He seguido los pasos indicados en los tutoriales, incluso en temas que plantean problemas similares, pero el no puedo eliminar de mi sistema el StarPage 19.AO de porquería. El antivirus (AVG actualizado) solamente lo detecta cuando se activa y le ordeno que elimine el archivo que me indica (siempre un .dll de nombre diferente).
He aquí los pasos y logs que he seguido:
Ejecuto el SpSeHjfix112.exe y obtengo este log:


(7/28/05 07:31:31 p.m.) SPSeHjFix started v1.1.2
(7/28/05 07:31:31 p.m.) OS: WinXP Service Pack 2 (5.1.2600)
(7/28/05 07:31:31 p.m.) Language: español
(7/28/05 07:31:31 p.m.) Win-Path: C:\WINDOWS
(7/28/05 07:31:31 p.m.) System-Path: C:\WINDOWS\system32
(7/28/05 07:31:31 p.m.) Temp-Path: C:\DOCUME~1\Raul\CONFIG~1\Temp\
(7/28/05 07:31:32 p.m.) Disinfection started
(7/28/05 07:31:32 p.m.) Bad-Dll(IEP): c:\windows\system32\bdkzi.dll
(7/28/05 07:31:32 p.m.) UBF: 4 - UBB: 0 - UBR: 59
(7/28/05 07:31:32 p.m.) UBF: 4 - UBB: 0 - UBR: 59
(7/28/05 07:31:32 p.m.) Bad IE-pages:
deleted: HKCU\Software\Microsoft\Internet Explorer\Main, Search Bar: res://c:\windows\system32\bdkzi.dll/sp.html#37049
deleted: HKCU\Software\Microsoft\Internet Explorer\Main, Search Page: res://c:\windows\system32\bdkzi.dll/sp.html#37049
deleted: HKCU\Software\Microsoft\Internet Explorer\Main, Start Page: about:blank
deleted: HKLM\Software\Microsoft\Internet Explorer\Main, Search Bar: res://c:\windows\system32\bdkzi.dll/sp.html#37049
deleted: HKLM\Software\Microsoft\Internet Explorer\Main, Search Page: res://c:\windows\system32\bdkzi.dll/sp.html#37049
deleted: HKLM\Software\Microsoft\Internet Explorer\Main, Start Page: about:blank
deleted: HKLM\Software\Microsoft\Internet Explorer\Main, Default_Page_URL: about:blank
deleted: HKLM\Software\Microsoft\Internet Explorer\Main, Default_Search_URL: res://c:\windows\system32\bdkzi.dll/sp.html#37049
(7/28/05 07:31:32 p.m.) Stealth-String not found
(7/28/05 07:31:32 p.m.) No locked Files to delete. End without Reboot


(7/28/05 07:54:38 p.m.) SPSeHjFix started v1.1.2
(7/28/05 07:54:38 p.m.) OS: WinXP Service Pack 2 (5.1.2600)
(7/28/05 07:54:38 p.m.) Language: español
(7/28/05 07:54:38 p.m.) Win-Path: C:\WINDOWS
(7/28/05 07:54:38 p.m.) System-Path: C:\WINDOWS\system32
(7/28/05 07:54:38 p.m.) Temp-Path: C:\DOCUME~1\Raul\CONFIG~1\Temp\
(7/28/05 07:54:40 p.m.) Disinfection started
(7/28/05 07:54:40 p.m.) Bad-Dll(IEP): c:\windows\system32\efafq.dll
(7/28/05 07:54:40 p.m.) UBF: 4 - UBB: 0 - UBR: 58
(7/28/05 07:54:40 p.m.) UBF: 4 - UBB: 0 - UBR: 58
(7/28/05 07:54:40 p.m.) Bad IE-pages:
deleted: HKCU\Software\Microsoft\Internet Explorer\Main, Search Bar: res://c:\windows\system32\efafq.dll/sp.html#37049
deleted: HKCU\Software\Microsoft\Internet Explorer\Main, Search Page: res://c:\windows\system32\efafq.dll/sp.html#37049
deleted: HKCU\Software\Microsoft\Internet Explorer\Main, Start Page: about:blank
deleted: HKLM\Software\Microsoft\Internet Explorer\Main, Search Bar: res://c:\windows\system32\efafq.dll/sp.html#37049
deleted: HKLM\Software\Microsoft\Internet Explorer\Main, Search Page: res://c:\windows\system32\efafq.dll/sp.html#37049
deleted: HKLM\Software\Microsoft\Internet Explorer\Main, Start Page: about:blank
deleted: HKLM\Software\Microsoft\Internet Explorer\Main, Default_Page_URL: about:blank
deleted: HKLM\Software\Microsoft\Internet Explorer\Main, Default_Search_URL: res://c:\windows\system32\efafq.dll/sp.html#37049
(7/28/05 07:54:40 p.m.) Stealth-String not found
(7/28/05 07:54:40 p.m.) No locked Files to delete. End without Reboot


