Hola!

Soy un usuario nuevo y me ha gustado mucho este foro. Mi problema es que ultimamente el pc se ha vuelto muy lento y me esta desesperando. El procesador
esta al 100% muy a menudo y no encuentro el porque. Por favor auydenme!

Logfile of HijackThis v1.99.1
Scan saved at 20:08:27, on 5/12/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Archivos de programa\F-Secure Internet Security\Anti-Virus\fsgk32st.exe
C:\Archivos de programa\F-Secure Internet Security\Anti-Virus\FSGK32.EXE
C:\Archivos de programa\F-Secure Internet Security\Common\FSMA32.EXE
C:\Archivos de programa\F-Secure Internet Security\Anti-Virus\fssm32.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\lvhidsvc.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\PAStiSvc.exe
C:\WINDOWS\System32\svchost.exe
C:\Archivos de programa\Archivos comunes\Real\Update_OB\realsched.exe
C:\Archivos de programa\VibrateGameDeviceDriver\RFPIcon.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Archivos de programa\Java\jre1.5.0_09\bin\jusched.exe
C:\Archivos de programa\ATI Technologies\ATI.ACE\cli.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Archivos de programa\Archivos comunes\Ahead\lib\NMBgMonitor.exe
C:\Archivos de programa\Google\GoogleToolbarNotifier\1.2.908.5008 \GoogleToolbarNotifier.exe
C:\Archivos de programa\Telefonica\Kit ADSL USB\dslmon.exe
C:\Archivos de programa\Archivos comunes\PCSuite\Services\ServiceLayer.exe
C:\Archivos de programa\ATI Technologies\ATI.ACE\cli.exe
C:\Archivos de programa\TVR\TVR.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Archivos de programa\F-Secure Internet Security\Common\FSM32.EXE
C:\Archivos de programa\F-Secure Internet Security\Common\FSMB32.EXE
C:\Archivos de programa\F-Secure Internet Security\Common\FCH32.EXE
C:\Archivos de programa\F-Secure Internet Security\backweb\4476822\program\fsbwsys.exe
C:\Archivos de programa\F-Secure Internet Security\Common\FAMEH32.EXE
C:\Archivos de programa\F-Secure Internet Security\Anti-Virus\fsqh.exe
C:\ARCHIV~1\F-SECU~1\backweb\4476822\Program\SERVIC~1.EXE
C:\Archivos de programa\F-Secure Internet Security\Anti-Virus\fsrw.exe
C:\Archivos de programa\F-Secure Internet Security\FWES\Program\fsdfwd.exe
C:\Archivos de programa\F-Secure Internet Security\backweb\4476822\Program\fspex.exe
C:\Archivos de programa\F-Secure Internet Security\Anti-Virus\fsav32.exe
C:\ARCHIV~1\F-SECU~1\ANTI-S~1\fsaw.exe
C:\Archivos de programa\F-Secure Internet Security\FSGUI\fsguidll.exe
C:\Documents and Settings\Velin\Escritorio\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.telefonica.net/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Vínculos
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Archivos de programa\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Archivos de programa\Java\jre1.5.0_09\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Archivos de programa\Archivos comunes\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\archivos de programa\google\googletoolbar2.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\archivos de programa\google\googletoolbar2.dll
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [Win32] msnsrv.exe
O4 - HKLM\..\Run: [MS Dynamic Host Configuration Protocol] MSDHCP32.exe
O4 - HKLM\..\Run: [ATIPTA] "C:\Archivos de programa\ATI Technologies\ATI Control Panel\atiptaxx.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Archivos de programa\Archivos comunes\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Archivos de programa\Archivos comunes\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Archivos de programa\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Archivos de programa\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [RTBatteryMeter] C:\Archivos de programa\VibrateGameDeviceDriver\RFPIcon.exe
O4 - HKLM\..\Run: [RecSche] "C:\Archivos de programa\TVR\RecSche.exe"
O4 - HKLM\..\Run: [ScanRegistry] C:\W
O4 - HKLM\..\Run: [F-Secure Manager] "C:\Archivos de programa\F-Secure Internet Security\Common\FSM32.EXE" /splash
O4 - HKLM\..\Run: [F-Secure TNB] "C:\Archivos de programa\F-Secure Internet Security\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW
O4 - HKLM\..\Run: [F-Secure Startup Wizard] "C:\Archivos de programa\F-Secure Internet Security\FSGUI\FSSW.EXE" /reboot
O4 - HKLM\..\Run: [C-Media Speaker Configuration] C:\Documents and Settings\Velin\Escritorio\drv\Setup.exe /SPEAKER
O4 - HKLM\..\Run: [AltnetPointsManager] C:\Program Files\Altnet\Points Manager\Points Manager.exe -s
O4 - HKLM\..\Run: [AgenteADSL_15] C:\Archivos de programa\Telefonica\KitAIM\AimExDll.exe AimGestA.dll 4
O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\ARCHIV~1\Nokia\NOKIAP~1\LAUNCH~1.EXE -startup
