Hola como estas? Hice lo que vos me dijiste, y estos son los resultados del malwarebytes:
Malwarebytes' Anti-Malware 1.41
Versión de la Base de Datos: 2775
Windows 5.1.2600 Service Pack 3
11/10/2009 19:57:24
mbam-log-2009-10-11 (19-57-16).txt
Tipo de examen : Examen Completo (C:\|D:\|)
Objetos examinados: 236774
Tiempo transcurrido: 1 hour(s), 52 minute(s), 11 second(s)
Procesos en Memoria Infectados: 0
Módulos en Memoria Infectados: 0
Claves del Registro Infectadas: 16
Valores del Registro Infectados: 0
Elementos de Datos del Registro Infectados: 2
Carpetas Infectadas: 0
Ficheros Infectados: 75
Procesos en Memoria Infectados:
(No se han detectado elementos maliciosos)
Módulos en Memoria Infectados:
(No se han detectado elementos maliciosos)
Claves del Registro Infectadas:
HKEY_CLASSES_ROOT\Interface\{2e9937fc-cf2f-4f56-af54-5a6a3dd375cc} (Adware.MyWebSearch) -> No action taken.
HKEY_CLASSES_ROOT\Interface\{741de825-a6f0-4497-9aa6-8023cf9b0fff} (Adware.MyWebSearch) -> No action taken.
HKEY_CLASSES_ROOT\Interface\{cf54be1c-9359-4395-8533-1657cf209cfe} (Adware.MyWebSearch) -> No action taken.
HKEY_CLASSES_ROOT\CLSID\{147a976f-eee1-4377-8ea7-4716e4cdd239} (Adware.MyWebSearch) -> No action taken.
HKEY_CLASSES_ROOT\Typelib\{d518921a-4a03-425e-9873-b9a71756821e} (Adware.MyWebSearch) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{56256a51-b582-467e-b8d4-7786eda79ae0} (Trojan.Vundo) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Curre ntVersion\Ext\Stats\{00a6faf1-072e-44cf-8957-5838f569a31d} (Adware.MyWebSearch) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Curre ntVersion\Ext\Stats\{07b18ea1-a523-4961-b6bb-170de4475cca} (Adware.MyWebSearch) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Curre ntVersion\Ext\Stats\{07b18ea9-a523-4961-b6bb-170de4475cca} (Adware.MyWebSearch) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Curre ntVersion\Ext\Stats\{07b18eab-a523-4961-b6bb-170de4475cca} (Adware.MyWebSearch) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Curre ntVersion\Ext\Stats\{1d4db7d2-6ec9-47a3-bd87-1e41684e07bb} (Adware.MyWebSearch) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Curre ntVersion\Ext\Stats\{9ff05104-b030-46fc-94b8-81276e4e27df} (Adware.MyWebSearch) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{56256a51-b582-467e-b8d4-7786eda79ae0} (Trojan.Vundo) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Ext\PreApproved\{1d4db7d2-6ec9-47a3-bd87-1e41684e07bb} (Adware.MyWebSearch) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\RunDll32Policy\f3ScrCtr.dll (Adware.MyWebSearch) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\W MPlayer\Schemes\f3pss (Adware.MyWebSearch) -> No action taken.
Valores del Registro Infectados:
(No se han detectado elementos maliciosos)
Elementos de Datos del Registro Infectados:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntiVirusDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\UpdatesDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> No action taken.
Carpetas Infectadas:
(No se han detectado elementos maliciosos)
Ficheros Infectados:
C:\Archivos de programa\Windows Live\Messenger\riched20.dll (Adware.MyWebSearch) -> No action taken.
C:\System Volume Information\_restore{C2705F1B-2AB5-4605-ADB9-DF35D67059D8}\RP254\A0062529.dll (Adware.MyWebSearch) -> No action taken.
C:\System Volume Information\_restore{C2705F1B-2AB5-4605-ADB9-DF35D67059D8}\RP254\A0063568.dll (Adware.MyWebSearch) -> No action taken.
C:\System Volume Information\_restore{C2705F1B-2AB5-4605-ADB9-DF35D67059D8}\RP254\A0064699.scr (Adware.MyWebSearch) -> No action taken.