(7/28/05 08:11:28 p.m.) SPSeHjFix started v1.1.2
(7/28/05 08:11:28 p.m.) OS: WinXP Service Pack 2 (5.1.2600)
(7/28/05 08:11:28 p.m.) Language: español
(7/28/05 08:11:28 p.m.) Win-Path: C:\WINDOWS
(7/28/05 08:11:28 p.m.) System-Path: C:\WINDOWS\system32
(7/28/05 08:11:28 p.m.) Temp-Path: C:\DOCUME~1\Raul\CONFIG~1\Temp\
(7/28/05 08:11:31 p.m.) Disinfection started
(7/28/05 08:11:31 p.m.) Bad-Dll(IEP): c:\windows\system32\zqnih.dll
(7/28/05 08:11:31 p.m.) UBF: 4 - UBB: 0 - UBR: 53
(7/28/05 08:11:31 p.m.) UBF: 4 - UBB: 0 - UBR: 53
(7/28/05 08:11:31 p.m.) Bad IE-pages:
deleted: HKCU\Software\Microsoft\Internet Explorer\Main, Search Bar: res://c:\windows\system32\zqnih.dll/sp.html#55135
deleted: HKCU\Software\Microsoft\Internet Explorer\Main, Search Page: res://c:\windows\system32\zqnih.dll/sp.html#55135
deleted: HKCU\Software\Microsoft\Internet Explorer\Main, Start Page: about:blank
deleted: HKLM\Software\Microsoft\Internet Explorer\Main, Search Bar: res://c:\windows\system32\zqnih.dll/sp.html#55135
deleted: HKLM\Software\Microsoft\Internet Explorer\Main, Search Page: res://c:\windows\system32\zqnih.dll/sp.html#55135
deleted: HKLM\Software\Microsoft\Internet Explorer\Main, Start Page: about:blank
deleted: HKLM\Software\Microsoft\Internet Explorer\Main, Default_Page_URL: about:blank
deleted: HKLM\Software\Microsoft\Internet Explorer\Main, Default_Search_URL: res://c:\windows\system32\zqnih.dll/sp.html#55135
(7/28/05 08:11:31 p.m.) Stealth-String not found
(7/28/05 08:11:31 p.m.) No locked Files to delete. End without Reboot


(7/28/05 08:13:40 p.m.) SPSeHjFix started v1.1.2
(7/28/05 08:13:40 p.m.) OS: WinXP Service Pack 2 (5.1.2600)
(7/28/05 08:13:40 p.m.) Language: español
(7/28/05 08:13:40 p.m.) Win-Path: C:\WINDOWS
(7/28/05 08:13:40 p.m.) System-Path: C:\WINDOWS\system32
(7/28/05 08:13:40 p.m.) Temp-Path: C:\DOCUME~1\Raul\CONFIG~1\Temp\
(7/28/05 08:13:42 p.m.) Disinfection started
(7/28/05 08:13:42 p.m.) Bad-Dll(IEP): (not found)
(7/28/05 08:13:42 p.m.) Bad-Dll(IEP) in BHO: (not found)
(7/28/05 08:13:42 p.m.) UBF: 4 - UBB: 8 - UBR: 53
(7/28/05 08:13:42 p.m.) UBF: 4 - UBB: 8 - UBR: 53
(7/28/05 08:13:42 p.m.) Bad IE-pages: (none)
(7/28/05 08:13:42 p.m.) Stealth-String not found
(7/28/05 08:13:42 p.m.) Not infected->END