O4 - HKLM\..\Run: [WinDVRCtrl] C:\WINDOWS\WDVRCtrl.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Archivos de programa\Java\jre1.5.0_09\bin\jusched.exe
O4 - HKLM\..\Run: [ATICCC] "C:\Archivos de programa\ATI Technologies\ATI.ACE\cli.exe" runtime -Delay
O4 - HKLM\..\RunServices: [Win32] msnsrv.exe
O4 - HKLM\..\RunServices: [MS Dynamic Host Configuration Protocol] MSDHCP32.exe
O4 - HKCU\..\Run: [Win32] msnsrv.exe
O4 - HKCU\..\Run: [MS Dynamic Host Configuration Protocol] MSDHCP32.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Archivos de programa\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Archivos de programa\Archivos comunes\Ahead\lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [MSMSGS] "C:\Archivos de programa\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [swg] C:\Archivos de programa\Google\GoogleToolbarNotifier\1.2.908.5008 \GoogleToolbarNotifier.exe
O4 - Global Startup: Consola KIT ADSL.lnk = ?
O4 - Global Startup: F-Secure Anti-Virus 2006.lnk = C:\Archivos de programa\F-Secure Internet Security\backweb\4476822\Program\fspex.exe
O4 - Global Startup: Inicio rápido de Adobe Reader.lnk = C:\Archivos de programa\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: KODAK Software Updater.lnk = C:\Archivos de programa\Kodak\KODAK Software Updater\7288971\Program\Kodak Software Updater.exe
O4 - Global Startup: Software Kodak EasyShare.lnk = C:\Archivos de programa\Kodak\Kodak EasyShare software\bin\EasyShare.exe
O8 - Extra context menu item: &Bloquear esta ventana - C:\Archivos de programa\F-Secure Internet Security\Anti-Spyware\blockpopups.htm
O8 - Extra context menu item: &Clean Traces - C:\Archivos de programa\DAP\Privacy Package\dapcleanerie.htm
O8 - Extra context menu item: &Download with &DAP - C:\Archivos de programa\DAP\dapextie.htm
O8 - Extra context menu item: &Search - http://kq.bar.need2find.com/KQ/menusearch.html?p=KQ
O8 - Extra context menu item: Download &all with DAP - C:\Archivos de programa\DAP\dapextie2.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Archivos de programa\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Consola de Sun Java - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Archivos de programa\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra button: IE Shield - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Archivos de programa\F-Secure Internet Security\Anti-Spyware\ieshield.dll
O9 - Extra 'Tools' menuitem: IE Shield... - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Archivos de programa\F-Secure Internet Security\Anti-Spyware\ieshield.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Archivos de programa\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Archivos de programa\Messenger\msmsgs.exe
O16 - DPF: {0D6709DD-4ED8-40CA-B459-2757AEEF7BEE} (Dldrv2 Control) - http://download.gigabyte.com.tw/object/Dldrv.ocx
O16 - DPF: {1D6711C8-7154-40BB-8380-3DEA45B69CBF} -
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by119w.bay119.mail.live.com/mail/resources/MsnPUpld.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{3FEF7740-9AAF-4188-810F-4E0C3FF4241A}: NameServer = 80.58.61.250 80.58.61.254
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\ARCHIV~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\ARCHIV~1\MSNMES~1\MSGRAP~1.DLL
O18 - Filter: text/html - {2AB289AE-4B90-4281-B2AE-1F4BB034B647} - (no file)
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: F-Secure Anti-Virus 2006 (BackWeb Plug-in - 4476822) - F-Secure Internet Security 2005 - C:\ARCHIV~1\F-SECU~1\backweb\4476822\Program\SERVIC~1.EXE
O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - F-Secure Corporation - C:\Archivos de programa\F-Secure Internet Security\Anti-Virus\fsgk32st.exe
O23 - Service: fsbwsys - F-Secure Corp. - C:\Archivos de programa\F-Secure Internet Security\backweb\4476822\program\fsbwsys.exe
O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Archivos de programa\F-Secure Internet Security\FWES\Program\fsdfwd.exe
O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Archivos de programa\F-Secure Internet Security\Common\FSMA32.EXE
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Archivos de programa\Archivos comunes\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Kodak Camera Connection Software (KodakCCS) - Unknown owner - C:\WINDOWS\system32\drivers\KodakCCS.exe (file missing)
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: Remote HID Service (LvHidSvc) - Philips - C:\WINDOWS\system32\lvhidsvc.exe
O23 - Service: ServiceLayer - Nokia. - C:\Archivos de programa\Archivos comunes\PCSuite\Services\ServiceLayer.exe
O23 - Service: STI Simulator - Unknown owner - C:\WINDOWS\System32\PAStiSvc.exe

