pero esto va a solucionar mi problema? mi `problema es de que se habren ventanas de publicidad, y me dice que instale el winantivirus.

y yo no quiero perder lo que hay en mi disco duro

Deja la desconfianza amig@.....


Siempre pedimos que se hagan copias de seguridad por si acaso (digamos que se fuera la luz mientras se ejecuta el programa.....)


Hasta ahora es el programa que podemos usar para eliminar los problemas de publicidad en tu caso, cantidad de usuarios lo han usado en el foro sin habérseles dañado en lo absoluto el sistema, eso lo puedes comprobar usando el buscador del foro con la palabra de búsqueda lm2fix así que tranquil@



Salu2

como hago copias de seguridad?

Lee el siguiente enlace:

Como hacer copias de seguridad



Salu2

Ok, este es el log:

L2mfix 032106
Creating Account.
Se ha completado el comando correctamente.

Adding Administrative privleges.
Checking for L2MFix account(0=no 1=yes):
1
Granting SeDebugPrivilege to L2MFIX ... successful

Running From:
C:\WINNT\SYSTEM32

Killing Processes!

Command Line Process Viewer/Killer/Suspender for Windows NT/2000/XP V2.03
Copyright(C) 2002-2003 Craig.Peacock@beyondlogic.org
Killing PID 448 'smss.exe'

Command Line Process Viewer/Killer/Suspender for Windows NT/2000/XP V2.03
Copyright(C) 2002-2003 Craig.Peacock@beyondlogic.org
Killing PID 520 'winlogon.exe'
Killing PID 520 'winlogon.exe'
Killing PID 520 'winlogon.exe'
Killing PID 520 'winlogon.exe'
Killing PID 520 'winlogon.exe'

Command Line Process Viewer/Killer/Suspender for Windows NT/2000/XP V2.03
Copyright(C) 2002-2003 Craig.Peacock@beyondlogic.org
Killing PID 1244 'explorer.exe'
Killing PID 1244 'explorer.exe'

Command Line Process Viewer/Killer/Suspender for Windows NT/2000/XP V2.03
Copyright(C) 2002-2003 Craig.Peacock@beyondlogic.org
Error, Cannot find a process with an image name of rundll32.exe
Restoring Sedebugprivilege:

Scanning First Pass. Please Wait!

First Pass Completed

Second Pass Scanning

Second pass Completed!



Restoring Windows Update Certificates.:

The following Is the Current Export of the Winlogon notify key:
************************************************** **************************
Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\crypt32chain]
"Asynchronous"=dword:00000000
"Impersonate"=dword:00000000
"DllName"=hex(2):63,00,72,00,79,00,70,00,74,00,33, 00,32,00,2e,00,64,00,6c,00,\
6c,00,00,00
"Logoff"="ChainWlxLogoffEvent"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cryptnet]
"Asynchronous"=dword:00000000
"Impersonate"=dword:00000000
"DllName"=hex(2):63,00,72,00,79,00,70,00,74,00,6e, 00,65,00,74,00,2e,00,64,00,\
6c,00,6c,00,00,00
"Logoff"="CryptnetWlxLogoffEvent"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cscdll]
"DLLName"="cscdll.dll"
"Logon"="WinlogonLogonEvent"
"Logoff"="WinlogonLogoffEvent"
"ScreenSaver"="WinlogonScreenSaverEvent"
"Startup"="WinlogonStartupEvent"
"Shutdown"="WinlogonShutdownEvent"
"StartShell"="WinlogonStartShellEvent"
"Impersonate"=dword:00000000
"Asynchronous"=dword:00000001

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\mljjk]
"Asynchronous"=dword:00000001
"DllName"="C:\\WINNT\\system32\\mljjk.dll"
"Impersonate"=dword:00000000
"Startup"="SysLogon"
"Logoff"="SysLogoff"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ScCertProp]
"DLLName"="wlnotify.dll"
"Logon"="SCardStartCertProp"
"Logoff"="SCardStopCertProp"
"Lock"="SCardSuspendCertProp"
"Unlock"="SCardResumeCertProp"
"Enabled"=dword:00000001
"Impersonate"=dword:00000001
"Asynchronous"=dword:00000001