(7/28/05 08:32:46 p.m.) SPSeHjFix started v1.1.2
(7/28/05 08:32:46 p.m.) OS: WinXP Service Pack 2 (5.1.2600)
(7/28/05 08:32:46 p.m.) Language: español
(7/28/05 08:32:46 p.m.) Win-Path: C:\WINDOWS
(7/28/05 08:32:46 p.m.) System-Path: C:\WINDOWS\system32
(7/28/05 08:32:46 p.m.) Temp-Path: C:\DOCUME~1\Raul\CONFIG~1\Temp\
(7/28/05 08:32:48 p.m.) Disinfection started
(7/28/05 08:32:48 p.m.) Bad-Dll(IEP): c:\windows\system32\tvfnb.dll
(7/28/05 08:32:48 p.m.) UBF: 4 - UBB: 0 - UBR: 53
(7/28/05 08:32:48 p.m.) UBF: 4 - UBB: 0 - UBR: 53
(7/28/05 08:32:48 p.m.) Bad IE-pages:
deleted: HKCU\Software\Microsoft\Internet Explorer\Main, Search Bar: res://c:\windows\system32\tvfnb.dll/sp.html#55135
deleted: HKCU\Software\Microsoft\Internet Explorer\Main, Search Page: res://c:\windows\system32\tvfnb.dll/sp.html#55135
deleted: HKCU\Software\Microsoft\Internet Explorer\Main, Start Page: about:blank
deleted: HKLM\Software\Microsoft\Internet Explorer\Main, Search Bar: res://c:\windows\system32\tvfnb.dll/sp.html#55135
deleted: HKLM\Software\Microsoft\Internet Explorer\Main, Search Page: res://c:\windows\system32\tvfnb.dll/sp.html#55135
deleted: HKLM\Software\Microsoft\Internet Explorer\Main, Start Page: about:blank
deleted: HKLM\Software\Microsoft\Internet Explorer\Main, Default_Page_URL: about:blank
deleted: HKLM\Software\Microsoft\Internet Explorer\Main, Default_Search_URL: res://c:\windows\system32\tvfnb.dll/sp.html#55135
(7/28/05 08:32:48 p.m.) Stealth-String not found
(7/28/05 08:32:48 p.m.) No locked Files to delete. End without Reboot
(7/28/05 08:32:50 p.m.) Disinfection started
(7/28/05 08:32:50 p.m.) Bad-Dll(IEP): c:\windows\system32\tvfnb.dll
(7/28/05 08:32:50 p.m.) UBF: 4 - UBB: 0 - UBR: 53
(7/28/05 08:32:50 p.m.) UBF: 4 - UBB: 0 - UBR: 53
(7/28/05 08:32:50 p.m.) Bad IE-pages: (none)
(7/28/05 08:32:50 p.m.) Stealth-String not found
(7/28/05 08:32:50 p.m.) No locked Files to delete. End without Reboot


(7/29/05 07:15:41 p.m.) SPSeHjFix started v1.1.2
(7/29/05 07:15:41 p.m.) OS: WinXP Service Pack 2 (5.1.2600)
(7/29/05 07:15:41 p.m.) Language: español
(7/29/05 07:15:41 p.m.) Win-Path: C:\WINDOWS
(7/29/05 07:15:41 p.m.) System-Path: C:\WINDOWS\system32
(7/29/05 07:15:41 p.m.) Temp-Path: C:\DOCUME~1\Raul\CONFIG~1\Temp\
(7/29/05 07:15:50 p.m.) Disinfection started
(7/29/05 07:15:50 p.m.) Bad-Dll(IEP): c:\windows\system32\lrmxq.dll
(7/29/05 07:15:50 p.m.) UBF: 4 - UBB: 1 - UBR: 66
(7/29/05 07:15:50 p.m.) UBF: 4 - UBB: 1 - UBR: 66
(7/29/05 07:15:50 p.m.) Bad IE-pages:
deleted: HKCU\Software\Microsoft\Internet Explorer\Main, Search Bar: res://c:\windows\system32\lrmxq.dll/sp.html#37049
deleted: HKCU\Software\Microsoft\Internet Explorer\Main, Search Page: res://c:\windows\system32\lrmxq.dll/sp.html#37049
deleted: HKCU\Software\Microsoft\Internet Explorer\Main, Start Page: about:blank
deleted: HKLM\Software\Microsoft\Internet Explorer\Main, Search Bar: res://c:\windows\system32\lrmxq.dll/sp.html#37049
deleted: HKLM\Software\Microsoft\Internet Explorer\Main, Search Page: res://c:\windows\system32\lrmxq.dll/sp.html#37049
deleted: HKLM\Software\Microsoft\Internet Explorer\Main, Start Page: about:blank
deleted: HKLM\Software\Microsoft\Internet Explorer\Main, Default_Page_URL: about:blank
deleted: HKLM\Software\Microsoft\Internet Explorer\Main, Default_Search_URL: res://c:\windows\system32\lrmxq.dll/sp.html#37049
(7/29/05 07:15:50 p.m.) Stealth-String not found
(7/29/05 07:15:50 p.m.) No locked Files to delete. End without Reboot