Hola velin bienvenido al foro

Ve al panel de control en agregar o quitar programas y desinstala:
DAP, si la version que usas es gratuia

¿Sabes que esto?
VibrateGameDeviceDriver

Luego realiza estos pasos:

1. Apaga Restaurar Sistema

2. Ver Archivos Ocultos

3. Reinicia en Modo Seguro

4. Con todos los programas cerrados ejecuta el HijackThis y dale “FIX Cheked” a las siguientes entradas:

O4 - HKLM\..\Run: [Win32] msnsrv.exe
O4 - HKLM\..\Run: [MS Dynamic Host Configuration Protocol] MSDHCP32.exe

O4 - HKLM\..\Run: [C-Media Speaker Configuration] C:\Documents and Settings\Velin\Escritorio\drv\Setup.exe /SPEAKER

O4 - HKLM\..\RunServices: [Win32] msnsrv.exe
O4 - HKLM\..\RunServices: [MS Dynamic Host Configuration Protocol] MSDHCP32.exe
O4 - HKCU\..\Run: [Win32] msnsrv.exe
O4 - HKCU\..\Run: [MS Dynamic Host Configuration Protocol] MSDHCP32.exe

O8 - Extra context menu item: &Search - http://kq.bar.need2find.com/KQ/menusearch.html?p=KQ

O16 - DPF: {1D6711C8-7154-40BB-8380-3DEA45B69CBF} –

O23 - Service: Kodak Camera Connection Software (KodakCCS) - Unknown owner - C:\WINDOWS\system32\drivers\KodakCCS.exe (file missing)

5. Busca y elimina estos archivos con el KillBox, usando la opcion delete on reboot.

C:\WINDOWS\System32\msnsrv.exe
C:\WINDOWS\System32\MSDHCP32.exe

Si no encuentras alguno usa el buscador (Inicio/Buscar/Todos los archivos y/o carpetas)

6. Le pasas:

• El Ad-Ware SE actualizado.
• El RegSeeker, debes usar la opción Limpiar Registro, pásalo las veces que sean necesarias hasta que no aparezca nada.
• El Disk Cleaner, para limpiar cookies y temporales.

Reinicias y te recomiendo que instales el SpywareBlaster 3.5.1, y su Manual .

Debes visitar Windows Update para que descargues las últimas actualizaciones criticas de seguridad, y Aquí para el internet explorer.

Al finalizar deshaces los dos primeros pasos, pegas un nuevo log para ver los resultados y nos cuentas como te fue.

Saludos.

Hola.

He seguido todos los pasos pero no encuentro los dos archivos que hay que eliminar. VibrateGameDeviceDriver es un controlador para poder usar el mando de la play en el pc. Por lo demás creo que todo bien pero no noto algún cambio en el fucionamiento aunque es posible que vaya un poco mas rapido.
Saludos

Aquí está el log:

Logfile of HijackThis v1.99.1
Scan saved at 23:22:33, on 7/12/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0011)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\ARCHIV~1\F-SECU~1\backweb\4476822\Program\SERVIC~1.EXE
C:\Archivos de programa\Bonjour\mDNSResponder.exe
C:\Archivos de programa\F-Secure Internet Security\Anti-Virus\fsgk32st.exe
C:\Archivos de programa\F-Secure Internet Security\Anti-Virus\FSGK32.EXE
C:\Archivos de programa\F-Secure Internet Security\backweb\4476822\program\fsbwsys.exe
C:\Archivos de programa\F-Secure Internet Security\Common\FSMA32.EXE
C:\Archivos de programa\F-Secure Internet Security\Anti-Virus\fssm32.exe
C:\Archivos de programa\F-Secure Internet Security\Common\FSMB32.EXE
C:\WINDOWS\system32\lvhidsvc.exe
C:\Archivos de programa\F-Secure Internet Security\Common\FCH32.EXE
C:\WINDOWS\System32\PAStiSvc.exe
C:\WINDOWS\System32\svchost.exe
C:\Archivos de programa\F-Secure Internet Security\Common\FAMEH32.EXE
C:\Archivos de programa\F-Secure Internet Security\Anti-Virus\fsqh.exe
C:\Archivos de programa\F-Secure Internet Security\Anti-Virus\fsrw.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Archivos de programa\F-Secure Internet Security\Anti-Virus\fsav32.exe
C:\Archivos de programa\Archivos comunes\Real\Update_OB\realsched.exe
C:\Archivos de programa\VibrateGameDeviceDriver\RFPIcon.exe
C:\Archivos de programa\F-Secure Internet Security\Common\FSM32.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\Archivos de programa\Java\jre1.5.0_09\bin\jusched.exe
C:\Archivos de programa\ATI Technologies\ATI.ACE\cli.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Archivos de programa\MSN Messenger\MsnMsgr.Exe
C:\Archivos de programa\Archivos comunes\Ahead\lib\NMBgMonitor.exe
C:\Archivos de programa\Messenger\msmsgs.exe
C:\Archivos de programa\Google\GoogleToolbarNotifier\1.2.908.5008 \GoogleToolbarNotifier.exe
C:\Archivos de programa\Telefonica\Kit ADSL USB\dslmon.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Archivos de programa\F-Secure Internet Security\backweb\4476822\Program\fspex.exe
C:\Archivos de programa\Adobe\Acrobat 7.0\Reader\reader_sl.exe
C:\Archivos de programa\Kodak\KODAK Software Updater\7288971\Program\Kodak Software Updater.exe
C:\Archivos de programa\Kodak\Kodak EasyShare software\bin\EasyShare.exe
C:\Archivos de programa\F-Secure Internet Security\FWES\Program\fsdfwd.exe
C:\Archivos de programa\Archivos comunes\PCSuite\Services\ServiceLayer.exe
C:\ARCHIV~1\F-SECU~1\ANTI-S~1\fsaw.exe
C:\Archivos de programa\F-Secure Internet Security\FSGUI\fsguidll.exe
C:\Archivos de programa\ATI Technologies\ATI.ACE\cli.exe
C:\Archivos de programa\ATI Technologies\ATI.ACE\cli.exe
C:\ARCHIV~1\MOZILL~1\FIREFOX.EXE
C:\Documents and Settings\Velin\Escritorio\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.telefonica.net/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Vínculos
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Archivos de programa\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Archivos de programa\Java\jre1.5.0_09\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Archivos de programa\Archivos comunes\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\archivos de programa\google\googletoolbar2.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\archivos de programa\google\googletoolbar2.dll
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [ATIPTA] "C:\Archivos de programa\ATI Technologies\ATI Control Panel\atiptaxx.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Archivos de programa\Archivos comunes\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Archivos de programa\Archivos comunes\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [QuickTime Task] "C:\Archivos de programa\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [RTBatteryMeter] C:\Archivos de programa\VibrateGameDeviceDriver\RFPIcon.exe
O4 - HKLM\..\Run: [RecSche] "C:\Archivos de programa\TVR\RecSche.exe"
O4 - HKLM\..\Run: [F-Secure Manager] "C:\Archivos de programa\F-Secure Internet Security\Common\FSM32.EXE" /splash
O4 - HKLM\..\Run: [F-Secure TNB] "C:\Archivos de programa\F-Secure Internet Security\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW
O4 - HKLM\..\Run: [F-Secure Startup Wizard] "C:\Archivos de programa\F-Secure Internet Security\FSGUI\FSSW.EXE" /reboot
O4 - HKLM\..\Run: [AgenteADSL_15] C:\Archivos de programa\Telefonica\KitAIM\AimExDll.exe AimGestA.dll 4
O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\ARCHIV~1\Nokia\NOKIAP~1\LAUNCH~1.EXE -startup
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Archivos de programa\Java\jre1.5.0_09\bin\jusched.exe
O4 - HKLM\..\Run: [ATICCC] "C:\Archivos de programa\ATI Technologies\ATI.ACE\cli.exe" runtime -Delay
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Archivos de programa\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Archivos de programa\Archivos comunes\Ahead\lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [MSMSGS] "C:\Archivos de programa\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [swg] C:\Archivos de programa\Google\GoogleToolbarNotifier\1.2.908.5008 \GoogleToolbarNotifier.exe
O4 - Global Startup: Consola KIT ADSL.lnk = ?
O4 - Global Startup: F-Secure Anti-Virus 2006.lnk = C:\Archivos de programa\F-Secure Internet Security\backweb\4476822\Program\fspex.exe
O4 - Global Startup: Inicio rápido de Adobe Reader.lnk = C:\Archivos de programa\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: KODAK Software Updater.lnk = C:\Archivos de programa\Kodak\KODAK Software Updater\7288971\Program\Kodak Software Updater.exe
O4 - Global Startup: Software Kodak EasyShare.lnk = C:\Archivos de programa\Kodak\Kodak EasyShare software\bin\EasyShare.exe
O8 - Extra context menu item: &Bloquear esta ventana - C:\Archivos de programa\F-Secure Internet Security\Anti-Spyware\blockpopups.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Archivos de programa\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Consola de Sun Java - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Archivos de programa\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra button: IE Shield - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Archivos de programa\F-Secure Internet Security\Anti-Spyware\ieshield.dll
O9 - Extra 'Tools' menuitem: IE Shield... - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Archivos de programa\F-Secure Internet Security\Anti-Spyware\ieshield.dll
O9 - Extra button: Bonjour - {7F9DB11C-E358-4ca6-A83D-ACC663939424} - C:\Archivos de programa\Bonjour\ExplorerPlugin.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Archivos de programa\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Archivos de programa\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\archivos de programa\bonjour\mdnsnsp.dll
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {0D6709DD-4ED8-40CA-B459-2757AEEF7BEE} (Dldrv2 Control) - http://download.gigabyte.com.tw/object/Dldrv.ocx
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by119w.bay119.mail.live.com/mail/resources/MsnPUpld.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{3FEF7740-9AAF-4188-810F-4E0C3FF4241A}: NameServer = 80.58.61.250 80.58.61.254
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\ARCHIV~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\ARCHIV~1\MSNMES~1\MSGRAP~1.DLL
O18 - Filter: text/html - {2AB289AE-4B90-4281-B2AE-1F4BB034B647} - (no file)
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: F-Secure Anti-Virus 2006 (BackWeb Plug-in - 4476822) - F-Secure Internet Security 2005 - C:\ARCHIV~1\F-SECU~1\backweb\4476822\Program\SERVIC~1.EXE
O23 - Service: Servicio Bonjour (Bonjour Service) - Apple Computer, Inc. - C:\Archivos de programa\Bonjour\mDNSResponder.exe
O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - F-Secure Corporation - C:\Archivos de programa\F-Secure Internet Security\Anti-Virus\fsgk32st.exe
O23 - Service: fsbwsys - F-Secure Corp. - C:\Archivos de programa\F-Secure Internet Security\backweb\4476822\program\fsbwsys.exe
O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Archivos de programa\F-Secure Internet Security\FWES\Program\fsdfwd.exe
O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Archivos de programa\F-Secure Internet Security\Common\FSMA32.EXE
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Archivos de programa\Archivos comunes\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: Remote HID Service (LvHidSvc) - Philips - C:\WINDOWS\system32\lvhidsvc.exe
O23 - Service: ServiceLayer - Nokia. - C:\Archivos de programa\Archivos comunes\PCSuite\Services\ServiceLayer.exe
O23 - Service: STI Simulator - Unknown owner - C:\WINDOWS\System32\PAStiSvc.exe

Hola de nuevo

Con todos los programas cerrados ejecuta el HijackThis y dale “FIX Cheked” a las siguientes entradas:

O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)

O11 - Options group: [INTERNATIONAL] International*

Realiza scann Online con Ewido y Kaspersky si encuentran algo pegas el reporte en tu proximo mensaje.

