Foro de InfoSpyware - Foro de Hijackthis - Foro de Virus

Hola a todos y felicidades por la pagina. Creo que haceis una labor estupenda. Vamos con mi problema. Creo que estoy muy infectado por varios tipos de spyware y malware. Ademas de las tipicas pop-ups que salen sin cesar tambien he notado una gran desmejoria en mi equipo. Va mucho mas lento. He pasado el ad-adware SE y elimina todo lo que encuentra pero al reiniciar vuelve a encontrar un monton de spyware. Pasando el antivirus (lo he desistalado por que me daba varios problemas, aunque debo instalar otro urgentemente) no encuentra nada extraño. Aqui va el log del Hijack a ver que veis.

Logfile of HijackThis v1.99.1
Scan saved at 19:51:48, on 27/05/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\VM_STI.EXE
C:\WINDOWS\System32\ctfmon.exe
C:\Archivos de programa\Messenger\MSMSGS.EXE
C:\Archivos de programa\WinZip\WZQKPICK.EXE
C:\Archivos de programa\Archivos comunes\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\System32\nvsvc32.exe
C:\Archivos de programa\Analog Devices\SoundMAX\SMAgent.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Archivos de programa\Internet Explorer\iexplore.exe
C:\WINDOWS\System32\msiexec.exe
C:\Documents and Settings\Carlos Varela\Mis documentos\hijack\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://home.es.netscape.com/es/home/winsearch200.html
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.es.netscape.com/es/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Vínculos
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Archivos de programa\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [BigDogPath] C:\WINDOWS\VM_STI.EXE KOCOM KMC-90 Web Camera
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Archivos de programa\Messenger\MSMSGS.EXE" /background
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Archivos de programa\WinZip\WZQKPICK.EXE
O8 - Extra context menu item: E&xportar a Microsoft Excel - res://C:\ARCHIV~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Referencia - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\ARCHIV~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Archivos de programa\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Archivos de programa\Messenger\msmsgs.exe
O12 - Plugin for .tif: C:\Archivos de programa\Internet Explorer\PLUGINS\npqtplugin6.dll
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by23fd.bay23.hotmail.msn.com/resources/MsnPUpld.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5consumer/V5Controls/en/x86/client/wuweb_site.cab?1112725250718
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://www.pandasoftware.com/activescan/as5/asinst.cab
O16 - DPF: {C4660846-8760-4852-8154-82438E33E383} (FileSharingCtrl Class) - http://appdirectory.messenger.msn.com/AppDirectory/P4Apps/FileSharing/es/filesharingctrl.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{22EF4275-2D51-4535-BF88-74FCF339F84B}: NameServer = 195.235.113.3,195.235.96.90
O17 - HKLM\System\CS1\Services\Tcpip\..\{22EF4275-2D51-4535-BF88-74FCF339F84B}: NameServer = 195.235.113.3,195.235.96.90
O17 - HKLM\System\CS2\Services\Tcpip\..\{22EF4275-2D51-4535-BF88-74FCF339F84B}: NameServer = 195.235.113.3,195.235.96.90
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Archivos de programa\Analog Devices\SoundMAX\SMAgent.exe

Hola!!!

Tu log está completamente limpio.

Asi que vamos a usar otra herramienta llamada MWAV.exe . Genera un log y dejalo aqui. Este log es muy largo, asi que te pido que sólo copies las entradas reconocidas como infectadas.

Saludos

Muchas gracias por la respuesta y perdon por la tardanza en la mia. Espero que podais ayudarme con este nuevo log.