(7/29/05 07:18:56 p.m.) SPSeHjFix started v1.1.2
(7/29/05 07:18:56 p.m.) OS: WinXP Service Pack 2 (5.1.2600)
(7/29/05 07:18:56 p.m.) Language: español
(7/29/05 07:18:56 p.m.) Win-Path: C:\WINDOWS
(7/29/05 07:18:56 p.m.) System-Path: C:\WINDOWS\system32
(7/29/05 07:18:56 p.m.) Temp-Path: C:\DOCUME~1\Raul\CONFIG~1\Temp\
(7/29/05 07:18:57 p.m.) Disinfection started
(7/29/05 07:18:57 p.m.) Bad-Dll(IEP): (not found)
(7/29/05 07:18:57 p.m.) Bad-Dll(IEP) in BHO: (not found)
(7/29/05 07:18:57 p.m.) UBF: 4 - UBB: 12 - UBR: 59
(7/29/05 07:18:57 p.m.) UBF: 4 - UBB: 12 - UBR: 59
(7/29/05 07:18:57 p.m.) Bad IE-pages: (none)
(7/29/05 07:18:57 p.m.) Stealth-String not found
(7/29/05 07:18:57 p.m.) Not infected->END

Después ejecuto el HijackThis.exe, con el siguiente log:
Logfile of HijackThis v1.99.1
Scan saved at 07:19:48 p.m., on 29/07/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\ARCHIV~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\ARCHIV~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\Archivos de programa\Archivos comunes\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\sysvq32.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Archivos de programa\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe
C:\Archivos de programa\CyberLink\PowerDVD\PDVDServ.exe
C:\ARCHIV~1\Grisoft\AVGFRE~1\avgcc.exe
C:\ARCHIV~1\Grisoft\AVGFRE~1\avgemc.exe
C:\ARCHIV~1\PESTPA~1\PPControl.exe
C:\ARCHIV~1\PESTPA~1\PPMemCheck.exe
C:\ARCHIV~1\PESTPA~1\CookiePatrol.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Archivos de programa\WinZip\WZQKPICK.EXE
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\hjk\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R3 - Default URLSearchHook is missing
O2 - BHO: Class - {344A6FA4-D907-A113-AE32-AD1D33AAF46D} - C:\WINDOWS\sdkya.dll
O2 - BHO: Class - {63EC0566-AADA-7B19-96E8-E6A70595EAC3} - C:\WINDOWS\ietg32.dll
O2 - BHO: Class - {6EB9121A-3517-F0F4-C72C-70B7B624BBD3} - C:\WINDOWS\javact32.dll
O2 - BHO: Class - {927E57D6-F30D-0656-3454-9DCE557E5E8E} - C:\WINDOWS\system32\sysxr32.dll
O2 - BHO: Class - {93BFB8F2-03A3-99FE-9334-80CF27AC5B53} - C:\WINDOWS\addtp32.dll
O2 - BHO: Class - {9B8792A5-DF6B-F04D-6FA8-5369E8EDCD35} - C:\WINDOWS\mfced.dll
O2 - BHO: Class - {AC5DA795-EB4D-33C1-2B1B-233A235E8A80} - C:\WINDOWS\ntup.dll
O2 - BHO: Class - {B74D7ADF-0D9A-236B-88D0-5341D065D6CE} - C:\WINDOWS\system32\iejx32.dll
O2 - BHO: Class - {CF536988-EE50-E2B0-2D9E-8E95C2CE963D} - C:\WINDOWS\mfcqo.dll
O2 - BHO: Class - {D2F5D9A4-C618-A8DE-BD9E-602C1BFB1EA1} - C:\WINDOWS\addas32.dll
O2 - BHO: Class - {E7F1CA25-18BA-5AA2-86D0-F9E3A0C2CA0D} - C:\WINDOWS\sysvq32.dll
O2 - BHO: Class - {F3F316D9-A203-593F-7A70-A6A52D8F46FA} - C:\WINDOWS\system32\mfcge.dll
O2 - BHO: Class - {FEE368F6-CDED-E405-5743-6CA2066D78A7} - C:\WINDOWS\system32\sdkak.dll
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [MMTray] C:\Archivos de programa\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [RemoteControl] "C:\Archivos de programa\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [AVG7_CC] C:\ARCHIV~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [AVG7_EMC] C:\ARCHIV~1\Grisoft\AVGFRE~1\avgemc.exe
O4 - HKLM\..\Run: [netkr.exe] C:\WINDOWS\netkr.exe
O4 - HKLM\..\Run: [mfcir32.exe] C:\WINDOWS\system32\mfcir32.exe
O4 - HKLM\..\Run: [sdkhx32.exe] C:\WINDOWS\system32\sdkhx32.exe
O4 - HKLM\..\Run: [netwt32.exe] C:\WINDOWS\netwt32.exe
O4 - HKLM\..\Run: [addvd.exe] C:\WINDOWS\addvd.exe
O4 - HKLM\..\Run: [mfcpi32.exe] C:\WINDOWS\mfcpi32.exe
O4 - HKLM\..\Run: [nethx.exe] C:\WINDOWS\nethx.exe
O4 - HKLM\..\Run: [mscq32.exe] C:\WINDOWS\system32\mscq32.exe