Saludos

Hola
Gracias por responderme rapido. He segiudo todos los pasos y aqui dejo los reportes de los antivirus:

ewido anti-spyware online scanner
http://www.ewido.net
__________________________________________________


Name: Adware.SaveNow
Path: C:\Archivos de programa\DAEMON Tools\SetupDTSB.exe
Risk: Medium

Name: TrackingCookie.Yieldmanager
Path: C:\Documents and Settings\Adelina\Cookies\adelina@ad.yieldmanager[2].txt
Risk: Medium

Name: TrackingCookie.Need2find
Path: C:\Documents and Settings\Adelina\Cookies\adelina@need2find[1].txt
Risk: Medium

Name: TrackingCookie.Doubleclick
Path: :mozilla.35:C:\Documents and Settings\Adelina\Datos de programa\Mozilla\Firefox\Profiles\srjuf3xe.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Atdmt
Path: :mozilla.60:C:\Documents and Settings\Adelina\Datos de programa\Mozilla\Firefox\Profiles\srjuf3xe.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Doubleclick
Path: :mozilla.36:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Hitbox
Path: :mozilla.37:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Hitbox
Path: :mozilla.38:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Hitbox
Path: :mozilla.39:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Atdmt
Path: :mozilla.41:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Weborama
Path: :mozilla.76:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Weborama
Path: :mozilla.77:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Adtech
Path: :mozilla.84:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Adtech
Path: :mozilla.86:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Yieldmanager
Path: :mozilla.87:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Yieldmanager
Path: :mozilla.88:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Yieldmanager
Path: :mozilla.89:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Tradedoubler
Path: :mozilla.92:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Tradedoubler
Path: :mozilla.93:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Tradedoubler
Path: :mozilla.94:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Tradedoubler
Path: :mozilla.95:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.2o7
Path: :mozilla.108:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Euroclick
Path: :mozilla.117:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Tacoda
Path: :mozilla.118:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Tacoda
Path: :mozilla.119:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Euroclick
Path: :mozilla.121:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.2o7
Path: :mozilla.122:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.2o7
Path: :mozilla.123:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.2o7
Path: :mozilla.124:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.2o7
Path: :mozilla.125:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.2o7
Path: :mozilla.126:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.2o7
Path: :mozilla.127:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Tacoda
Path: :mozilla.128:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.2o7
Path: :mozilla.129:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.2o7
Path: :mozilla.130:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.2o7
Path: :mozilla.131:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.2o7
Path: :mozilla.133:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.2o7
Path: :mozilla.134:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.2o7
Path: :mozilla.135:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.2o7
Path: :mozilla.136:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.2o7
Path: :mozilla.137:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.2o7
Path: :mozilla.138:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.2o7
Path: :mozilla.139:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.2o7
Path: :mozilla.140:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.2o7
Path: :mozilla.141:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.2o7
Path: :mozilla.142:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.2o7
Path: :mozilla.143:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.2o7
Path: :mozilla.144:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.2o7
Path: :mozilla.145:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.2o7
Path: :mozilla.146:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.2o7
Path: :mozilla.147:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.2o7
Path: :mozilla.148:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.2o7
Path: :mozilla.149:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.2o7
Path: :mozilla.150:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Euroclick
Path: :mozilla.151:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Euroclick
Path: :mozilla.152:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Mediaplex
Path: :mozilla.156:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Fastclick
Path: :mozilla.157:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Fastclick
Path: :mozilla.158:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Fastclick
Path: :mozilla.159:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Admarketplace
Path: :mozilla.160:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Advertising
Path: :mozilla.163:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Advertising
Path: :mozilla.164:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Advertising
Path: :mozilla.165:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Advertising
Path: :mozilla.166:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Advertising
Path: :mozilla.167:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Tribalfusion
Path: :mozilla.168:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Serving-sys
Path: :mozilla.169:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Serving-sys
Path: :mozilla.170:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Serving-sys
Path: :mozilla.171:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Serving-sys
Path: :mozilla.172:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Serving-sys
Path: :mozilla.173:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Serving-sys
Path: :mozilla.174:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Reliablestats
Path: :mozilla.175:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Reliablestats
Path: :mozilla.176:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Reliablestats
Path: :mozilla.177:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Reliablestats
Path: :mozilla.184:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Reliablestats
Path: :mozilla.185:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Tribalfusion
Path: :mozilla.191:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Doubleclick
Path: :mozilla.192:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Adbrite
Path: :mozilla.210:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Adbrite
Path: :mozilla.211:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Falkag
Path: :mozilla.213:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Falkag
Path: :mozilla.214:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Falkag
Path: :mozilla.215:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Falkag
Path: :mozilla.216:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Falkag
Path: :mozilla.217:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Sexcounter
Path: :mozilla.222:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Sexcounter
Path: :mozilla.223:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Statcounter
Path: :mozilla.224:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Statcounter
Path: :mozilla.225:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Statcounter
Path: :mozilla.226:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Statcounter
Path: :mozilla.227:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Statcounter
Path: :mozilla.228:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Statcounter
Path: :mozilla.229:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Statcounter
Path: :mozilla.230:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Statcounter
Path: :mozilla.231:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Statcounter
Path: :mozilla.232:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Statcounter
Path: :mozilla.233:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Statcounter
Path: :mozilla.234:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Statcounter
Path: :mozilla.235:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Statcounter
Path: :mozilla.236:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Statcounter
Path: :mozilla.237:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Statcounter
Path: :mozilla.238:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Statcounter
Path: :mozilla.239:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Statcounter
Path: :mozilla.240:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Statcounter
Path: :mozilla.241:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Statcounter
Path: :mozilla.242:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Statcounter
Path: :mozilla.243:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Statcounter
Path: :mozilla.244:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Statcounter
Path: :mozilla.245:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Statcounter
Path: :mozilla.246:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Statcounter
Path: :mozilla.247:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Statcounter
Path: :mozilla.248:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Statcounter
Path: :mozilla.249:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Statcounter
Path: :mozilla.250:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Statcounter
Path: :mozilla.251:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Webtrendslive
Path: :mozilla.268:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Hitbox
Path: :mozilla.272:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Bfast
Path: :mozilla.321:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Qksrv
Path: :mozilla.361:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Qksrv
Path: :mozilla.364:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Bluestreak
Path: :mozilla.368:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.2o7
Path: :mozilla.369:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.2o7
Path: :mozilla.398:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.2o7
Path: :mozilla.400:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Com
Path: :mozilla.418:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Hitbox
Path: :mozilla.446:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Zedo
Path: :mozilla.488:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Zedo
Path: :mozilla.489:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Casalemedia
Path: :mozilla.512:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Casalemedia
Path: :mozilla.513:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Casalemedia
Path: :mozilla.514:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Casalemedia
Path: :mozilla.515:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Hitbox
Path: :mozilla.517:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.2o7
Path: :mozilla.529:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Yadro
Path: :mozilla.583:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Pointroll
Path: :mozilla.589:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Pointroll
Path: :mozilla.590:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Pointroll
Path: :mozilla.591:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Pointroll
Path: :mozilla.592:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Hitbox
Path: :mozilla.613:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Googleadservices
Path: :mozilla.684:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Smartadserver
Path: :mozilla.775:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Googleadservices
Path: :mozilla.793:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Onestat
Path: :mozilla.810:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Onestat
Path: :mozilla.811:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Onestat
Path: :mozilla.812:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Onestat
Path: :mozilla.813:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Onestat
Path: :mozilla.814:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Hitbox
Path: :mozilla.828:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Hitbox
Path: :mozilla.829:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Hitbox
Path: :mozilla.830:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Hitbox
Path: :mozilla.831:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Hitbox
Path: :mozilla.832:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Hitbox
Path: :mozilla.833:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Hitbox
Path: :mozilla.834:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Hitbox
Path: :mozilla.835:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Hitbox
Path: :mozilla.836:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.247realmedia
Path: :mozilla.859:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.247realmedia
Path: :mozilla.860:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Googleadservices
Path: :mozilla.861:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Googleadservices
Path: :mozilla.873:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Overture
Path: :mozilla.893:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Overture
Path: :mozilla.894:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Trafic
Path: :mozilla.915:C:\Documents and Settings\Velin\Datos de programa\Mozilla\Firefox\Profiles\ltumf3wb.default \cookies.txt
Risk: Medium