Object "AltNet Spyware/Adware" found in File System! Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Mo duleUsage" refers to invalid object "C:\WINDOWS\Downloaded Program Files\DownloadHtml.dll". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Mo duleUsage" refers to invalid object "C:\WINDOWS\System32\EGCOMSERVICE_1042.dll". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Mo duleUsage" refers to invalid object "C:\WINDOWS\System32\EGCOMSERVICE_1044.dll". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Mo duleUsage" refers to invalid object "C:\WINDOWS\System32\EGCOMSERVICE_1045.dll". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Sh aredDlls" refers to invalid object "C:\WINDOWS\System32\DIMM.DLL". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Sh aredDlls" refers to invalid object "C:\Archivos de programa\Ahead\CoverDesigner\covered-deu.nls". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Sh aredDlls" refers to invalid object "C:\DOCUME~1\CARLOS~1\CONFIG~1\Temp\_ISTMP1.DIR\_I STMP0.DIR\FileGrp\Msvcrt10.dll". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Sh aredDlls" refers to invalid object "C:\Archivos de programa\Archivos comunes\Adobe\Workflow\Bib.dll". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Sh aredDlls" refers to invalid object "C:\Archivos de programa\Archivos comunes\Adobe\Spelling\brt02.clx". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Sh aredDlls" refers to invalid object "C:\Archivos de programa\Archivos comunes\Adobe\Spelling\brt04.clx". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Sh aredDlls" refers to invalid object "C:\Archivos de programa\Archivos comunes\Adobe\Spelling\brt04.lex". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Sh aredDlls" refers to invalid object "C:\WINDOWS\System32\EGCOMSERVICE_1042.dll". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Sh aredDlls" refers to invalid object "C:\WINDOWS\System32\EGCOMSERVICE_1044.dll". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Sh aredDlls" refers to invalid object "C:\WINDOWS\System32\EGCOMSERVICE_1045.dll". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Sh aredDlls" refers to invalid object "C:\WINDOWS\Downloaded Program Files\DownloadHtml.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{01002B17-5D93-4551-81E4-831FEF780A53}" refers to invalid object "C:\Archivos de programa\Movie Maker\wmm2filt.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{0562F29E-2C93-4F39-A6D6-EA05F1E714FC}" refers to invalid object "%systemroot%\system32\mpeg2data.ax". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{0DED49D5-A8B7-4d5d-97A1-12B0C195874D}" refers to invalid object "BdaPlgin.ax". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{12121212-3434-5656-3333-444411112222}" refers to invalid object "vendor.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{12121212-3434-5656-3333-444411112224}" refers to invalid object "vendor.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{15FD01A3-6E5D-4ECD-9EBD-1813CB3887A1}" refers to invalid object "btpanui.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{164037BB-7C2B-43DB-8B61-AF18D7401EB5}" refers to invalid object "%systemroot%\system32\mpeg2data.ax". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{1B544C24-FD0B-11CE-8C63-00AA0044B520}" refers to invalid object "C:\Archivos de programa\Movie Maker\wmm2filt.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{1CB1623E-BBEC-4E8D-B2DF-DC08C6F4627C}" refers to invalid object "C:\Archivos de programa\Movie Maker\wmm2filt.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{1E198087-59CC-4932-99FB-F5083DC2E714}" refers to invalid object "%systemroot%\system32\mpeg2data.ax". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{1EE42F7A-18BB-42EF-A06E-C31A8337AE59}" refers to invalid object "%systemroot%\system32\mpeg2data.ax". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{27B86B53-3839-4441-8D0D-71BA9EE8347B}" refers to invalid object "%systemroot%\system32\mpeg2data.ax". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{28013E71-63F0-4427-9D98-EDAAC5C56C50}" refers to invalid object "%systemroot%\system32\mpeg2data.ax". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{2aa2b5fe-b846-4d07-810c-b21ee45320e3}" refers to invalid object "%SystemRoot%\System32\xmlprovi.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{2D20D4BB-B47E-4FB7-83BD-E3C2EE250D26}" refers to invalid object "C:\Archivos de programa\Movie Maker\wmm2filt.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{2EA10031-0033-450E-8072-E27D9E768142}" refers to invalid object "C:\Archivos de programa\Movie Maker\wmm2filt.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{2FC765C5-AE47-11D1-9975-00805F8AC6B3}" refers to invalid object "brpref32.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{2FC765C6-AE47-11D1-9975-00805F8AC636}" refers to invalid object "brpref32.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{2FC765C7-AE47-11D1-9975-00805F8AC6B3}" refers to invalid object "brpref32.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{2FC765C8-AE47-11D1-9975-00805F8AC6B3}" refers to invalid object "edpref32.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{2FC765CB-AE47-11D1-9975-00805F8AC63E}" refers to invalid object "mnpref32.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{2FC765CC-AE47-11D1-9975-00805F8AC6B3}" refers to invalid object "mnpref32.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{2FD674A5-FE4D-4BF6-AD25-83225CDED113}" refers to invalid object "%systemroot%\system32\mpeg2data.ax". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{31087270-D348-432C-899E-2D2F38FF29A0}" refers to invalid object "C:\Archivos de programa\Movie Maker\wmm2filt.