O4 - HKLM\..\Run: [syspm.exe] C:\WINDOWS\syspm.exe
O4 - HKLM\..\Run: [sdkif32.exe] C:\WINDOWS\system32\sdkif32.exe
O4 - HKLM\..\Run: [winae.exe] C:\WINDOWS\winae.exe
O4 - HKLM\..\Run: [mfcbi32.exe] C:\WINDOWS\system32\mfcbi32.exe
O4 - HKLM\..\Run: [atlvv.exe] C:\WINDOWS\system32\atlvv.exe
O4 - HKLM\..\Run: [netxf.exe] C:\WINDOWS\netxf.exe
O4 - HKLM\..\Run: [ipep.exe] C:\WINDOWS\ipep.exe
O4 - HKLM\..\Run: [PestPatrol Control Center] C:\ARCHIV~1\PESTPA~1\PPControl.exe
O4 - HKLM\..\Run: [PPMemCheck] C:\ARCHIV~1\PESTPA~1\PPMemCheck.exe
O4 - HKLM\..\Run: [CookiePatrol] C:\ARCHIV~1\PESTPA~1\CookiePatrol.exe
O4 - HKLM\..\Run: [msvp32.exe] C:\WINDOWS\msvp32.exe
O4 - HKLM\..\Run: [winfz32.exe] C:\WINDOWS\winfz32.exe
O4 - HKLM\..\Run: [winrj32.exe] C:\WINDOWS\winrj32.exe
O4 - HKLM\..\Run: [atlxk.exe] C:\WINDOWS\system32\atlxk.exe
O4 - HKLM\..\Run: [javawg32.exe] C:\WINDOWS\system32\javawg32.exe
O4 - HKLM\..\Run: [javazi32.exe] C:\WINDOWS\system32\javazi32.exe
O4 - HKLM\..\Run: [sdkub.exe] C:\WINDOWS\system32\sdkub.exe
O4 - HKLM\..\Run: [netse.exe] C:\WINDOWS\system32\netse.exe
O4 - HKLM\..\Run: [iexr32.exe] C:\WINDOWS\iexr32.exe
O4 - HKLM\..\Run: [d3gw32.exe] C:\WINDOWS\d3gw32.exe
O4 - HKLM\..\Run: [ntpd.exe] C:\WINDOWS\system32\ntpd.exe
O4 - HKLM\..\Run: [winmg.exe] C:\WINDOWS\system32\winmg.exe
O4 - HKLM\..\Run: [msvi.exe] C:\WINDOWS\system32\msvi.exe
O4 - HKLM\..\Run: [sysor32.exe] C:\WINDOWS\sysor32.exe
O4 - HKLM\..\Run: [sysvq32.exe] C:\WINDOWS\sysvq32.exe
O4 - HKLM\..\RunOnce: [javacs32.exe] C:\WINDOWS\javacs32.exe
O4 - HKLM\..\RunOnce: [netih.exe] C:\WINDOWS\system32\netih.exe
O4 - HKLM\..\RunOnce: [addhf32.exe] C:\WINDOWS\system32\addhf32.exe
O4 - HKLM\..\RunOnce: [ieif32.exe] C:\WINDOWS\system32\ieif32.exe
O4 - HKLM\..\RunOnce: [iehe32.exe] C:\WINDOWS\system32\iehe32.exe
O4 - HKLM\..\RunOnce: [addsm.exe] C:\WINDOWS\addsm.exe
O4 - HKLM\..\RunOnce: [netfn32.exe] C:\WINDOWS\system32\netfn32.exe
O4 - HKLM\..\RunOnce: [apird32.exe] C:\WINDOWS\system32\apird32.exe
O4 - HKLM\..\RunOnce: [d3lt32.exe] C:\WINDOWS\d3lt32.exe
O4 - HKLM\..\RunOnce: [apprg32.exe] C:\WINDOWS\system32\apprg32.exe
O4 - HKLM\..\RunOnce: [ipus.exe] C:\WINDOWS\system32\ipus.exe
O4 - HKLM\..\RunOnce: [addas32.exe] C:\WINDOWS\addas32.exe
O4 - HKLM\..\RunOnce: [appgr32.exe] C:\WINDOWS\appgr32.exe
O4 - HKLM\..\RunOnce: [addbn.exe] C:\WINDOWS\addbn.exe
O4 - HKLM\..\RunOnce: [appzz.exe] C:\WINDOWS\appzz.exe
O4 - HKLM\..\RunOnce: [ntau.exe] C:\WINDOWS\ntau.exe
O4 - HKLM\..\RunOnce: [crzj.exe] C:\WINDOWS\system32\crzj.exe
O4 - HKLM\..\RunOnce: [ipwt32.exe] C:\WINDOWS\system32\ipwt32.exe
O4 - HKLM\..\RunOnce: [atlvg32.exe] C:\WINDOWS\atlvg32.exe
O4 - HKLM\..\RunOnce: [mfcpi32.exe] C:\WINDOWS\mfcpi32.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Archivos de programa\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Archivos de programa\Archivos comunes\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Archivos de programa\WinZip\WZQKPICK.EXE
O8 - Extra context menu item: E&xportar a Microsoft Excel - res://C:\ARCHIV~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Archivos de programa\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Archivos de programa\Messenger\msmsgs.exe
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://www.pandasoftware.com/activescan/as5/asinst.cab
O23 - Service: Network Security Service ( 11Fßä#·ºÄÖ`I) - Unknown owner - C:\WINDOWS\javacs32.exe" /s (file missing)
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\ARCHIV~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\ARCHIV~1\Grisoft\AVGFRE~1\avgupsvc.exe