Name: Adware.WhenU
Path: C:\Documents and Settings\Velin\Menú Inicio\Programas\WhenUSearch
Risk: Medium

Name: Adware.WhenU
Path: C:\Documents and Settings\Velin\Menú Inicio\Programas\WhenUSearch\WhenUSearch Desktop Toolbar.lnk
Risk: Medium

Name: Adware.P2PNet
Path: C:\WINDOWS\system32\P2P Networking v126.cpl
Risk: Medium

KASPERSKY ONLINE SCANNER REPORT
Saturday, December 09, 2006 10:20:13 PM
Operating System: Microsoft Windows XP Home Edition, Service Pack 2 (Build 2600)
Kaspersky Online Scanner version: 5.0.83.0
Kaspersky Anti-Virus database last update: 9/12/2006
Kaspersky Anti-Virus database records: 239458
Scan Settings
Scan using the following antivirus database standard
Scan Archives true
Scan Mail Bases true
Scan Target Critical Areas
C:\WINDOWS
C:\DOCUME~1\Velin\CONFIG~1\Temp\
Scan Statistics
Total number of scanned objects 18856
Number of viruses found 0
Number of infected objects 0 / 0
Number of suspicious objects 0
Duration of the scan process 00:30:35

Infected Object Name Virus Name Last Action
C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped
C:\WINDOWS\SchedLgU.Txt Object is locked skipped
C:\WINDOWS\SoftwareDistribution\ReportingEvents.lo g Object is locked skipped
C:\WINDOWS\Sti_Trace.log Object is locked skipped
C:\WINDOWS\system32\CatRoot2\edb.log Object is locked skipped
C:\WINDOWS\system32\CatRoot2\tmp.edb Object is locked skipped
C:\WINDOWS\system32\config\ACEEvent.evt Object is locked skipped
C:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\default Object is locked skipped
C:\WINDOWS\system32\config\DEFAULT.LOG Object is locked skipped
C:\WINDOWS\system32\config\Internet.evt Object is locked skipped
C:\WINDOWS\system32\config\SAM Object is locked skipped
C:\WINDOWS\system32\config\SAM.LOG Object is locked skipped
C:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\SECURITY Object is locked skipped
C:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped
C:\WINDOWS\system32\config\software Object is locked skipped
C:\WINDOWS\system32\config\SOFTWARE.LOG Object is locked skipped
C:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\system Object is locked skipped
C:\WINDOWS\system32\config\SYSTEM.LOG Object is locked skipped
C:\WINDOWS\system32\drivers\sptd.sys Object is locked skipped
C:\WINDOWS\system32\h323log.txt Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MA P Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MA P Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DAT A Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP Object is locked skipped
C:\WINDOWS\wiadebug.log Object is locked skipped
C:\WINDOWS\wiaservc.log Object is locked skipped
C:\WINDOWS\WindowsUpdate.log Object is locked skipped
C:\DOCUME~1\Velin\CONFIG~1\Temp\Perflib_Perfdata_a 2c.dat Object is locked skipped
C:\DOCUME~1\Velin\CONFIG~1\Temp\Perflib_Perfdata_d 98.dat Object is locked skipped
C:\DOCUME~1\Velin\CONFIG~1\Temp\Perflib_Perfdata_e c8.dat Object is locked skipped
C:\DOCUME~1\Velin\CONFIG~1\Temp\Perflib_Perfdata_e d4.dat Object is locked skipped
Scan process completed.