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{320154BB-D666-48F6-990E-172B32954620}" refers to invalid object "C:\Archivos de programa\Overnet\plugins\ed2kie.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{353359C1-39E1-491b-9951-464FD8AB071C}" refers to invalid object "C:\Archivos de programa\Movie Maker\wmm2fxa.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{364626c9-440b-4cc5-9e6e-f854a57fcdde}" refers to invalid object "C:\WINDOWS\System32\extmgr.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{41D2B841-7692-4C83-AFD3-F60E845341AF}" refers to invalid object "C:\Archivos de programa\Movie Maker\wmm2filt.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{4D4C9FEF-ED80-47EA-A3FA-3215FDBB33AB}" refers to invalid object "C:\Archivos de programa\Movie Maker\wmm2filt.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{4F3E50BD-A9D7-4721-B0E1-00CB42A0A747}" refers to invalid object "C:\Archivos de programa\Movie Maker\wmm2filt.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{50AD557E-3426-41FD-AFDD-2AF39BB1C387}" refers to invalid object "C:\WINDOWS\System32\LiveService_5.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{586FB486-5560-4FF3-96DF-1118C96AF456}" refers to invalid object "C:\Archivos de programa\Movie Maker\wmm2filt.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{596AB062-B4D2-4215-9F74-E9109B0A8153}" refers to invalid object "C:\WINDOWS\System32\twext.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{5A20FD6F-F8FE-4a22-9EE7-307D72D09E6E}" refers to invalid object "C:\Archivos de programa\Movie Maker\wmm2fxa.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{5B4B05EB-1F63-446B-AAD1-E10A34D650E0}" refers to invalid object "C:\Archivos de programa\Movie Maker\wmm2filt.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{61d55f63-98f7-473c-97c7-a08e2f13c955}" refers to invalid object "%SystemRoot%\System32\xmlprovi.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{62845280-4FE2-11D1-8EAC-00805FD26FAA}" refers to invalid object "lipref32.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{679E132F-561B-42F8-846C-A70DBDC62999}" refers to invalid object "C:\Archivos de programa\Movie Maker\wmm2filt.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{692F0339-CBAA-47e6-B5B5-3B84DB604E87}" refers to invalid object "C:\WINDOWS\System32\extmgr.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{6C68955E-F965-4249-8E18-F0977B1D2899}" refers to invalid object "C:\Archivos de programa\Movie Maker\wmm2filt.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{7285C18B-B3D3-4D96-8FDB-AA2E9DA61129}" refers to invalid object "%systemroot%\system32\mpeg2data.ax". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{73DA5D04-4347-45D3-A9DC-FAE9DDBE558D}" refers to invalid object "%systemroot%\system32\mpeg2data.ax". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{744C3DF0-DFAE-11D1-826B-00805F2AB103}" refers to invalid object "brpref32.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{7F1232EE-44D7-4494-AB8B-CC61B10E21A5}" refers to invalid object "C:\Archivos de programa\Movie Maker\wmm2filt.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{83EE8395-7DF5-43ee-A5C0-E1F1D1B0748D}" refers to invalid object "C:\WINDOWS\System32\extmgr.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{86A9C2DD-E88C-4455-A2B7-CD3852716060}" refers to invalid object "%systemroot%\system32\mpeg2data.ax". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{88E729D6-BDC1-11D1-BD2A-00C04FB9603F}" refers to invalid object "fde.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{8FB6E404-9685-465C-A2EC-1AD0A8D2E181}" refers to invalid object "%systemroot%\system32\mpeg2data.ax". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{92883667-E95C-443D-AC96-4CACA27BEB6E}" refers to invalid object "C:\Archivos de programa\Movie Maker\wmm2filt.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{930FD02C-BBE7-4EB9-91CF-FC45CC91E3E6}" refers to invalid object "C:\Archivos de programa\Movie Maker\wmm2filt.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{9DB7A13C-F208-4981-8353-73CC61AE2783}" refers to invalid object "C:\WINDOWS\System32\twext.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{A2EDA89A-0966-4B91-9C18-AB69F098187F}" refers to invalid object "C:\Archivos de programa\Movie Maker\wmm2filt.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{A6098E79-9C50-4F87-8973-5FB4532C93D8}" refers to invalid object "btpanui.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{A65B8071-3BFE-4213-9A5B-491DA4461CA7}" refers to invalid object "dxdiagn.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{ADEADEB8-E54B-11d1-9A72-0000F875EADE}" refers to invalid object "C:\Archivos de programa\Movie Maker\wmm2fxa.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{AECF5D2E-7A18-4DD2-BDCD-29B6F615B448}" refers to invalid object "C:\Archivos de programa\Movie Maker\wmm2filt.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{B0693766-5278-4ec6-B9E1-3CE40560EF5A}" refers to invalid object "CaPlgin.ax". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{B4DC8DD9-2CC1-4081-9B2B-20D7030234EF}" refers to invalid object "C:\Archivos de programa\Movie Maker\wmm2fxa.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{B5DD9A64-5C4B-4a48-BE56-97C1A8F85708}" refers to invalid object "C:\WINDOWS\System32\fastvideoplayer.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{BC0D69A8-0923-4EEE-9375-9239F5A38B92}" refers to invalid object "C:\Archivos de programa\Movie Maker\wmm2filt.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{C0D076C5-E4C6-4561-8BF4-80DA8DB819D7}" refers to invalid object "C:\Archivos de programa\Movie Maker\wmm2filt.