Foro de InfoSpyware - Foro de Hijackthis - Foro de Virus

nececito ayuda por favor con virus en mi computadora

tengo el antivirus active virus shield y me dice que tengo virus en mi pc. le doy en borrar y me dice que ya estan borrados esto es lo que me dice


Protection
----------
Total scanned: 9088
Detected: 6
Untreated: 0
Start time: 12/01/2007 18:56:37
Duration: 02:27:56


Detected
--------
Status Object
------ ------
deleted: Trojan program Trojan-Downloader.Win32.Agent.awf File: C:\windows\temp\ulogin125.exe/PE_Patch.UPX/UPX
deleted: Trojan program Trojan-Downloader.Win32.Agent.awf File: C:\Documents and Settings\beto\Configuración local\Archivos temporales de Internet\Content.IE5\K5EN89Q3\nweb2[1]/PE_Patch.UPX/UPX
deleted: Trojan program Trojan-Downloader.Win32.Small.dam File: C:\WINDOWS\system32\hfmdlule.exe
deleted: Trojan program Trojan-Clicker.Win32.Small.js File: C:\WINDOWS\system32\oaburxye.dmj
deleted: Trojan program Trojan.Win32.VB.atw File: C:\WINDOWS\system32\msmapi32.exe/UPX
deleted: adware not-a-virus:AdWare.Win32.Comet.az File: C:\Archivos de programa\Starware343\bin\Starware343.dll