Hola de nuevo

Busca y elimina estos archivos con el KillBox, usando la opcion delete on reboot.

C:\Archivos de programa\DAEMON Tools\SetupDTSB.exe
C:\Documents and Settings\Velin\Menú Inicio\Programas\WhenUSearch\WhenUSearch Desktop Toolbar.lnk
C:\WINDOWS\system32\P2P Networking v126.cpl
C:\Documents and Settings\Velin\Menú Inicio\Programas\WhenUSearch\<< La carpeta con todo su contenido

Luego ejecuta

Disk Cleaner y borras todas las cokies y temporales.

Saludos

Hola!

Los archivos a borrar no existen (ya se estaran borrados) aquí esta mi log:

Logfile of HijackThis v1.99.1
Scan saved at 16:02:11, on 10/12/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0011)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\ARCHIV~1\F-SECU~1\backweb\4476822\Program\SERVIC~1.EXE
C:\Archivos de programa\Bonjour\mDNSResponder.exe
C:\Archivos de programa\F-Secure Internet Security\Anti-Virus\fsgk32st.exe
C:\Archivos de programa\F-Secure Internet Security\Anti-Virus\FSGK32.EXE
C:\WINDOWS\system32\Ati2evxx.exe
C:\Archivos de programa\F-Secure Internet Security\backweb\4476822\program\fsbwsys.exe
C:\Archivos de programa\F-Secure Internet Security\Anti-Virus\fssm32.exe
C:\WINDOWS\Explorer.EXE
C:\Archivos de programa\F-Secure Internet Security\backweb\4476822\Program\fspex.exe
C:\Archivos de programa\F-Secure Internet Security\Common\FSMA32.EXE
C:\Archivos de programa\F-Secure Internet Security\Common\FSMB32.EXE
C:\WINDOWS\system32\lvhidsvc.exe
C:\WINDOWS\System32\PAStiSvc.exe
C:\Archivos de programa\F-Secure Internet Security\Common\FCH32.EXE
C:\WINDOWS\System32\svchost.exe
C:\Archivos de programa\F-Secure Internet Security\Common\FAMEH32.EXE
C:\Archivos de programa\F-Secure Internet Security\Anti-Virus\fsqh.exe
C:\Archivos de programa\F-Secure Internet Security\Anti-Virus\fsrw.exe
C:\Archivos de programa\Archivos comunes\Real\Update_OB\realsched.exe
C:\Archivos de programa\VibrateGameDeviceDriver\RFPIcon.exe
C:\Archivos de programa\F-Secure Internet Security\Common\FSM32.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\Archivos de programa\Java\jre1.5.0_09\bin\jusched.exe
C:\Archivos de programa\ATI Technologies\ATI.ACE\cli.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Archivos de programa\MSN Messenger\MsnMsgr.Exe
C:\Archivos de programa\Archivos comunes\Ahead\lib\NMBgMonitor.exe
C:\Archivos de programa\Messenger\msmsgs.exe
C:\Archivos de programa\Google\GoogleToolbarNotifier\1.2.908.5008 \GoogleToolbarNotifier.exe
C:\Archivos de programa\Telefonica\Kit ADSL USB\dslmon.exe
C:\Archivos de programa\F-Secure Internet Security\Anti-Virus\fsav32.exe
C:\Archivos de programa\Kodak\KODAK Software Updater\7288971\Program\Kodak Software Updater.exe
C:\Archivos de programa\ATI Technologies\ATI.ACE\cli.exe
C:\Archivos de programa\ATI Technologies\ATI.ACE\cli.exe
C:\Archivos de programa\F-Secure Internet Security\FWES\Program\fsdfwd.exe
C:\Archivos de programa\Archivos comunes\PCSuite\Services\ServiceLayer.exe
C:\ARCHIV~1\F-SECU~1\ANTI-S~1\fsaw.exe
C:\Archivos de programa\F-Secure Internet Security\FSGUI\fsguidll.exe
C:\Archivos de programa\Winamp\winamp.exe
C:\ARCHIV~1\MOZILL~1\FIREFOX.EXE
C:\Documents and Settings\Velin\Escritorio\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.telefonica.net/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Vínculos
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Archivos de programa\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Archivos de programa\Java\jre1.5.0_09\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Archivos de programa\Archivos comunes\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\archivos de programa\google\googletoolbar2.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\archivos de programa\google\googletoolbar2.dll
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [ATIPTA] "C:\Archivos de programa\ATI Technologies\ATI Control Panel\atiptaxx.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Archivos de programa\Archivos comunes\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Archivos de programa\Archivos comunes\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [QuickTime Task] "C:\Archivos de programa\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [RTBatteryMeter] C:\Archivos de programa\VibrateGameDeviceDriver\RFPIcon.exe
O4 - HKLM\..\Run: [RecSche] "C:\Archivos de programa\TVR\RecSche.exe"
O4 - HKLM\..\Run: [F-Secure Manager] "C:\Archivos de programa\F-Secure Internet Security\Common\FSM32.EXE" /splash
O4 - HKLM\..\Run: [F-Secure TNB] "C:\Archivos de programa\F-Secure Internet Security\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW
O4 - HKLM\..\Run: [F-Secure Startup Wizard] "C:\Archivos de programa\F-Secure Internet Security\FSGUI\FSSW.EXE" /reboot
O4 - HKLM\..\Run: [AgenteADSL_15] C:\Archivos de programa\Telefonica\KitAIM\AimExDll.exe AimGestA.dll 4
O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\ARCHIV~1\Nokia\NOKIAP~1\LAUNCH~1.EXE -startup
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Archivos de programa\Java\jre1.5.0_09\bin\jusched.exe
O4 - HKLM\..\Run: [ATICCC] "C:\Archivos de programa\ATI Technologies\ATI.ACE\cli.exe" runtime -Delay
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Archivos de programa\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Archivos de programa\Archivos comunes\Ahead\lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [MSMSGS] "C:\Archivos de programa\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [swg] C:\Archivos de programa\Google\GoogleToolbarNotifier\1.2.908.5008 \GoogleToolbarNotifier.exe
O4 - Global Startup: Consola KIT ADSL.lnk = ?
O4 - Global Startup: F-Secure Anti-Virus 2006.lnk = C:\Archivos de programa\F-Secure Internet Security\backweb\4476822\Program\fspex.exe
O4 - Global Startup: Inicio rápido de Adobe Reader.lnk = C:\Archivos de programa\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: KODAK Software Updater.lnk = C:\Archivos de programa\Kodak\KODAK Software Updater\7288971\Program\Kodak Software Updater.exe
O4 - Global Startup: Software Kodak EasyShare.lnk = C:\Archivos de programa\Kodak\Kodak EasyShare software\bin\EasyShare.exe
O8 - Extra context menu item: &Bloquear esta ventana - C:\Archivos de programa\F-Secure Internet Security\Anti-Spyware\blockpopups.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Archivos de programa\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Consola de Sun Java - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Archivos de programa\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra button: IE Shield - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Archivos de programa\F-Secure Internet Security\Anti-Spyware\ieshield.dll
O9 - Extra 'Tools' menuitem: IE Shield... - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Archivos de programa\F-Secure Internet Security\Anti-Spyware\ieshield.dll
O9 - Extra button: Bonjour - {7F9DB11C-E358-4ca6-A83D-ACC663939424} - C:\Archivos de programa\Bonjour\ExplorerPlugin.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Archivos de programa\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Archivos de programa\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\archivos de programa\bonjour\mdnsnsp.dll
O16 - DPF: {0D6709DD-4ED8-40CA-B459-2757AEEF7BEE} (Dldrv2 Control) - http://download.gigabyte.com.tw/object/Dldrv.ocx
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/english/kavwebscan_unicode.cab
O16 - DPF: {193C772A-87BE-4B19-A7BB-445B226FE9A1} (ewidoOnlineScan Control) - http://download.ewido.net/ewidoOnlineScan.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by119w.bay119.mail.live.com/mail/resources/MsnPUpld.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{3FEF7740-9AAF-4188-810F-4E0C3FF4241A}: NameServer = 80.58.61.250 80.58.61.254
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\ARCHIV~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\ARCHIV~1\MSNMES~1\MSGRAP~1.DLL
O18 - Filter: text/html - {2AB289AE-4B90-4281-B2AE-1F4BB034B647} - (no file)
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: F-Secure Anti-Virus 2006 (BackWeb Plug-in - 4476822) - F-Secure Internet Security 2005 - C:\ARCHIV~1\F-SECU~1\backweb\4476822\Program\SERVIC~1.EXE
O23 - Service: Servicio Bonjour (Bonjour Service) - Apple Computer, Inc. - C:\Archivos de programa\Bonjour\mDNSResponder.exe
O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - F-Secure Corporation - C:\Archivos de programa\F-Secure Internet Security\Anti-Virus\fsgk32st.exe
O23 - Service: fsbwsys - F-Secure Corp. - C:\Archivos de programa\F-Secure Internet Security\backweb\4476822\program\fsbwsys.exe
O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Archivos de programa\F-Secure Internet Security\FWES\Program\fsdfwd.exe
O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Archivos de programa\F-Secure Internet Security\Common\FSMA32.EXE
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Archivos de programa\Archivos comunes\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: Remote HID Service (LvHidSvc) - Philips - C:\WINDOWS\system32\lvhidsvc.exe
O23 - Service: ServiceLayer - Nokia. - C:\Archivos de programa\Archivos comunes\PCSuite\Services\ServiceLayer.exe
O23 - Service: STI Simulator - Unknown owner - C:\WINDOWS\System32\PAStiSvc.exe

Hola
por favor me puedes responder?