Hola
Es mi primera vez.
Creo que tengo todo secuestrado. He leído los anteriores mensajes de
about:blank pero no me atrevo a quitar algunas cosas
Por favor, me ayudáis con el Log?.
Muchas gracias.
Logfile of HijackThis v1.99.1
Scan saved at 13:22:20, on 15/07/05
Platform: Windows 98 SE (Win9x 4.10.2222A)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\SPOOL32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\WINDOWS\SYSTEM\MDM.EXE
C:\ARCHIVOS DE PROGRAMA\PANDA SOFTWARE\PANDA ANTIVIRUS PLATINUM\FIREWALL\PAVFIRES.EXE
C:\WINDOWS\ATLBK32.EXE
C:\WINDOWS\SYSTEM\WINYP.EXE
C:\WINDOWS\SYSTEM\IEXT.EXE
C:\WINDOWS\IPEO.EXE
C:\WINDOWS\SDKBT.EXE
C:\WINDOWS\SYSTEM\CRVC.EXE
C:\WINDOWS\SYSTEM\APIIF.EXE
C:\WINDOWS\SYSTEM\NTRH32.EXE
C:\WINDOWS\CRYX32.EXE
C:\WINDOWS\D3HH32.EXE
C:\WINDOWS\JAVARS32.EXE
C:\WINDOWS\SYSTEM\IEVV32.EXE
C:\WINDOWS\SYSTEM\JAVACJ.EXE
C:\WINDOWS\MSGA32.EXE
C:\WINDOWS\SYSTEM\APIQE32.EXE
C:\WINDOWS\JAVAYV.EXE
C:\WINDOWS\SYSTEM\NTOK.EXE
C:\WINDOWS\NTHF.EXE
C:\WINDOWS\SYSTEM\IPWA32.EXE
C:\WINDOWS\SYSTEM\MSHV32.EXE
C:\WINDOWS\SYSTEM\ATLGI.EXE
C:\WINDOWS\APINR32.EXE
C:\WINDOWS\MFCYL32.EXE
C:\WINDOWS\NETWF32.EXE
C:\WINDOWS\SYSHS32.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\SYSTEM\RNAAPP.EXE
C:\WINDOWS\SYSTEM\TAPISRV.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\ARCHIVOS DE PROGRAMA\IOMEGA\DRIVEICONS\IMGICON.EXE
C:\ARCHIVOS DE PROGRAMA\CREATIVE\SHAREDLL\CTNOTIFY.EXE
C:\ARCHIVOS DE PROGRAMA\CREATIVE\AUDIO\PROGRAM\CTMIX32.EXE
C:\ARCHIVOS DE PROGRAMA\PANDA SOFTWARE\PANDA ANTIVIRUS PLATINUM\APVXDWIN.EXE
C:\WINDOWS\NTMI.EXE
C:\ARCHIVOS DE PROGRAMA\CREATIVE\SHAREDLL\MEDIADET.EXE
C:\WINDOWS\SYSTEM\JAVACJ.EXE
C:\WINDOWS\SYSTEM\APIQE32.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\ARCHIVOS DE PROGRAMA\PANDA SOFTWARE\PANDA ANTIVIRUS PLATINUM\PAVPROXY.EXE
C:\WINDOWS\JAVARS32.EXE
C:\WINDOWS\NETWF32.EXE
C:\WINDOWS\SYSTEM\SDKBT32.EXE
C:\HJT\HIJACKTHIS.EXE

