DhcpNameServer = 192.168.0.1
      O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{8F3A51EB-5932-4E41-BADE-31A74C856171}: DhcpNameServer = 200.51.11.7 200.51.212.7
      O18:64bit: - Protocol\Handler\grooveLocalGWS - No CLSID value found
      O18:64bit: - Protocol\Handler\livecall - No CLSID value found
      O18:64bit: - Protocol\Handler\ms-help - No CLSID value found
      O18:64bit: - Protocol\Handler\msnim - No CLSID value found
      O18:64bit: - Protocol\Handler\wlpg - No CLSID value found
      O18 - Protocol\Handler\grooveLocalGWS {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~2\MICROS~3\Office12\GRA32A~1.DLL (Microsoft Corporation)
      O18:64bit: - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Archivos de programa\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
      O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~2\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
      O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
      O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
      O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
      O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
      O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\PROGRA~2\MICROS~3\Office12\GR469A~1.DLL (Microsoft Corporation)
      O32 - HKLM CDRom: AutoRun - 1
      O33 - MountPoints2\{1a6871f6-d1ba-11e1-86ea-50e54937d10e}\Shell - "" = AutoRun
      O33 - MountPoints2\{1a6871f6-d1ba-11e1-86ea-50e54937d10e}\Shell\AutoRun\command - "" = E:\Setup.exe
      O33 - MountPoints2\{29be4ab5-d1b5-11e1-88a0-50e54937d10e}\Shell - "" = AutoRun
      O33 - MountPoints2\{29be4ab5-d1b5-11e1-88a0-50e54937d10e}\Shell\AutoRun\command - "" = E:\Setup.exe
      O34 - HKLM BootExecute: (autocheck autochk *)
      O35:64bit: - HKLM\..comfile [open] -- "%1" %*
      O35:64bit: - HKLM\..exefile [open] -- "%1" %*
      O35 - HKLM\..comfile [open] -- "%1" %*
      O35 - HKLM\..exefile [open] -- "%1" %*
      O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
      O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
      O37 - HKLM\...com [@ = comfile] -- "%1" %*
      O37 - HKLM\...exe [@ = exefile] -- "%1" %*
      O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
      O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
      O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