C:\System Volume Information\_restore{C2705F1B-2AB5-4605-ADB9-DF35D67059D8}\RP254\A0064706.DLL (Adware.MyWebSearch) -> No action taken.
C:\System Volume Information\_restore{C2705F1B-2AB5-4605-ADB9-DF35D67059D8}\RP254\A0064711.SCR (Adware.MyWebSearch) -> No action taken.
C:\System Volume Information\_restore{C2705F1B-2AB5-4605-ADB9-DF35D67059D8}\RP254\A0064712.DLL (Adware.MyWebSearch) -> No action taken.
C:\System Volume Information\_restore{C2705F1B-2AB5-4605-ADB9-DF35D67059D8}\RP254\A0064714.DLL (Adware.MyWebSearch) -> No action taken.
C:\System Volume Information\_restore{C2705F1B-2AB5-4605-ADB9-DF35D67059D8}\RP254\A0064719.EXE (Adware.MyWebSearch) -> No action taken.
C:\System Volume Information\_restore{C2705F1B-2AB5-4605-ADB9-DF35D67059D8}\RP254\A0064720.DLL (Adware.MyWebSearch) -> No action taken.
C:\System Volume Information\_restore{C2705F1B-2AB5-4605-ADB9-DF35D67059D8}\RP254\A0064721.DLL (Adware.MyWebSearch) -> No action taken.
C:\System Volume Information\_restore{C2705F1B-2AB5-4605-ADB9-DF35D67059D8}\RP254\A0064722.EXE (Adware.MyWebSearch) -> No action taken.
C:\System Volume Information\_restore{C2705F1B-2AB5-4605-ADB9-DF35D67059D8}\RP254\A0064723.EXE (Adware.MyWebSearch) -> No action taken.
C:\System Volume Information\_restore{C2705F1B-2AB5-4605-ADB9-DF35D67059D8}\RP254\A0064724.DLL (Adware.MyWebSearch) -> No action taken.
C:\System Volume Information\_restore{C2705F1B-2AB5-4605-ADB9-DF35D67059D8}\RP254\A0064727.DLL (Adware.MyWebSearch) -> No action taken.
C:\System Volume Information\_restore{C2705F1B-2AB5-4605-ADB9-DF35D67059D8}\RP254\A0064728.EXE (Adware.MyWebSearch) -> No action taken.
C:\System Volume Information\_restore{C2705F1B-2AB5-4605-ADB9-DF35D67059D8}\RP254\A0064729.EXE (Adware.MyWebSearch) -> No action taken.
C:\System Volume Information\_restore{C2705F1B-2AB5-4605-ADB9-DF35D67059D8}\RP254\A0064730.EXE (Adware.MyWebSearch) -> No action taken.
C:\System Volume Information\_restore{C2705F1B-2AB5-4605-ADB9-DF35D67059D8}\RP254\A0064731.DLL (Adware.MyWebSearch) -> No action taken.
C:\System Volume Information\_restore{C2705F1B-2AB5-4605-ADB9-DF35D67059D8}\RP254\A0064732.EXE (Adware.MyWebSearch) -> No action taken.
C:\System Volume Information\_restore{C2705F1B-2AB5-4605-ADB9-DF35D67059D8}\RP254\A0064733.DLL (Adware.MyWebSearch) -> No action taken.
C:\System Volume Information\_restore{C2705F1B-2AB5-4605-ADB9-DF35D67059D8}\RP254\A0065649.dll (Adware.MyWebSearch) -> No action taken.
C:\System Volume Information\_restore{C2705F1B-2AB5-4605-ADB9-DF35D67059D8}\RP254\A0065650.DLL (Adware.MyWebSearch) -> No action taken.
C:\System Volume Information\_restore{C2705F1B-2AB5-4605-ADB9-DF35D67059D8}\RP254\A0065652.DLL (Adware.MyWebSearch) -> No action taken.
C:\System Volume Information\_restore{C2705F1B-2AB5-4605-ADB9-DF35D67059D8}\RP254\A0065653.DLL (Adware.MyWebSearch) -> No action taken.
C:\System Volume Information\_restore{C2705F1B-2AB5-4605-ADB9-DF35D67059D8}\RP254\A0065654.DLL (Adware.MyWebSearch) -> No action taken.