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Schedule]
"Asynchronous"=dword:00000000
"DllName"=hex(2):77,00,6c,00,6e,00,6f,00,74,00,69, 00,66,00,79,00,2e,00,64,00,\
6c,00,6c,00,00,00
"Impersonate"=dword:00000000
"StartShell"="SchedStartShell"
"Logoff"="SchedEventLogOff"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\sclgntfy]
"Logoff"="WLEventLogoff"
"Impersonate"=dword:00000000
"Asynchronous"=dword:00000001
"DllName"=hex(2):73,00,63,00,6c,00,67,00,6e,00,74, 00,66,00,79,00,2e,00,64,00,\
6c,00,6c,00,00,00

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\SensLogn]
"DLLName"="WlNotify.dll"
"Lock"="SensLockEvent"
"Logon"="SensLogonEvent"
"Logoff"="SensLogoffEvent"
"Safe"=dword:00000001
"MaxWait"=dword:00000258
"StartScreenSaver"="SensStartScreenSaverEvent"
"StopScreenSaver"="SensStopScreenSaverEvent"
"Startup"="SensStartupEvent"
"Shutdown"="SensShutdownEvent"
"StartShell"="SensStartShellEvent"
"Unlock"="SensUnlockEvent"
"Impersonate"=dword:00000001
"Asynchronous"=dword:00000001
"PostShell"="SensPostShellEvent"
"Disconnect"="SensDisconnectEvent"
"Reconnect"="SensReconnectEvent"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\termsrv]
"Asynchronous"=dword:00000000
"DllName"=hex(2):77,00,6c,00,6e,00,6f,00,74,00,69, 00,66,00,79,00,2e,00,64,00,\
6c,00,6c,00,00,00
"Impersonate"=dword:00000000
"Logoff"="TSEventLogoff"
"Logon"="TSEventLogon"
"PostShell"="TSEventPostShell"
"Shutdown"="TSEventShutdown"
"StartShell"="TSEventStartShell"
"Startup"="TSEventStartup"
"MaxWait"=dword:00000258
"Reconnect"="TSEventReconnect"
"Disconnect"="TSEventDisconnect"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
"Logon"="WLEventLogon"
"Logoff"="WLEventLogoff"
"Startup"="WLEventStartup"
"Shutdown"="WLEventShutdown"
"StartScreenSaver"="WLEventStartScreenSaver"
"StopScreenSaver"="WLEventStopScreenSaver"
"Lock"="WLEventLock"
"Unlock"="WLEventUnlock"
"StartShell"="WLEventStartShell"
"PostShell"="WLEventPostShell"
"Disconnect"="WLEventDisconnect"
"Reconnect"="WLEventReconnect"
"Impersonate"=dword:00000001
"Asynchronous"=dword:00000000
"SafeMode"=dword:00000001
"MaxWait"=dword:ffffffff
"DllName"=hex(2):57,00,67,00,61,00,4c,00,6f,00,67, 00,6f,00,6e,00,2e,00,64,00,\
6c,00,6c,00,00,00
"Event"=dword:00000000
"InstallNotifyShown"=dword:00000001