      ========== Files/Folders - Created Within 30 Days ==========

      [2013/01/28 19:15:42 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\usuario\Desktop\OTL.exe
      [2013/01/28 18:47:41 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Recuva
      [2013/01/28 18:47:38 | 000,000,000 | ---D | C] -- C:\Program Files\Recuva
      [2013/01/28 18:40:49 | 000,000,000 | ---D | C] -- C:\Users\usuario\AppData\Roaming\Malwarebytes
      [2013/01/28 18:40:26 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
      [2013/01/28 18:40:26 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
      [2013/01/28 18:40:25 | 000,024,176 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys
      [2013/01/28 18:40:25 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware
      [2013/01/28 18:40:08 | 000,000,000 | ---D | C] -- C:\Users\usuario\AppData\Local\Programs
      [2013/01/28 18:38:59 | 000,025,232 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswFsBlk.sys
      [2013/01/28 18:38:59 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\avast! Free Antivirus
      [2013/01/28 18:38:58 | 000,370,288 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswSP.sys
      [2013/01/28 18:38:56 | 000,054,072 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswRdr2.sys
      [2013/01/28 18:38:55 | 000,984,144 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswSnx.sys
      [2013/01/28 18:38:55 | 000,059,728 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswTdi.sys
      [2013/01/28 18:38:50 | 000,071,600 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswMonFlt.sys
      [2013/01/28 18:38:49 | 000,285,328 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\aswBoot.exe
      [2013/01/28 18:38:06 | 000,041,224 | ---- | C] (AVAST Software) -- C:\Windows\avastSS.scr
      [2013/01/28 18:38:05 | 000,227,648 | ---- | C] (AVAST Software) -- C:\Windows\SysWow64\aswBoot.exe
      [2013/01/28 18:37:56 | 000,000,000 | ---D | C] -- C:\ProgramData\AVAST Software
      [2013/01/28 18:37:56 | 000,000,000 | ---D | C] -- C:\Program Files\AVAST Software
      [2013/01/28 13:09:22 | 000,000,000 | ---D | C] -- C:\Users\usuario\AppData\Local\{CEEA977C-EE76-4014-BE21-25F228297DD9}
      [2013/01/28 01:08:57 | 000,000,000 | ---D | C] -- C:\Users\usuario\AppData\Local\{69C105ED-6F4C-47B2-BA9C-F8FA00450930}
      [2013/01/27 13:08:32 | 000,000,000 | ---D | C] -- C:\Users\usuario\AppData\Local\{D4F96BD3-FC65-43D8-B585-0EBBDAA38D78}
      [2013/01/26 10:54:20 | 000,000,000 | ---D | C] -- C:\Users\usuario\AppData\Local\{E8C8BC06-05AD-4E59-8600-6EDBF7CAD7B8}
      [2013/01/26 10:52:41 | 000,000,000 | ---D | C] -- C:\_OTL
      [2013/01/26 10:25:50 | 000,000,000 | ---D | C] -- C:\Users\usuario\AppData\Local\{39C133E0-DB9F-49D2-8135-ECEBC6DBC2D5}
      [2013/01/25 17:53:27 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\337
      [2013/01/25 17:46:09 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Desk 365
      [2013/01/25 17:11:02 | 000,000,000 | ---D | C] -- C:\Users\usuario\AppData\Local\{470B24C3-CAD5-4653-8B9C-19ADEA5DFEE5}
      [2013/01/25 00:52:52 | 000,000,000 | ---D | C] -- C:\Users\usuario\AppData\Local\{0282485C-B6EE-4817-A01A-D563F83B1816}
      [2013/01/24 12:52:24 | 000,000,000 | ---D | C] -- C:\Users\usuario\AppData\Local\{8589C1A0-AF3D-4000-AA14-6F31B4338487}
      [2013/01/23 23:27:42 | 000,000,000 | ---D | C] -- C:\Users\usuario\AppData\Local\{8F3F0994-548B-499D-B1FA-1C0A82823B2F}
      [2013/01/23 18:23:37 | 000,000,000 | ---D | C] -- C:\Users\usuario\AppData\Local\SCE
      [2013/01/23 18:17:51 | 000,000,000 | ---D | C] -- C:\Crash
      [2013/01/23 18:17:28 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\directx
      [2013/01/23 11:41:16 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Firefox
      [2013/01/23 11:25:17 | 000,000,000 | ---D | C] -- C:\Users\usuario\AppData\Local\{C5A1BC45-E74B-4303-9F6C-B375A1CDB7B5}
      [2013/01/22 19:47:27 | 000,000,000 | ---D | C] -- C:\Users\usuario\AppData\Local\{12788C6F-ECFD-46E1-98C3-FB61A28DF1ED}
      [2013/01/13 13:36:25 | 000,000,000 | ---D | C] -- C:\Users\usuario\AppData\Local\{09C80668-CDB7-40C1-AFDF-2D2E61147162}
      [2013/01/12 09:55:54 | 000,000,000 | ---D | C] -- C:\Users\usuario\AppData\Local\{352AC933-EE64-4B3E-8CC0-877E9D8F1ECA}
      [2013/01/11 13:23:16 | 000,000,000 | ---D | C] -- C:\Users\usuario\AppData\Local\{04B7A21E-4B13-4EF1-999F-4451E35941F3}
      [2013/01/10 03:39:43 | 000,000,000 | ---D | C] -- C:\Users\usuario\AppData\Local\{58A23C8F-AFD0-4FBD-A6ED-406BDE49510D}
      [2013/01/09 13:03:38 | 000,000,000 | ---D | C] -- C:\Users\usuario\AppData\Local\{65314F4E-73EB-44D3-BE90-0DFA25CA65A2}
      [2013/01/08 22:57:44 | 000,000,000 | ---D | C] -- C:\Users\usuario\AppData\Local\{5F006D7C-D09F-406B-87C7-1ED1E40A77B5}
      [2013/01/08 10:57:19 | 000,000,000 | ---D | C] -- C:\Users\usuario\AppData\Local\{8E4DF93D-74EC-4882-8413-A25083ED1F2E}
      [2013/01/07 15:46:09 | 000,000,000 | ---D | C] -- C:\Users\usuario\AppData\Local\{D8744723-176B-4E6D-BEE6-E128032B2BEC}
      [2013/01/07 0341 | 000,000,000 | ---D | C] -- C:\Users\usuario\AppData\Local\{5086EF81-F7C8-45ED-84E0-4169F2A7D7EF}
      [2013/01/06 1515 | 000,000,000 | ---D | C] -- C:\Users\usuario\AppData\Local\{883A8A2D-1295-4007-99FE-DD208299B4EB}
      [2013/01/05 14:16:46 | 000,000,000 | ---D | C] -- C:\Users\usuario\AppData\Local\{36CB6E92-DDBD-4145-B29E-C43689CBA88B}
      [2013/01/05 02:15:26 | 000,000,000 | ---D | C] -- C:\Users\usuario\AppData\Local\{9E87E670-4DF1-4D08-B8B9-3DCF8E0A85A8}
      [2013/01/04 13:19:23 | 000,000,000 | ---D | C] -- C:\Users\usuario\AppData\Local\{106AFF90-2C9E-46F9-9973-82FC7A3E2310}
      [2013/01/03 21:46:34 | 000,000,000 | ---D | C] -- C:\Users\usuario\AppData\Local\{BC8B2EE4-2F5F-4F7E-9422-30298609B16C}
      [2013/01/02 11:26:37 | 000,000,000 | ---D | C] -- C:\Users\usuario\AppData\Local\{3B687AEF-4169-4786-A160-F45EBE849E09}
      [2013/01/01 12:58:12 | 000,000,000 | ---D | C] -- C:\Users\usuario\AppData\Local\{42151E17-CDA6-4D5A-A85E-1891AD1C456C}
      [2012/12/31 13:07:53 | 000,000,000 | ---D | C] -- C:\Users\usuario\AppData\Local\{2B3463E9-2D1D-4BC6-93BB-50853FC5104A}
      [2012/12/30 12:49:35 | 000,000,000 | ---D | C] -- C:\Users\usuario\AppData\Local\{3FF03CDE-082C-4965-8463-203F17530506}