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{C44C65C7-FDF1-453D-89A5-BCC28F5D69F9}" refers to invalid object "C:\Archivos de programa\Movie Maker\wmm2filt.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{C63344D8-70D3-4032-9B32-7A3CAD5091A5}" refers to invalid object "C:\Archivos de programa\Movie Maker\wmm2fxa.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{C666E115-BB62-4027-A113-82D643FE2D99}" refers to invalid object "%systemroot%\system32\mpeg2data.ax". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{C6CB1FE3-B05E-4F0E-818F-C83ED5A0332F}" refers to invalid object "C:\Archivos de programa\Movie Maker\wmm2filt.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{C8F209F8-480E-454C-94A4-5392D88EBA0F}" refers to invalid object "C:\Archivos de programa\Movie Maker\wmm2filt.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{CC45B0B0-72D8-4652-AE5F-5E3E266BE7ED}" refers to invalid object "C:\Archivos de programa\Movie Maker\wmm2filt.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{CE872A99-09F9-441F-8E0B-679D648BE8CA}" refers to invalid object "%systemroot%\system32\mpeg2data.ax". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{CECB8789-6DCD-40EE-846E-A6D6474CA44D}" refers to invalid object "%SystemRoot%\System32\xmlprovi.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{CFFB1FC7-270D-4986-B299-FECF3F0E42DB}" refers to invalid object "C:\Archivos de programa\Movie Maker\wmm2filt.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{DC62E83B-8C3C-4A4F-9407-B9665088DC3B}" refers to invalid object "%systemroot%\system32\mpeg2data.ax". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{E188F7A3-A04E-413E-99D1-D79A45F70305}" refers to invalid object "C:\Archivos de programa\Movie Maker\wmm2filt.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{E476CBFF-E229-4524-B6B7-228A3129D1C7}" refers to invalid object "C:\Archivos de programa\Movie Maker\wmm2filt.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{E673DCF2-C316-4c6f-AA96-4E4DC6DC291E}" refers to invalid object "C:\Archivos de programa\Movie Maker\wmm2fxb.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{E8C31D11-6FD2-4659-AD75-155FA143F42B}" refers to invalid object "C:\Archivos de programa\Movie Maker\wmm2ae.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{EC85D8F1-1C4E-46e4-A748-7AA04E7C0496}" refers to invalid object "C:\Archivos de programa\Movie Maker\wmm2fxa.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{EF105BC3-C064-45F1-AD53-6D8A8578D01B}" refers to invalid object "C:\Archivos de programa\Movie Maker\wmm2filt.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{EFEE43D6-BFE5-44B0-8063-AC3B2966AB2C}" refers to invalid object "C:\Archivos de programa\Movie Maker\wmm2filt.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{F089B117-385B-419D-9B8A-042565DD7CC3}" refers to invalid object "%systemroot%\system32\mpeg2data.ax". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{F44BB2D0-F070-463E-9433-B0CCF3CFD627}" refers to invalid object "C:\Archivos de programa\Movie Maker\wmm2filt.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{F91D96C7-8509-4D0B-AB26-A0DD10904BB7}" refers to invalid object "%systemroot%\system32\mpeg2data.ax". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{FBE9EC50-DC42-404F-8CC9-2ACCCAAEE26B}" refers to invalid object "%systemroot%\system32\mpeg2data.ax". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{FD0A5AF3-B41D-11d2-9C95-00C04F7971E0}" refers to invalid object "BdaPlgin.ax". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{FD1ECB11-FAC0-4536-A53D-B6F097BC7D33}" refers to invalid object "%systemroot%\system32\mpeg2data.ax". Action Taken: No Action Taken.
Entry "HKCR\Alg.AlgSetup" refers to invalid object "{27D0BCCC-344D-4287-AF37-0C72C161C14C}". Action Taken: No Action Taken.
Entry "HKCR\Alg.AlgSetup.1" refers to invalid object "{27D0BCCC-344D-4287-AF37-0C72C161C14C}". Action Taken: No Action Taken.
Entry "HKCR\DownloadHtml.SetupHtml" refers to invalid object "{51641EF3-8A7A-4D84-8659-B0911E947CC8}". Action Taken: No Action Taken.
Entry "HKCR\DownloadHtml.SetupHtml.1" refers to invalid object "{51641EF3-8A7A-4D84-8659-B0911E947CC8}". Action Taken: No Action Taken.
Entry "HKCR\MailFileAtt" refers to invalid object "{00020D05-0000-0000-C000-000000000046}". Action Taken: No Action Taken.
Entry "HKCR\mapifvbx.object" refers to invalid object "{41116C00-8B90-101B-96CD-00AA003B14FC}". Action Taken: No Action Taken.
Entry "HKCR\mapifvbx.object.1" refers to invalid object "{41116C00-8B90-101B-96CD-00AA003B14FC}". Action Taken: No Action Taken.
Entry "HKCR\Plenoptic.Plenoptic" refers to invalid object "{607C27E9-AB27-11d3-A116-A0EA50C10801}". Action Taken: No Action Taken.
Entry "HKCR\Plenoptic.Plenoptic.1" refers to invalid object "{607C27E9-AB27-11d3-A116-A0EA50C10801}". Action Taken: No Action Taken.
Entry "HKCR\RTCCore.RTCClient" refers to invalid object "{7a42ea29-a2b7-40c4-b091-f6f024aa89be}". Action Taken: No Action Taken.
Entry "HKCR\RTCCore.RTCClient.1" refers to invalid object "{7a42ea29-a2b7-40c4-b091-f6f024aa89be}". Action Taken: No Action Taken.
Entry "HKCR\WMPPublsihCntr.WMPPublsihCntr" refers to invalid object "{939438A9-CF0F-44d8-9140-599736F0D3A2}". Action Taken: No Action Taken.
Entry "HKCR\WMPPublsihCntr.WMPPublsihCntr.1" refers to invalid object "{939438A9-CF0F-44d8-9140-599736F0D3A2}". Action Taken: No Action Taken.
File C:\WINDOWS\System32\EGCOMSERVICE2.dll tagged as not-a-virus:Dialer.Win32.E-Group.b. No Action Taken.
File C:\WINDOWS\System32\o2oService_2.dll infected by "Trojan.Win32.P2E.bg" Virus! Action Taken: No Action Taken.
File C:\WINDOWS\System32\TriacomUD.dll tagged as not-a-virus:Dialer.Win32.UDIS.a. No Action Taken.