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon\Setting s]
"Data"=hex:01,00,00,00,d0,8c,9d,df,01,15,d1,11,8c, 7a,00,c0,4f,c2,97,eb,01,00,\
00,00,7c,92,26,31,79,b1,bb,49,be,58,73,73,3a,45,0a ,88,04,00,00,00,04,00,00,\
00,53,00,00,00,03,66,00,00,a8,00,00,00,10,00,00,00 ,29,4e,ff,db,7a,23,99,df,\
b3,ae,ae,b6,4b,c9,dc,ef,00,00,00,00,04,80,00,00,a0 ,00,00,00,10,00,00,00,65,\
80,55,ce,1a,a5,e8,ba,4e,70,67,4e,6a,a5,7e,84,b0,01 ,00,00,fc,58,99,a0,d4,3c,\
de,0a,8a,26,40,b2,ad,e8,b9,53,38,b4,c1,e8,71,8b,a1 ,b0,b4,f8,a8,49,20,1c,ba,\
f4,f5,20,7d,5d,1e,48,2d,f1,a5,82,ab,b7,08,90,38,1e ,85,62,ef,c9,f4,02,6e,2d,\
e1,b2,33,5e,9c,b7,f9,4b,09,ba,56,ef,5b,d5,c1,8c,b1 ,95,e9,f5,64,05,85,13,58,\
85,2f,1b,8f,6a,b6,13,76,6c,a1,2d,b3,10,9e,78,59,18 ,82,d1,79,62,17,ed,34,d5,\
f9,1c,71,6a,55,1d,36,a2,1a,aa,a2,2d,60,a3,c1,6a,dd ,06,4b,d0,df,09,0f,e1,da,\
81,29,6f,68,a5,36,96,70,de,33,40,7b,92,99,98,fd,8d ,05,2a,b2,c2,e1,64,9e,ab,\
7c,bb,2d,fb,00,19,d0,e6,64,ce,21,af,d9,44,7a,fa,37 ,15,3f,48,26,eb,52,ba,28,\
4d,00,3e,0d,16,8f,ee,07,e0,b7,f4,00,80,cb,b7,19,d4 ,d4,03,be,b3,6a,67,7c,46,\
9d,2c,9a,43,78,9b,1c,a9,ab,ce,62,0c,62,26,91,60,39 ,08,da,df,ba,90,6e,a2,4c,\
2c,42,bb,89,56,1d,14,47,43,e9,36,3c,95,85,d4,8b,76 ,93,7c,2a,5e,06,90,6c,f3,\
00,70,86,2d,54,86,2f,07,62,44,b7,1f,ce,66,3e,96,09 ,ae,ea,b2,43,fb,1c,c6,7d,\
ef,bb,35,35,c7,e8,ae,2c,fa,3c,fd,0d,37,2c,02,64,90 ,1d,6c,32,fe,75,d8,b1,2d,\
5c,03,54,de,d4,d4,c3,cc,42,10,4e,0a,ee,23,ac,f7,16 ,98,18,be,04,ad,21,83,6b,\
fd,81,d0,52,1f,80,7e,5e,6c,57,be,00,dc,06,ab,92,b9 ,ec,0c,d7,b9,b9,a0,54,9a,\
d1,08,bf,bc,7e,50,7a,ef,1a,ba,42,78,91,09,ab,3e,50 ,89,42,27,42,3b,3d,ad,32,\
fe,3a,49,63,f1,46,96,80,4c,79,29,b4,9f,17,b6,15,f8 ,a0,a3,f7,6d,a8,e5,55,7d,\
e2,65,ac,f4,28,0b,42,81,96,b6,51,38,0a,b0,32,a7,92 ,57,e3,a5,c7,47,85,05,13,\
c0,14,00,00,00,a5,40,ed,e1,64,d3,90,26,af,a5,ac,07 ,8f,8c,e9,d4,e8,03,f8,01

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\winepi32]
"Asynchronous"=dword:00000001
"DllName"="winepi32.dll"
"Impersonate"=dword:00000000
"Startup"="EvtStartup"
"Shutdown"="EvtShutdown"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\wlballoon]
"DLLName"="wlnotify.dll"
"Logon"="RegisterTicketExpiredNotificationEven t"
"Logoff"="UnregisterTicketExpiredNotificationEvent "
"Impersonate"=dword:00000001
"Asynchronous"=dword:00000001


The following are the files found:
************************************************** **************************

Registry Entries that were Deleted:
Please verify that the listing looks ok.
If there was something deleted wrongly there are backups in the backreg folder.
************************************************** **************************
REGEDIT4

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Curr entVersion\Shell Extensions\Approved]
REGEDIT4

[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Internet Settings\User Agent\Post Platform]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Internet Settings\User Agent\Post Platform]
"SV1"=""
************************************************** **************************
Desktop.ini Contents:
************************************************** **************************

************************************************** **************************
Checking for L2MFix account(0=no 1=yes):
0
Zipping up files for submission:
zip warning: name not matched: dlls\*.*

zip error: Nothing to do! (backup.zip)
adding: backregs/notibac.reg (164 bytes security) (deflated 83%)
adding: backregs/shell.reg (164 bytes security) (deflated 74%)

Ok, siguen aún apareciendo las ventanas del antivirus pro?



Salu2

se reinicio una sola vez, y si siguen saliendo ventanas, tengo que reiniciarlo mas?

Aún siguen saliendo las ventanas?


Seguro que le diste a la opción 2 del lm2fix tal y como te lo indiqué?



Salu2

si, si lo hice, y que pasa si lo hago de nuevo?

Hola que tal, se me había traspapelado tu tema en estos días, podrías indicar el estado actual de tu sistema y si siguen los problemas?



Salu2