Aquí marco todas las entradas R0,
la O23 - Service: Network Security Service ( 11Fßä#·ºÄÖ`I) - Unknown owner - C:\WINDOWS\javacs32.exe" /s (file missing),
Le doy a fix checked, reinicio en Modo Seguro, elimino todos los temporales, coockies, temporales de internet, etc
Ejecuto Ad-Aware SE Personal que en algunos casos elimina algunos procesos dañinos.
Reinicio
Abro el IE y...
¡SURPRISE!
El AVG me avisa que un .DLL tiene el ya parte de mi familia StarPage 19.AO.
Al volver a abrir el IE la página de inicio es about blank.

please help me!

Desde ya gracias.

Hola, te doy la bienvenida al Foro de InfoSpyware, seguí estos pasos.

Paso 1- Descarga y actualiza el programa Anti-Spyware EWIDO pero no lo ejecutes aun.

Paso 2- Con todos los programas cerrados ejecuta el HijackThis y dale a estas entradas:

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =

O2 - BHO: Class - {344A6FA4-D907-A113-AE32-AD1D33AAF46D} - C:\WINDOWS\sdkya.dll
O2 - BHO: Class - {63EC0566-AADA-7B19-96E8-E6A70595EAC3} - C:\WINDOWS\ietg32.dll
O2 - BHO: Class - {6EB9121A-3517-F0F4-C72C-70B7B624BBD3} - C:\WINDOWS\javact32.dll
O2 - BHO: Class - {927E57D6-F30D-0656-3454-9DCE557E5E8E} - C:\WINDOWS\system32\sysxr32.dll
O2 - BHO: Class - {93BFB8F2-03A3-99FE-9334-80CF27AC5B53} - C:\WINDOWS\addtp32.dll
O2 - BHO: Class - {9B8792A5-DF6B-F04D-6FA8-5369E8EDCD35} - C:\WINDOWS\mfced.dll
O2 - BHO: Class - {AC5DA795-EB4D-33C1-2B1B-233A235E8A80} - C:\WINDOWS\ntup.dll
O2 - BHO: Class - {B74D7ADF-0D9A-236B-88D0-5341D065D6CE} - C:\WINDOWS\system32\iejx32.dll
O2 - BHO: Class - {CF536988-EE50-E2B0-2D9E-8E95C2CE963D} - C:\WINDOWS\mfcqo.dll
O2 - BHO: Class - {D2F5D9A4-C618-A8DE-BD9E-602C1BFB1EA1} - C:\WINDOWS\addas32.dll
O2 - BHO: Class - {E7F1CA25-18BA-5AA2-86D0-F9E3A0C2CA0D} - C:\WINDOWS\sysvq32.dll
O2 - BHO: Class - {F3F316D9-A203-593F-7A70-A6A52D8F46FA} - C:\WINDOWS\system32\mfcge.dll
O2 - BHO: Class - {FEE368F6-CDED-E405-5743-6CA2066D78A7} - C:\WINDOWS\system32\sdkak.dll