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\system\flfdp.dll/sp.html#37049
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\system\flfdp.dll/sp.html#37049
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = res://C:\WINDOWS\system\flfdp.dll/sp.html#37049
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\system\flfdp.dll/sp.html#37049
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\system\flfdp.dll/sp.html#37049
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\system\flfdp.dll/sp.html#37049
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\system\flfdp.dll/sp.html#37049
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Vínculos
R3 - Default URLSearchHook is missing
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\ARCHIVOS DE PROGRAMA\ADOBE\ACROBAT 5.0\READER\ACTIVEX\ACROIEHELPER.OCX
O2 - BHO: Class - {315E32CB-195A-8536-EB55-7CF4CDA121F2} - C:\WINDOWS\JAVAUR32.DLL
O2 - BHO: Class - {481C59F8-B279-805E-705B-8F9CE710C0E9} - C:\WINDOWS\SYSTEM\SDKVX32.DLL
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [Iomega Startup Options] C:\Archivos de programa\Iomega\Common\ImgStart.exe
O4 - HKLM\..\Run: [Iomega Drive Icons] C:\Archivos de programa\Iomega\DriveIcons\ImgIcon.exe
O4 - HKLM\..\Run: [NewsUpd] C:\Archivos de programa\Creative\News\NewsUpd.EXE /q
O4 - HKLM\..\Run: [Disc Detector] C:\Archivos de programa\Creative\ShareDLL\CtNotify.exe
O4 - HKLM\..\Run: [CreativeMixer] C:\Archivos de programa\Creative\Audio\PROGRAM\CTMIX32.EXE /t
O4 - HKLM\..\Run: [mdac_runonce] C:\WINDOWS\SYSTEM\runonce.exe
O4 - HKLM\..\Run: [SCANINICIO] "C:\Archivos de programa\Panda Software\Panda Antivirus Platinum\Inicio.exe"
O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\Run: [APVXDWIN] "C:\Archivos de programa\Panda Software\Panda Antivirus Platinum\Apvxdwin.exe" /s
O4 - HKLM\..\Run: [NTMI.EXE] C:\WINDOWS\NTMI.EXE
O4 - HKLM\..\RunServices: [PANDASCHEDULER] "C:\Archivos de programa\Panda Software\Panda Antivirus Platinum\Pavsched.exe"
O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe
O4 - HKLM\..\RunServices: [Machine Debug Manager] C:\WINDOWS\SYSTEM\MDM.EXE
O4 - HKLM\..\RunServices: [PAVFIRES] "C:\Archivos de programa\Panda Software\Panda Antivirus Platinum\Firewall\Pavfires.exe"
O4 - HKLM\..\RunServices: [ATLBK32.EXE] C:\WINDOWS\ATLBK32.EXE /s
O4 - HKLM\..\RunServices: [WINYP.EXE] C:\WINDOWS\SYSTEM\WINYP.EXE /s
O4 - HKLM\..\RunServices: [IEXT.EXE] C:\WINDOWS\SYSTEM\IEXT.EXE /s
O4 - HKLM\..\RunServices: [IPEO.EXE] C:\WINDOWS\IPEO.EXE /s