      ========== Files - Modified Within 30 Days ==========

      [2013/01/28 23:46:00 | 000,000,838 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
      [2013/01/28 23:43:17 | 000,001,102 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
      [2013/01/28 23:43:13 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
      [2013/01/28 23:02:01 | 000,001,118 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3045825028-1641346135-152900933-1000UA.job
      [2013/01/28 23:02:01 | 000,001,066 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3045825028-1641346135-152900933-1000Core.job
      [2013/01/28 19:30:02 | 000,001,098 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
      [2013/01/28 19:26:33 | 000,014,016 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
      [2013/01/28 19:26:33 | 000,014,016 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
      [2013/01/28 19:25:26 | 001,539,088 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
      [2013/01/28 19:25:26 | 000,697,746 | ---- | M] () -- C:\Windows\SysNative\perfh00A.dat
      [2013/01/28 19:25:26 | 000,609,896 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
      [2013/01/28 19:25:26 | 000,135,410 | ---- | M] () -- C:\Windows\SysNative\perfc00A.dat
      [2013/01/28 19:25:26 | 000,104,214 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
      [2013/01/28 19:18:14 | 2816,647,168 | -HS- | M] () -- C:\hiberfil.sys
      [2013/01/28 19:15:46 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\usuario\Desktop\OTL.exe
      [2013/01/28 18:47:41 | 000,001,658 | ---- | M] () -- C:\Users\Public\Desktop\Recuva.lnk
      [2013/01/28 18:40:26 | 000,001,109 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
      [2013/01/28 18:38:59 | 000,001,958 | ---- | M] () -- C:\Users\Public\Desktop\avast! Free Antivirus.lnk
      [2013/01/28 18:38:50 | 000,000,000 | ---- | M] () -- C:\Windows\SysWow64\config.nt
      [2013/01/25 20:26:14 | 000,417,064 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
      [2013/01/25 17:42:42 | 000,002,578 | ---- | M] () -- C:\Users\usuario\Desktop\Google Chrome.lnk
      [2013/01/25 17:42:42 | 000,001,372 | ---- | M] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk
      [2013/01/24 23:04:40 | 002,039,747 | ---- | M] () -- C:\Users\usuario\Documents\luchaarmada2.pdf
      [2013/01/23 11:28:09 | 000,002,014 | ---- | M] () -- C:\Users\Public\Desktop\Adobe Reader 9.lnk
      [2013/01/08 21:47:31 | 000,697,864 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerApp.exe
      [2013/01/08 21:47:31 | 000,074,248 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl

      ========== Files Created - No Company Name ==========

      [2013/01/28 18:47:41 | 000,001,658 | ---- | C] () -- C:\Users\Public\Desktop\Recuva.lnk
      [2013/01/28 18:40:26 | 000,001,109 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
      [2013/01/28 18:38:59 | 000,001,958 | ---- | C] () -- C:\Users\Public\Desktop\avast! Free Antivirus.lnk
      [2013/01/28 18:38:49 | 000,000,000 | ---- | C] () -- C:\Windows\SysWow64\config.nt
      [2013/01/24 23:04:40 | 002,039,747 | ---- | C] () -- C:\Users\usuario\Documents\luchaarmada2.pdf
      [2012/05/25 00:05:00 | 001,558,130 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
      [2012/05/20 02:09:21 | 000,000,151 | ---- | C] () -- C:\Windows\PhotoSnapViewer.INI
      [2012/05/16 18:19:57 | 000,003,584 | ---- | C] () -- C:\Users\usuario\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
      [2012/04/18 11:03:32 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin
      [2012/04/18 10:46:16 | 000,650,752 | ---- | C] () -- C:\Windows\SysWow64\xvidcore.dll
      [2012/04/18 10:46:16 | 000,243,200 | ---- | C] () -- C:\Windows\SysWow64\xvidvfw.dll
      [2012/04/18 10:46:15 | 000,175,616 | ---- | C] () -- C:\Windows\SysWow64\unrar.dll
      [2012/04/18 10:46:14 | 000,079,360 | ---- | C] () -- C:\Windows\SysWow64\ff_vfw.dll
      [2012/04/18 10:05:03 | 000,002,023 | ---- | C] () -- C:\Windows\SysWow64\atipblag.dat