Muchas gracias por adelantado.

Hola!!!

Sigue etsos pasos:

1) Apaga Restaurar Sistema

2) Ver archivos ocultos

3) Reinicia a prueba de fallos

4) Elimina con KillBox estos archivos:

C:\WINDOWS\System32\EGCOMSERVICE2.dll
C:\WINDOWS\System32\o2oService_2.dll
C:\WINDOWS\System32\TriacomUD.dll

5) Reinicia normal.

6) Pasa al menos 2 de estos Antivirus Online

7) Abre el regedit (Inicio--> Ejecutar--> escribe regedit--> aceptar), y elimina estos valores si están:

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ÀEEAC34-FD74-4142-B891-4B05C0C03C87 }

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D7B59209-0ED9-4986-BDÂ-527BE836C6B2 }

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{FÅCAÄ0-060A-47Å-8368-1407780D2251 }

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{AD9B275B-E42D-4C7F-9FFB-29B5FB81688B }

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\EGCOMSERVICE.EGComSvc

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\EGCOMSERVICE.EGComSvc.1

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\EGCOMSERVICE2.EGComSvc2

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\EGCOMSERVICE2.EGComSvc2.1

8) Limpia el registro con RegSeeker y pasa Ad-Aware actualizado.

9) Elimina cookies y temporales de internet con Disk Cleaner y vacia la papelera.

10) Reinicia normal y nos cuentas los resultados.

Saludos