Hola amigos...tengo este problema tambien...por favor me podrian ayudar...
Traté de resolverlo solo pero no pude...

esto es lo mio....si me pueden ayudar muchas gracias!!!


Logfile of HijackThis v1.99.1
Scan saved at 14:47:43, on 25-07-2005
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\spoolsv.exe
C:\WINNT\system32\netdde.exe
C:\Program Files\Common Files\ArchestrA\aaLogger.exe
C:\WINNT\SYSTEM32\DWRCS.EXE
C:\WINNT\System32\svchost.exe
C:\Program Files\Common Files\ArchestrA\NTServApp.exe
C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlservr.exe
C:\WINNT\system32\regsvc.exe
C:\WINNT\system32\MSTask.exe
C:\WINNT\System32\tcpsvcs.exe
C:\Program Files\Common Files\ArchestrA\slssvc.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\system32\svchost.exe
C:\Program Files\Common Files\ArchestrA\wwlogsvc.exe
C:\Program Files\Common Files\ArchestrA\wwnetdde.exe
C:\WINNT\Explorer.EXE
C:\Program Files\FactorySuite\IOServer\MBENET\MBENET.EXE
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Wonderware\InTouch\histdata.exe
C:\Program Files\Wonderware\InTouch\hdacc.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Documents and Settings\Administrator\My Documents\Programas\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.forospyware.com/
R3 - Default URLSearchHook is missing
O2 - BHO: (no name) - SOFTWARE - (no file)
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\system32\msdxm.ocx
O4 - HKLM\..\Run: [WinVNC] "C:\Program Files\TightVNC\WinVNC.exe" -servicehelper
O4 - HKLM\..\Run: [CloneCDElbyCDFL] "C:\Program Files\Elaborate Bytes\CloneCD\ElbyCheck.exe" /L ElbyCDFL
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\RunOnce: [SpybotSnD] "C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe" /autocheck
O4 - Startup: HistData.lnk = C:\Program Files\Wonderware\InTouch\histdata.exe
O8 - Extra context menu item: &Search - http://bar.mywebsearch.com/menusearc...p=ZNxdm119YYCL
O16 - DPF: {044123B5-35DF-4C4E-BAED-26B8ED964342} - http://fx.hauri.net/CLIENT/LiveSuite...veRobotWeb.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{E8ADD512-163B-422C-9997-2000EA470375}: NameServer = 20.20.20.1
O23 - Service: ArchestrA Logger (aaLogger) - Invensys Systems, Inc. - C:\Program Files\Common Files\ArchestrA\aaLogger.exe
O23 - Service: Logical Disk Manager Administrative Service (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe
O23 - Service: DameWare Mini Remote Control (DWMRCS) - DameWare Development LLC - C:\WINNT\SYSTEM32\DWRCS.EXE
O23 - Service: FS Service Control - Wonderware Corporation - C:\Program Files\Common Files\ArchestrA\NTServApp.exe
O23 - Service: MBENET_IOServer - Wonderware Corporation - C:\Program Files\FactorySuite\IOServer\MBENET\MBENET.EXE
O23 - Service: Wonderware SuiteLink (slssvc) - Invensys Systems, Inc. - C:\Program Files\Common Files\ArchestrA\slssvc.exe
O23 - Service: VNC Server (winvnc) - Unknown owner - C:\Program Files\TightVNC\WinVNC.exe" -service (file missing)
O23 - Service: Wonderware Logger (WWLOGSVC) - Wonderware Corporation - C:\Program Files\Common Files\ArchestrA\wwlogsvc.exe
O23 - Service: Wonderware NetDDE Helper (WWNetDDE) - Invensys Systems, Inc. - C:\Program Files\Common Files\ArchestrA\wwnetdde.exe
O23 - Service: WwRpcSvr - Wonderware Corporation - C:\WINNT\system32\wwinstsvc.exe

Hola, te doy la bienvenida al Foro de InfoSpyware, seguí estos pasos.

1- Descarga y actualiza el programa EWIDO pero no lo ejecutes aun.

2- Ejecuta el HijackThis y dale FIX a estas entradas:

O2 - BHO: (no name) - SOFTWARE - (no file)

O8 - Extra context menu item: &Search - http://bar.mywebsearch.com/menusear...?p=ZNxdm119YYCL


3- Ejecuta EWIDO.

4- Reinicia el sistema, descarga y ejecuta la nueva version de SmitfraudFIX.bat

Reinicia y nos contas los resultados.

Salu2