      ========== ZeroAccess Check ==========

      [2009/07/14 01:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini

      [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64

      [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

      [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64

      [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

      [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
      "" = C:\Windows\SysNative\shell32.dll -- [2009/07/13 22:41:54 | 014,161,920 | ---- | M] (Microsoft Corporation)
      "ThreadingModel" = Apartment

      [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
      "" = %SystemRoot%\system32\shell32.dll -- [2009/07/13 22:16:14 | 012,866,560 | ---- | M] (Microsoft Corporation)
      "ThreadingModel" = Apartment

      [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
      "" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009/07/13 22:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)
      "ThreadingModel" = Free

      [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
      "" = %systemroot%\system32\wbem\fastprox.dll -- [2009/07/13 22:15:20 | 000,605,696 | ---- | M] (Microsoft Corporation)
      "ThreadingModel" = Free

      [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
      "" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009/07/13 22:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
      "ThreadingModel" = Both

      [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]

      < End of report >

    2. #12
      Ex-Colaborador Avatar de Anleg_30
      Registrado
      dic 2007
      Ubicación
      Bna-Venezuela
      Mensajes
      10.545

      Re: Virus "22find"

      Bien, Pablo_..

      El chrome es el que veo que aun está afectado, asi que vas a realiza lo siguiente tal cual:

      Desinstala el chrome desde el panel de control, si deseas antes guarda los +fav (marcadores)

      • Abre OTL.exe porfavor, y solo realiza lo siguiente tal cual:
      • Copia y pega el siguiente código en su marco en blanco (debajo de Código de Reparación)


      Código:
      :OTL
      IE - HKU\S-1-5-21-3045825028-1641346135-152900933-1000\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = http://search.babylon.com/?q={searchTerms}&affID=110819&babsrc=SP_ss&mntrId=b86571b7000000000000000c0a498341
      [2013/01/25 17:42:44 | 000,000,000 | ---D | M] (No name found) -- C:\Users\usuario\AppData\Roaming\mozilla\Firefox\Profiles\t7o07l3a.default\extensions
      [2013/01/25 17:42:44 | 000,002,125 | ---- | M] () (No name found) -- C:\Users\usuario\AppData\Roaming\mozilla\firefox\profiles\t7o07l3a.default\extensions\{14323AEE-F6B8-4DC8-BCE3-E62645830585}.xpi
      [2013/01/25 17:53:27 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\337
      [2013/01/25 17:46:09 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Desk 365
      [2013/01/25 17:11:02 | 000,000,000 | ---D | C] -- C:\Users\usuario\AppData\Local\{470B24C3-CAD5-4653-8B9C-19ADEA5DFEE5}
      [2013/01/25 00:52:52 | 000,000,000 | ---D | C] -- C:\Users\usuario\AppData\Local\{0282485C-B6EE-4817-A01A-D563F83B1816}
      
      :Files
       C:\Users\usuario\AppData\Local\Google\Chrome
      ipconfig /flushdns /c
      
      :Commands
      [emptytemp]
      • Seguidamente pulsa sobre el botón Reparar


      Luego de la reparación instala chrome



      Blog | Antivirus Online | Eliminar Malwares | Antivirus Gratis

      * Síguenos en nuestro Twitter y hazte nuestro amigo en Facebook.
      * Infórmate de las ultimas amenazas de la red desde: InfoSpyware Blog
      * No se resuelven dudas por Privados ni por E-mail, ya que para eso esta el foro.

    3. #13
      Usuario Avatar de pablo_canaya
      Registrado
      ago 2008
      Ubicación
      Argentina
      Mensajes
      91

      Re: Virus "22find"

      Hola, la reparación en Chrome parece estar completa. Pero este mismo problema continua en el Firefox y en el Internet Explorer. Saludos

    4. #14
      Ex-Colaborador Avatar de Anleg_30
      Registrado
      dic 2007
      Ubicación
      Bna-Venezuela
      Mensajes
      10.545

      Re: Virus "22find"

      A ver Pablo, mejor dejame unas imagenes de FF e IE para ver lo que sucede.

      ¿Cómo subir imágenes al Foro? *TUTORIAL*



      Blog | Antivirus Online | Eliminar Malwares | Antivirus Gratis

      * Síguenos en nuestro Twitter y hazte nuestro amigo en Facebook.
      * Infórmate de las ultimas amenazas de la red desde: InfoSpyware Blog
      * No se resuelven dudas por Privados ni por E-mail, ya que para eso esta el foro.

    Página 2 de 2 PrimeroPrimero 12