O4 - HKLM\..\Run: [netkr.exe] C:\WINDOWS\netkr.exe
O4 - HKLM\..\Run: [mfcir32.exe] C:\WINDOWS\system32\mfcir32.exe
O4 - HKLM\..\Run: [sdkhx32.exe] C:\WINDOWS\system32\sdkhx32.exe
O4 - HKLM\..\Run: [netwt32.exe] C:\WINDOWS\netwt32.exe
O4 - HKLM\..\Run: [addvd.exe] C:\WINDOWS\addvd.exe
O4 - HKLM\..\Run: [mfcpi32.exe] C:\WINDOWS\mfcpi32.exe
O4 - HKLM\..\Run: [nethx.exe] C:\WINDOWS\nethx.exe
O4 - HKLM\..\Run: [mscq32.exe] C:\WINDOWS\system32\mscq32.exe
O4 - HKLM\..\Run: [syspm.exe] C:\WINDOWS\syspm.exe
O4 - HKLM\..\Run: [sdkif32.exe] C:\WINDOWS\system32\sdkif32.exe
O4 - HKLM\..\Run: [winae.exe] C:\WINDOWS\winae.exe
O4 - HKLM\..\Run: [mfcbi32.exe] C:\WINDOWS\system32\mfcbi32.exe
O4 - HKLM\..\Run: [atlvv.exe] C:\WINDOWS\system32\atlvv.exe
O4 - HKLM\..\Run: [netxf.exe] C:\WINDOWS\netxf.exe
O4 - HKLM\..\Run: [ipep.exe] C:\WINDOWS\ipep.exe

O4 - HKLM\..\Run: [msvp32.exe] C:\WINDOWS\msvp32.exe
O4 - HKLM\..\Run: [winfz32.exe] C:\WINDOWS\winfz32.exe
O4 - HKLM\..\Run: [winrj32.exe] C:\WINDOWS\winrj32.exe
O4 - HKLM\..\Run: [atlxk.exe] C:\WINDOWS\system32\atlxk.exe
O4 - HKLM\..\Run: [javawg32.exe] C:\WINDOWS\system32\javawg32.exe
O4 - HKLM\..\Run: [javazi32.exe] C:\WINDOWS\system32\javazi32.exe
O4 - HKLM\..\Run: [sdkub.exe] C:\WINDOWS\system32\sdkub.exe
O4 - HKLM\..\Run: [netse.exe] C:\WINDOWS\system32\netse.exe
O4 - HKLM\..\Run: [iexr32.exe] C:\WINDOWS\iexr32.exe
O4 - HKLM\..\Run: [d3gw32.exe] C:\WINDOWS\d3gw32.exe
O4 - HKLM\..\Run: [ntpd.exe] C:\WINDOWS\system32\ntpd.exe
O4 - HKLM\..\Run: [winmg.exe] C:\WINDOWS\system32\winmg.exe
O4 - HKLM\..\Run: [msvi.exe] C:\WINDOWS\system32\msvi.exe
O4 - HKLM\..\Run: [sysor32.exe] C:\WINDOWS\sysor32.exe
O4 - HKLM\..\Run: [sysvq32.exe] C:\WINDOWS\sysvq32.exe
O4 - HKLM\..\RunOnce: [javacs32.exe] C:\WINDOWS\javacs32.exe
O4 - HKLM\..\RunOnce: [netih.exe] C:\WINDOWS\system32\netih.exe
O4 - HKLM\..\RunOnce: [addhf32.exe] C:\WINDOWS\system32\addhf32.exe
O4 - HKLM\..\RunOnce: [ieif32.exe] C:\WINDOWS\system32\ieif32.exe
O4 - HKLM\..\RunOnce: [iehe32.exe] C:\WINDOWS\system32\iehe32.exe
O4 - HKLM\..\RunOnce: [addsm.exe] C:\WINDOWS\addsm.exe
O4 - HKLM\..\RunOnce: [netfn32.exe] C:\WINDOWS\system32\netfn32.exe
O4 - HKLM\..\RunOnce: [apird32.exe] C:\WINDOWS\system32\apird32.exe
O4 - HKLM\..\RunOnce: [d3lt32.exe] C:\WINDOWS\d3lt32.exe
O4 - HKLM\..\RunOnce: [apprg32.exe] C:\WINDOWS\system32\apprg32.exe
O4 - HKLM\..\RunOnce: [ipus.exe] C:\WINDOWS\system32\ipus.exe
O4 - HKLM\..\RunOnce: [addas32.exe] C:\WINDOWS\addas32.exe
O4 - HKLM\..\RunOnce: [appgr32.exe] C:\WINDOWS\appgr32.exe
O4 - HKLM\..\RunOnce: [addbn.exe] C:\WINDOWS\addbn.exe
O4 - HKLM\..\RunOnce: [appzz.exe] C:\WINDOWS\appzz.exe
O4 - HKLM\..\RunOnce: [ntau.exe] C:\WINDOWS\ntau.exe
O4 - HKLM\..\RunOnce: [crzj.exe] C:\WINDOWS\system32\crzj.exe
O4 - HKLM\..\RunOnce: [ipwt32.exe] C:\WINDOWS\system32\ipwt32.exe
O4 - HKLM\..\RunOnce: [atlvg32.exe] C:\WINDOWS\atlvg32.exe
O4 - HKLM\..\RunOnce: [mfcpi32.exe] C:\WINDOWS\mfcpi32.exe