O4 - HKLM\..\RunServices: [SDKBT.EXE] C:\WINDOWS\SDKBT.EXE /s
O4 - HKLM\..\RunServices: [CRVC.EXE] C:\WINDOWS\SYSTEM\CRVC.EXE /s
O4 - HKLM\..\RunServices: [APIIF.EXE] C:\WINDOWS\SYSTEM\APIIF.EXE /s
O4 - HKLM\..\RunServices: [NTRH32.EXE] C:\WINDOWS\SYSTEM\NTRH32.EXE /s
O4 - HKLM\..\RunServices: [CRYX32.EXE] C:\WINDOWS\CRYX32.EXE /s
O4 - HKLM\..\RunServices: [D3HH32.EXE] C:\WINDOWS\D3HH32.EXE /s
O4 - HKLM\..\RunServices: [JAVARS32.EXE] C:\WINDOWS\JAVARS32.EXE /s
O4 - HKLM\..\RunServices: [IEVV32.EXE] C:\WINDOWS\SYSTEM\IEVV32.EXE /s
O4 - HKLM\..\RunServices: [JAVACJ.EXE] C:\WINDOWS\SYSTEM\JAVACJ.EXE /s
O4 - HKLM\..\RunServices: [MSGA32.EXE] C:\WINDOWS\MSGA32.EXE /s
O4 - HKLM\..\RunServices: [APIQE32.EXE] C:\WINDOWS\SYSTEM\APIQE32.EXE /s
O4 - HKLM\..\RunServices: [JAVAYV.EXE] C:\WINDOWS\JAVAYV.EXE /s
O4 - HKLM\..\RunServices: [NTOK.EXE] C:\WINDOWS\SYSTEM\NTOK.EXE /s
O4 - HKLM\..\RunServices: [NTHF.EXE] C:\WINDOWS\NTHF.EXE /s
O4 - HKLM\..\RunServices: [IPWA32.EXE] C:\WINDOWS\SYSTEM\IPWA32.EXE /s
O4 - HKLM\..\RunServices: [MSHV32.EXE] C:\WINDOWS\SYSTEM\MSHV32.EXE /s
O4 - HKLM\..\RunServices: [ATLGI.EXE] C:\WINDOWS\SYSTEM\ATLGI.EXE /s
O4 - HKLM\..\RunServices: [APINR32.EXE] C:\WINDOWS\APINR32.EXE /s
O4 - HKLM\..\RunServices: [MFCYL32.EXE] C:\WINDOWS\MFCYL32.EXE /s
O4 - HKLM\..\RunServices: [NETWF32.EXE] C:\WINDOWS\NETWF32.EXE /s
O4 - HKLM\..\RunServices: [SYSHS32.EXE] C:\WINDOWS\SYSHS32.EXE /s
O4 - HKLM\..\RunServices: [SDKBT32.EXE] C:\WINDOWS\SYSTEM\SDKBT32.EXE /s
O4 - Startup: Microsoft Office.lnk = C:\WINDOWS\Application Data\Microsoft\Installer\{00000C0A-78E1-11D2-B60F-006097C998E7}\misc.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O12 - Plugin for .spop: C:\ARCHIV~1\INTERN~1\Plugins\NPDocBox.dll
O12 - Plugin for .es/obraspublicasytransportes/servlet/descargacopt?up=4867: C:\ARCHIV~1\INTERN~1\PLUGINS\nppdf32.dll
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://www.pandasoftware.es/activescan/as/asinst.cab
O16 - DPF: {94118C19-B178-4E43-BBE8-0EFDBB391BDB} (SysWebTelecom Class) - http://www.sponsoradulto.com/SysWebTelecom2.cab
O16 - DPF: {80DD2229-B8E4-4C77-B72F-F22972D723EA} (AvxScanOnline Control) - http://www.bitdefender.com/scan/Msie/bitdefender.cab
O16 - DPF: {EF791A6B-FC12-4C68-99EF-FB9E207A39E6} (McFreeScan Class) - http://download.mcafee.com/molbin/iss-loc/vso/en-us/tools/mcfscan/1,5,0,4351/mcfscan.cab
O17 - HKLM\System\CCS\Services\VxD\MSTCP: NameServer = 80.58.0.33,80.58.32.97
O21 - SSODL: OLE Module - {03B1C4D9-BC71-8916-38AD-9DEA5D213614} - C:\WINDOWS\SYSTEM\brew.dll