Events
------
Time Event
---- -----
05/01/2007 15:03:59 A full computer scan has never been performed. Please complete a full scan as soon as possible. The initial scan may be time consuming, but you may pause and resume the scan at any time.
05/01/2007 15:05:18 A full computer scan has never been performed. Please complete a full scan as soon as possible. The initial scan may be time consuming, but you may pause and resume the scan at any time.
05/01/2007 15:09:18 Please restart your computer to complete the installation of new or updated protection components.
05/01/2007 15:09:25 Update completed successfully.
05/01/2007 16:32:12 A full computer scan has never been performed. Please complete a full scan as soon as possible. The initial scan may be time consuming, but you may pause and resume the scan at any time.
05/01/2007 16:34:01 Process (PID 884) tried to access Active Virus Shield process (PID 1556), but it has been blocked. This is Self-Defense monitoring, and you do not need to do anything.
05/01/2007 16:34:03 Process (PID 884) tried to access Active Virus Shield process (PID 452), but it has been blocked. This is Self-Defense monitoring, and you do not need to do anything.
05/01/2007 17:12:45 Please restart your computer to complete the installation of new or updated protection components.
05/01/2007 17:12:48 Update completed successfully.
05/01/2007 17:35:59 File C:\windows\temp\ulogin125.exe/PE_Patch.UPX/UPX: detected Trojan program Trojan-Downloader.Win32.Agent.awf
05/01/2007 17:35:59 Security threats have been detected. You are advised to neutralize them immediately.
05/01/2007 17:36:19 File C:\windows\temp\ulogin125.exe: deleted
05/01/2007 17:36:21 File C:\Documents and Settings\beto\Configuración local\Archivos temporales de Internet\Content.IE5\K5EN89Q3\nweb2[1]/PE_Patch.UPX/UPX: detected Trojan program Trojan-Downloader.Win32.Agent.awf
05/01/2007 17:36:21 Security threats have been detected. You are advised to neutralize them immediately.
05/01/2007 17:36:28 File C:\Documents and Settings\beto\Configuración local\Archivos temporales de Internet\Content.IE5\K5EN89Q3\nweb2[1]: deleted
05/01/2007 20:12:09 A full computer scan has never been performed. Please complete a full scan as soon as possible. The initial scan may be time consuming, but you may pause and resume the scan at any time.
05/01/2007 20:12:33 Update completed successfully.
05/01/2007 20:12:49 Process (PID 580) tried to access Active Virus Shield process (PID 1348), but it has been blocked. This is Self-Defense monitoring, and you do not need to do anything.
06/01/2007 13:55:57 A full computer scan has never been performed. Please complete a full scan as soon as possible. The initial scan may be time consuming, but you may pause and resume the scan at any time.
06/01/2007 13:56:08 Process (PID 1836) tried to access Active Virus Shield process (PID 1340), but it has been blocked. This is Self-Defense monitoring, and you do not need to do anything.
06/01/2007 13:56:08 Process (PID 1836) tried to access Active Virus Shield process (PID 1984), but it has been blocked. This is Self-Defense monitoring, and you do not need to do anything.
06/01/2007 13:56:37 Update completed successfully.
06/01/2007 15:56:11 Process (PID 3660) tried to access Active Virus Shield process (PID 1340), but it has been blocked. This is Self-Defense monitoring, and you do not need to do anything.
06/01/2007 15:56:11 Process (PID 3660) tried to access Active Virus Shield process (PID 1984), but it has been blocked. This is Self-Defense monitoring, and you do not need to do anything.
06/01/2007 16:07:23 Update completed successfully.
07/01/2007 11:51:02 A full computer scan has never been performed. Please complete a full scan as soon as possible. The initial scan may be time consuming, but you may pause and resume the scan at any time.
07/01/2007 11:51:12 Process (PID 1548) tried to access Active Virus Shield process (PID 1340), but it has been blocked. This is Self-Defense monitoring, and you do not need to do anything.
07/01/2007 11:51:35 Update completed successfully.
07/01/2007 14:01:22 Update completed successfully.
07/01/2007 16:11:42 Update completed successfully.
07/01/2007 18:34:30 A full computer scan has never been performed. Please complete a full scan as soon as possible. The initial scan may be time consuming, but you may pause and resume the scan at any time.
07/01/2007 18:34:47 Update completed successfully.
08/01/2007 14:20:17 A full computer scan has never been performed. Please complete a full scan as soon as possible. The initial scan may be time consuming, but you may pause and resume the scan at any time.
08/01/2007 14:20:24 Process (PID 1540) tried to access Active Virus Shield process (PID 1352), but it has been blocked. This is Self-Defense monitoring, and you do not need to do anything.
08/01/2007 14:20:39 Update completed successfully.
11/01/2007 9:14:19 A full computer scan has never been performed. Please complete a full scan as soon as possible. The initial scan may be time consuming, but you may pause and resume the scan at any time.
11/01/2007 9:15:03 Update completed successfully.
11/01/2007 11:09:49 File C:\WINDOWS\system32\hfmdlule.exe: detected Trojan program Trojan-Downloader.Win32.Small.dam
11/01/2007 11:09:50 Security threats have been detected. You are advised to neutralize them immediately.
11/01/2007 1104 File C:\WINDOWS\system32\hfmdlule.exe: deleted
11/01/2007 1104 File C:\WINDOWS\system32\oaburxye.dmj: detected Trojan program Trojan-Clicker.Win32.Small.js
11/01/2007 1104 Security threats have been detected. You are advised to neutralize them immediately.
11/01/2007 1105 File C:\WINDOWS\system32\oaburxye.dmj: deleted
11/01/2007 1106 File C:\WINDOWS\system32\msmapi32.exe/UPX: detected Trojan program Trojan.Win32.VB.atw
11/01/2007 1106 Security threats have been detected. You are advised to neutralize them immediately.
11/01/2007 1106 File C:\WINDOWS\system32\msmapi32.exe: deleted
11/01/2007 11:25:15 Update completed successfully.
11/01/2007 13:25:50 Update completed successfully.
11/01/2007 14:45:32 A full computer scan has never been performed. Please complete a full scan as soon as possible. The initial scan may be time consuming, but you may pause and resume the scan at any time.
11/01/2007 14:48:10 Process (PID 1448) tried to access Active Virus Shield process (PID 1380), but it has been blocked. This is Self-Defense monitoring, and you do not need to do anything.
11/01/2007 14:48:22 Process (PID 1448) tried to access Active Virus Shield process (PID 1564), but it has been blocked. This is Self-Defense monitoring, and you do not need to do anything.
11/01/2007 14:48:52 Real-time protection is disabled.
11/01/2007 14:49:42 Real-time protection is disabled.
11/01/2007 15:37:34 A full computer scan has never been performed. Please complete a full scan as soon as possible. The initial scan may be time consuming, but you may pause and resume the scan at any time.
11/01/2007 15:38:58 Update completed successfully.
11/01/2007 15:43:44 Process (PID 1464) tried to access Active Virus Shield process (PID 1376), but it has been blocked. This is Self-Defense monitoring, and you do not need to do anything.
11/01/2007 15:43:49 Process (PID 1464) tried to access Active Virus Shield process (PID 1076), but it has been blocked. This is Self-Defense monitoring, and you do not need to do anything.
11/01/2007 17:48:36 Update completed successfully.
11/01/2007 18:43:37 A full computer scan has never been performed. Please complete a full scan as soon as possible. The initial scan may be time consuming, but you may pause and resume the scan at any time.
11/01/2007 20:01:58 A full computer scan has never been performed. Please complete a full scan as soon as possible. The initial scan may be time consuming, but you may pause and resume the scan at any time.
11/01/2007 20:02:02 Process (PID 1540) tried to access Active Virus Shield process (PID 1340), but it has been blocked. This is Self-Defense monitoring, and you do not need to do anything.
11/01/2007 22:02:45 Update completed successfully.
11/01/2007 22:20:50 Process (PID 2612) tried to access Active Virus Shield process (PID 1020), but it has been blocked. This is Self-Defense monitoring, and you do not need to do anything.
11/01/2007 22:20:50 Process (PID 2612) tried to access Active Virus Shield process (PID 1340), but it has been blocked. This is Self-Defense monitoring, and you do not need to do anything.
12/01/2007 18:38:02 A full computer scan has never been performed. Please complete a full scan as soon as possible. The initial scan may be time consuming, but you may pause and resume the scan at any time.
12/01/2007 18:38:10 Process (PID 1664) tried to access Active Virus Shield process (PID 1544), but it has been blocked. This is Self-Defense monitoring, and you do not need to do anything.
12/01/2007 18:38:35 Update completed successfully.
12/01/2007 18:56:36 A full computer scan has never been performed. Please complete a full scan as soon as possible. The initial scan may be time consuming, but you may pause and resume the scan at any time.
12/01/2007 18:56:45 Process (PID 1676) tried to access Active Virus Shield process (PID 1576), but it has been blocked. This is Self-Defense monitoring, and you do not need to do anything.
12/01/2007 18:56:45 Process (PID 1676) tried to access Active Virus Shield process (PID 1876), but it has been blocked. This is Self-Defense monitoring, and you do not need to do anything.
12/01/2007 19:33:58 File C:\Archivos de programa\Starware343\bin\Starware343.dll: detected adware not-a-virus:AdWare.Win32.Comet.az
12/01/2007 19:33:58 Security threats have been detected. You are advised to neutralize them immediately.
12/01/2007 19:34:10 File C:\Archivos de programa\Starware343\bin\Starware343.dll: deleted
12/01/2007 19:34:18 File C:\Archivos de programa\Starware343\bin\Starware343.dll: detected adware not-a-virus:AdWare.Win32.Comet.az
12/01/2007 19:34:18 Security threats have been detected. You are advised to neutralize them immediately.
12/01/2007 19:34:27 File C:\Archivos de programa\Starware343\bin\Starware343.dll: deleted
12/01/2007 19:40:40 Process (PID 3424) tried to access Active Virus Shield process (PID 1576), but it has been blocked. This is Self-Defense monitoring, and you do not need to do anything.
12/01/2007 19:40:40 Process (PID 3424) tried to access Active Virus Shield process (PID 1876), but it has been blocked. This is Self-Defense monitoring, and you do not need to do anything.
12/01/2007 20:47:08 Update completed successfully.