O23 - Service: Network Security Service ( 11Fßä#·ºÄÖ`I) - Unknown owner - C:\WINDOWS\javacs32.exe" /s (file missing)



Paso 3- Sin reiniciar con el programa "KillBox" elimina estos archivos:

C:\WINDOWS\netkr.exe
C:\WINDOWS\system32\mfcir32.exe
C:\WINDOWS\system32\sdkhx32.exe
C:\WINDOWS\netwt32.exe
C:\WINDOWS\addvd.exe
C:\WINDOWS\mfcpi32.exe
C:\WINDOWS\nethx.exe
C:\WINDOWS\system32\mscq32.exe
C:\WINDOWS\syspm.exe
C:\WINDOWS\system32\sdkif32.exe
C:\WINDOWS\winae.exe
C:\WINDOWS\system32\mfcbi32.exe
C:\WINDOWS\system32\atlvv.exe
C:\WINDOWS\netxf.exe
C:\WINDOWS\ipep.exe

C:\WINDOWS\msvp32.exe
C:\WINDOWS\winfz32.exe
C:\WINDOWS\winrj32.exe
C:\WINDOWS\system32\atlxk.exe
C:\WINDOWS\system32\javawg32.exe
C:\WINDOWS\system32\javazi32.exe
C:\WINDOWS\system32\sdkub.exe
C:\WINDOWS\system32\netse.exe
C:\WINDOWS\iexr32.exe
C:\WINDOWS\d3gw32.exe
C:\WINDOWS\system32\ntpd.exe
C:\WINDOWS\system32\winmg.exe
C:\WINDOWS\system32\msvi.exe
C:\WINDOWS\sysor32.exe
C:\WINDOWS\sysvq32.exe
C:\WINDOWS\javacs32.exe
C:\WINDOWS\system32\netih.exe
C:\WINDOWS\system32\addhf32.exe
C:\WINDOWS\system32\ieif32.exe
C:\WINDOWS\system32\iehe32.exe
C:\WINDOWS\addsm.exe
C:\WINDOWS\system32\netfn32.exe
C:\WINDOWS\system32\apird32.exe
C:\WINDOWS\d3lt32.exe
C:\WINDOWS\system32\apprg32.exe
C:\WINDOWS\system32\ipus.exe
C:\WINDOWS\addas32.exe
C:\WINDOWS\appgr32.exe
C:\WINDOWS\addbn.exe
C:\WINDOWS\appzz.exe
C:\WINDOWS\ntau.exe
C:\WINDOWS\system32\crzj.exe
C:\WINDOWS\system32\ipwt32.exe
C:\WINDOWS\atlvg32.exe
C:\WINDOWS\mfcpi32.exe



Paso 4- Ejecuta EWIDO.

Paso 5- Reinicia el sistema, descarga y ejecuta la nueva versión de SmitfraudFIX.bat
Paso 6- Usa el Disk Cleaner para limpiar cookies y temporales

Reinicia y nos contas los resultados.

Salu2

Habiendo seguido lo pasos que indicaste debo reconocer que es impresionante lo tuyo, oh gran Piedra, sobre la que se apoya la libre navegación por la Red.
Ha funcionado tus instrucciones y me alegra poder decir que el Starpage y otros amigos que lo secundaban ya no existen en nuestro sistema.
Muchísimas gracias.