Ya pasé TZ-Kill.inf antes.

Hola, te doy la bienvenida al Foro de InfoSpyware, seguí estos pasos.

Paso 1- Inicia en modo normal.

Paso 2- Con todos los programas cerrados ejecuta el HijackThis y dale a estas entradas:

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\system\flfdp.dll/sp.html#37049
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\system\flfdp.dll/sp.html#37049
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = res://C:\WINDOWS\system\flfdp.dll/sp.html#37049
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\system\flfdp.dll/sp.html#37049
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\system\flfdp.dll/sp.html#37049
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\system\flfdp.dll/sp.html#37049
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\system\flfdp.dll/sp.html#37049

O2 - BHO: Class - {315E32CB-195A-8536-EB55-7CF4CDA121F2} - C:\WINDOWS\JAVAUR32.DLL
O2 - BHO: Class - {481C59F8-B279-805E-705B-8F9CE710C0E9} - C:\WINDOWS\SYSTEM\SDKVX32.DLL

O4 - HKLM\..\Run: [NTMI.EXE] C:\WINDOWS\NTMI.EXE

O4 - HKLM\..\RunServices: [ATLBK32.EXE] C:\WINDOWS\ATLBK32.EXE /s
O4 - HKLM\..\RunServices: [WINYP.EXE] C:\WINDOWS\SYSTEM\WINYP.EXE /s
O4 - HKLM\..\RunServices: [IEXT.EXE] C:\WINDOWS\SYSTEM\IEXT.EXE /s
O4 - HKLM\..\RunServices: [IPEO.EXE] C:\WINDOWS\IPEO.EXE /s
O4 - HKLM\..\RunServices: [SDKBT.EXE] C:\WINDOWS\SDKBT.EXE /s
O4 - HKLM\..\RunServices: [CRVC.EXE] C:\WINDOWS\SYSTEM\CRVC.EXE /s
O4 - HKLM\..\RunServices: [APIIF.EXE] C:\WINDOWS\SYSTEM\APIIF.EXE /s
O4 - HKLM\..\RunServices: [NTRH32.EXE] C:\WINDOWS\SYSTEM\NTRH32.EXE /s
O4 - HKLM\..\RunServices: [CRYX32.EXE] C:\WINDOWS\CRYX32.EXE /s
O4 - HKLM\..\RunServices: [D3HH32.EXE] C:\WINDOWS\D3HH32.EXE /s
O4 - HKLM\..\RunServices: [JAVARS32.EXE] C:\WINDOWS\JAVARS32.EXE /s
O4 - HKLM\..\RunServices: [IEVV32.EXE] C:\WINDOWS\SYSTEM\IEVV32.EXE /s
O4 - HKLM\..\RunServices: [JAVACJ.EXE] C:\WINDOWS\SYSTEM\JAVACJ.EXE /s
O4 - HKLM\..\RunServices: [MSGA32.EXE] C:\WINDOWS\MSGA32.EXE /s
O4 - HKLM\..\RunServices: [APIQE32.EXE] C:\WINDOWS\SYSTEM\APIQE32.EXE /s
O4 - HKLM\..\RunServices: [JAVAYV.EXE] C:\WINDOWS\JAVAYV.EXE /s
O4 - HKLM\..\RunServices: [NTOK.EXE] C:\WINDOWS\SYSTEM\NTOK.EXE /s
O4 - HKLM\..\RunServices: [NTHF.EXE] C:\WINDOWS\NTHF.EXE /s
O4 - HKLM\..\RunServices: [IPWA32.EXE] C:\WINDOWS\SYSTEM\IPWA32.EXE /s
O4 - HKLM\..\RunServices: [MSHV32.EXE] C:\WINDOWS\SYSTEM\MSHV32.EXE /s
O4 - HKLM\..\RunServices: [ATLGI.EXE] C:\WINDOWS\SYSTEM\ATLGI.EXE /s
O4 - HKLM\..\RunServices: [APINR32.EXE] C:\WINDOWS\APINR32.EXE /s
O4 - HKLM\..\RunServices: [MFCYL32.EXE] C:\WINDOWS\MFCYL32.EXE /s
O4 - HKLM\..\RunServices: [NETWF32.EXE] C:\WINDOWS\NETWF32.EXE /s
O4 - HKLM\..\RunServices: [SYSHS32.EXE] C:\WINDOWS\SYSHS32.EXE /s
O4 - HKLM\..\RunServices: [SDKBT32.EXE] C:\WINDOWS\SYSTEM\SDKBT32.EXE /s

O16 - DPF: {94118C19-B178-4E43-BBE8-0EFDBB391BDB} (SysWebTelecom Class) - http://www.sponsoradulto.com/SysWebTelecom2.cab

O21 - SSODL: OLE Module - {03B1C4D9-BC71-8916-38AD-9DEA5D213614} - C:\WINDOWS\SYSTEM\brew.dll

Paso 3- Sin reiniciar, descarga el programa "KillBox" y siguiendo las indicaciones del mensajes, copia y pega estos archivos de a uno para que los elimine al reiniciar.

C:\WINDOWS\ATLBK32.EXE /s
C:\WINDOWS\SYSTEM\WINYP.EXE
C:\WINDOWS\SYSTEM\IEXT.EXE
C:\WINDOWS\IPEO.EXE
C:\WINDOWS\SDKBT.EXE
C:\WINDOWS\SYSTEM\CRVC.EXE
C:\WINDOWS\SYSTEM\APIIF.EXE
C:\WINDOWS\SYSTEM\NTRH32.EXE
C:\WINDOWS\CRYX32.EXE
C:\WINDOWS\D3HH32.EXE
C:\WINDOWS\JAVARS32.EXE
C:\WINDOWS\SYSTEM\IEVV32.EXE
C:\WINDOWS\SYSTEM\JAVACJ.EXE
C:\WINDOWS\MSGA32.EXE
C:\WINDOWS\SYSTEM\APIQE32.EXE
C:\WINDOWS\JAVAYV.EXE
C:\WINDOWS\SYSTEM\NTOK.EXE
C:\WINDOWS\NTHF.EXE
C:\WINDOWS\SYSTEM\IPWA32.EXE
C:\WINDOWS\SYSTEM\MSHV32.EXE
C:\WINDOWS\SYSTEM\ATLGI.EXE
C:\WINDOWS\APINR32.EXE
C:\WINDOWS\MFCYL32.EXE
C:\WINDOWS\NETWF32.EXE
C:\WINDOWS\SYSHS32.EXE
C:\WINDOWS\SYSTEM\SDKBT32.EXE

Paso 4- Usa el Disk Cleaner para limpiar cookies y temporales

Paso 5- Pásale Ad-Aware SE actualizado eh instala SpywareBlaster

Paso 6- Reinicia y nos contas los resultados.

Salu2