Reports
-------
Task Status Start Finish Size
---- ------ ----- ------ ----
File Anti-Virus running 12/01/2007 18:56:37 930.4 KB
Mail Anti-Virus running 12/01/2007 18:56:37 0 bytes
Scan Startup Objects completed 12/01/2007 18:58:50 12/01/2007 18:59:29 493.5 KB
Update completed 12/01/2007 20:46:54 12/01/2007 20:47:08 10.1 KB


Quarantine
----------
Status Object Size Added
------ ------ ---- -----


Backup
------
Status Object Size
------ ------ ----
Infected: Trojan program Trojan.Win32.VB.atw C:\WINDOWS\system32\msmapi32.exe 48 KB
Infected: Trojan program Trojan-Downloader.Win32.Agent.awf C:\windows\temp\ulogin125.exe 38.2 KB
Infected: Trojan program Trojan-Downloader.Win32.Small.dam C:\WINDOWS\system32\hfmdlule.exe 6.2 KB
Infected: Trojan program Trojan-Clicker.Win32.Small.js C:\WINDOWS\system32\oaburxye.dmj 14.6 KB
Infected: Trojan program Trojan-Downloader.Win32.Agent.awf C:\Documents and Settings\beto\Configuración local\Archivos temporales de Internet\Content.IE5\K5EN89Q3\nweb2[1] 38.2 KB
Infected: adware not-a-virus:AdWare.Win32.Comet.az C:\Archivos de programa\Starware343\bin\Starware343.dll 718.5 KB


tambien scanee con panda antivirus online
y esto me dice



Incidencia Estado Elemento

Adware:Adware/Comet No desinfectado C:\Archivos de programa\Starware343\Setup.exe[Starware343.dll]
Adware:Adware/Comet No desinfectado C:\Documents and Settings\beto\Configuración local\Datos de programa\Mozilla\Firefox\Profiles\97y5f704.default \Cache\1C48E7F2d01[Starware343.dll]
Spyware:Cookie/Sextracker No desinfectado C:\Documents and Settings\beto\Cookies\beto@counter3.sextracker[2].txt
Spyware:Cookie/SexList No desinfectado C:\Documents and Settings\beto\Cookies\beto@sexlist[2].txt
Spyware:Cookie/Sextracker No desinfectado C:\Documents and Settings\beto\Cookies\beto@sextracker[1].txt
Spyware:Cookie/Statcounter No desinfectado C:\Documents and Settings\beto\Cookies\beto@statcounter[1].txt
Spyware:Cookie/Mammamediasolutions No desinfectado C:\Documents and Settings\beto\Cookies\beto@targetnet[2].txt
Spyware:Cookie/WebPower No desinfectado C:\Documents and Settings\beto\Cookies\beto@webpower[1].txt
Spyware:Cookie/ademails No desinfectado C:\Documents and Settings\beto\Cookies\beto@www.ademails[1].txt
Spyware:Cookie/Xiti No desinfectado C:\Documents and Settings\beto\Cookies\beto@xiti[1].txt
Spyware:Cookie/Tribalfusion No desinfectado C:\Documents and Settings\beto\Datos de programa\Mozilla\Firefox\Profiles\97y5f704.default \cookies.txt[.tribalfusion.com/]
Spyware:Cookie/adultfriendfinder No desinfectado C:\Documents and Settings\beto\Datos de programa\Mozilla\Firefox\Profiles\97y5f704.default \cookies.txt[.adultfriendfinder.com/]
Spyware:Cookie/Atlas DMT No desinfectado C:\Documents and Settings\beto\Datos de programa\Mozilla\Firefox\Profiles\97y5f704.default \cookies.txt[.atdmt.com/]
Spyware:Cookie/Go No desinfectado C:\Documents and Settings\beto\Datos de programa\Mozilla\Firefox\Profiles\97y5f704.default \cookies.txt[.go.com/]
Spyware:Cookie/Hitbox No desinfectado C:\Documents and Settings\beto\Datos de programa\Mozilla\Firefox\Profiles\97y5f704.default \cookies.txt[.hitbox.com/]
Spyware:Cookie/Hitbox No desinfectado C:\Documents and Settings\beto\Datos de programa\Mozilla\Firefox\Profiles\97y5f704.default \cookies.txt[.ehg-dig.hitbox.com/]
Spyware:Cookie/Hitbox No desinfectado C:\Documents and Settings\beto\Datos de programa\Mozilla\Firefox\Profiles\97y5f704.default \cookies.txt[.hitbox.com/]
Spyware:Cookie/YieldManager No desinfectado C:\Documents and Settings\beto\Datos de programa\Mozilla\Firefox\Profiles\97y5f704.default \cookies.txt[ad.yieldmanager.com/]
Adware:Adware/AntispywareSoldier No desinfectado C:\WINDOWS\system32\vdphqexx.exe
Herramienta potencialmente no deseada:Application/PassRock No desinfectado D:\Nueva carpeta (2)\cursos\Nueva carpeta\Win XP Portable\PROGRAMS\WinImage\RAS.exe
Herramienta potencialmente no deseada:Application/PWDump.A No desinfectado D:\Nueva carpeta (2)\cursos\Nueva carpeta\Win XP Portable\PROGRAMS\insidepro\lcp5.exe[Data\pwdump3\pwservice.exe]
Herramienta potencialmente no deseada:Application/Pskill.A No desinfectado D:\Nueva carpeta (2)\cursos\Nueva carpeta\Win XP Portable\I386\SYSTEM32\pskill.exe
Adware:Adware/Comet No desinfectado D:\favoritos\maps.exe[Starware343.dll]



y este es el informe de hijackthis
Logfile of HijackThis v1.99.1
Scan saved at 22:48:30, on 12/01/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Archivos de programa\AOL\Active Virus Shield\avp.exe
C:\Archivos de programa\Webroot\Spy Sweeper\SpySweeper.exe
C:\Archivos de programa\NVIDIA Corporation\NvMixer\NVMixerTray.exe
C:\Archivos de programa\AOL\Active Virus Shield\avp.exe
C:\Archivos de programa\Java\jre1.5.0_10\bin\jusched.exe
C:\Archivos de programa\QuickTime\qttask.exe
C:\Archivos de programa\Archivos comunes\Real\Update_OB\realsched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Archivos de programa\MSN Messenger\msnmsgr.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Archivos de programa\Mozilla Firefox\firefox.exe
C:\Archivos de programa\HJT\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Vínculos
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Archivos de programa\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Archivos de programa\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: IeCatch5 Class - {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} - C:\ARCHIV~1\FlashGet\jccatch.dll
O2 - BHO: Complemento del Asistente para Internet de Encarta - {955BE0B8-BC85-4CAF-856E-8E0D8B610560} - C:\Archivos de programa\Archivos comunes\Microsoft Shared\Encarta Web Companion\2007\ENCWCBAR.DLL
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\archivos de programa\google\googletoolbar2.dll
O3 - Toolbar: Asistente para Internet de Encarta - {147D6308-0614-4112-89B1-31402F9B82C4} - C:\Archivos de programa\Archivos comunes\Microsoft Shared\Encarta Web Companion\2007\ENCWCBAR.DLL
O4 - HKLM\..\Run: [NVMixerTray] "C:\Archivos de programa\NVIDIA Corporation\NvMixer\NVMixerTray.exe"
O4 - HKLM\..\Run: [aol] "C:\Archivos de programa\AOL\Active Virus Shield\avp.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Archivos de programa\Java\jre1.5.0_10\bin\jusched.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Archivos de programa\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [TkBellExe] "C:\Archivos de programa\Archivos comunes\Real\Update_OB\realsched.exe" -osboot
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Archivos de programa\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\RunOnce: [Starware343Install] "C:\Archivos de programa\Starware343\Setup.exe" REBOOT
O8 - Extra context menu item: E&xportar a Microsoft Excel - res://C:\ARCHIV~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Referencia - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\ARCHIV~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Barra de búsqueda de Encarta - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Archivos de programa\Archivos comunes\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\ARCHIV~1\FlashGet\flashget.exe
O9 - Extra 'Tools' menuitem: &FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\ARCHIV~1\FlashGet\flashget.exe
O9 - Extra button: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\Archivos de programa\Yahoo!\Messenger\YahooMessenger.exe
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\Archivos de programa\Yahoo!\Messenger\YahooMessenger.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Archivos de programa\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Archivos de programa\Messenger\msmsgs.exe
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O23 - Service: Active Virus Shield (AVP) - Unknown owner - C:\Archivos de programa\AOL\Active Virus Shield\avp.exe" -r (file missing)
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Archivos de programa\iPod\bin\iPodService.exe
O23 - Service: TuneUp WinStyler Theme Service (TUWinStylerThemeSvc) - TuneUp Software GmbH - C:\Archivos de programa\TuneUp Utilities 2006\WinStylerThemeSvc.exe
O23 - Service: Motor de Spy Sweeper de Webroot (WebrootSpySweeperService) - Webroot Software, Inc. - C:\Archivos de programa\Webroot\Spy Sweeper\SpySweeper.exe




les pongo todo esto devido a que he leido muchos temas en este foro y es mas o menos lo que piden, si es demaciado les pido disculpas

y espero que no se una molestia para ustedes de antemano gracias por su atencio

Hola y Bienvenid@ a Forospyware!


El log no muestra nada...


Descarga las siguientes herramientas:

• Killbox
  
• Regseeker
  
• Disk Cleaner

Paso 1:

• Desactiva la restauracion del sistema
  
• Configura el sistema para ver todos los archivos ocultos

Paso 2:

• Reinicia el sistema en modo a prueba de fallos (modo seguro)

Copia y pega las siguientes entradas en el Killbox (una a la vez) donde dice "Full Path of File to Delete" y le das click al boton rojo con cruz blanca del programa para eliminar el archivo:

C:\windows\temp\ulogin125.exe

C:\Documents and Settings\beto\Configuración local\Archivos temporales de Internet\Content.IE5\K5EN89Q3\nweb2[1]

C:\WINDOWS\system32\hfmdlule.exe

C:\WINDOWS\system32\oaburxye.dmj

C:\WINDOWS\system32\msmapi32.exe

C:\Archivos de programa\Starware343\bin\Starware343.dll


Entra en la carpeta Archivos de programa y elimina la carpeta Starware343 con todo su contenido



Limpia los temporales y cookies con el Disk Cleaner

Limpia el registro de windows con el Regseeker (pasalo varias veces hasta que no quede nada por limpiar)



Paso 4:

Reincia el sistema en modo normal

Haz un chequeo con los antivirus online Kaspersky y Ewido


Nos comentas como te fue y dejas un nuevo log para ver como quedo junto con los reportes de los antivirus online (si detectaron infecciones)



Salu2

solo quiero pdirles disculpas por no haberles contestado lo que pasa es que estube fuera de la ciudad


pero me tome este tiempo para agradeceerle su valiosa ayuda


gracias...

Ok...no hay problema, sin embargo, ¿se solucionó el problema con tu sistema? de ser así lo indicas para dar este tema por terminado




Salu2