C:\System Volume Information\_restore{C2705F1B-2AB5-4605-ADB9-DF35D67059D8}\RP254\A0065656.EXE (Adware.MyWebSearch) -> No action taken.
C:\System Volume Information\_restore{C2705F1B-2AB5-4605-ADB9-DF35D67059D8}\RP254\A0065657.DLL (Adware.MyWebSearch) -> No action taken.
C:\System Volume Information\_restore{C2705F1B-2AB5-4605-ADB9-DF35D67059D8}\RP254\A0065658.DLL (Adware.MyWebSearch) -> No action taken.
C:\System Volume Information\_restore{C2705F1B-2AB5-4605-ADB9-DF35D67059D8}\RP254\A0064726.DLL (Adware.MyWebSearch) -> No action taken.
C:\System Volume Information\_restore{C2705F1B-2AB5-4605-ADB9-DF35D67059D8}\RP254\A0065655.DLL (Adware.MyWebSearch) -> No action taken.
C:\System Volume Information\_restore{C2705F1B-2AB5-4605-ADB9-DF35D67059D8}\RP254\A0065691.dll (Adware.MyWebSearch) -> No action taken.
C:\System Volume Information\_restore{C2705F1B-2AB5-4605-ADB9-DF35D67059D8}\RP257\A0083123.dll (Adware.MyWebSearch) -> No action taken.
C:\System Volume Information\_restore{C2705F1B-2AB5-4605-ADB9-DF35D67059D8}\RP257\A0083180.DLL (Adware.MyWebSearch) -> No action taken.
C:\System Volume Information\_restore{C2705F1B-2AB5-4605-ADB9-DF35D67059D8}\RP257\A0083182.DLL (Adware.MyWebSearch) -> No action taken.
C:\System Volume Information\_restore{C2705F1B-2AB5-4605-ADB9-DF35D67059D8}\RP257\A0083183.DLL (Adware.MyWebSearch) -> No action taken.
C:\System Volume Information\_restore{C2705F1B-2AB5-4605-ADB9-DF35D67059D8}\RP257\A0083184.EXE (Adware.MyWebSearch) -> No action taken.
C:\System Volume Information\_restore{C2705F1B-2AB5-4605-ADB9-DF35D67059D8}\RP257\A0083185.DLL (Adware.MyWebSearch) -> No action taken.
C:\System Volume Information\_restore{C2705F1B-2AB5-4605-ADB9-DF35D67059D8}\RP257\A0083186.EXE (Adware.MyWebSearch) -> No action taken.
C:\System Volume Information\_restore{C2705F1B-2AB5-4605-ADB9-DF35D67059D8}\RP257\A0083187.DLL (Adware.MyWebSearch) -> No action taken.
C:\System Volume Information\_restore{C2705F1B-2AB5-4605-ADB9-DF35D67059D8}\RP257\A0083188.DLL (Adware.MyWebSearch) -> No action taken.
C:\System Volume Information\_restore{C2705F1B-2AB5-4605-ADB9-DF35D67059D8}\RP257\A0083175.exe (Adware.MyWebSearch) -> No action taken.
C:\System Volume Information\_restore{C2705F1B-2AB5-4605-ADB9-DF35D67059D8}\RP257\A0083318.EXE (Adware.MyWebSearch) -> No action taken.
C:\System Volume Information\_restore{C2705F1B-2AB5-4605-ADB9-DF35D67059D8}\RP257\A0083268.dll (Adware.MyWebSearch) -> No action taken.
C:\System Volume Information\_restore{C2705F1B-2AB5-4605-ADB9-DF35D67059D8}\RP257\A0083293.dll (Adware.MyWebSearch) -> No action taken.
C:\System Volume Information\_restore{C2705F1B-2AB5-4605-ADB9-DF35D67059D8}\RP257\A0083294.scr (Adware.MyWebSearch) -> No action taken.
C:\System Volume Information\_restore{C2705F1B-2AB5-4605-ADB9-DF35D67059D8}\RP257\A0083301.DLL (Adware.MyWebSearch) -> No action taken.
C:\System Volume Information\_restore{C2705F1B-2AB5-4605-ADB9-DF35D67059D8}\RP257\A0083306.SCR (Adware.MyWebSearch) -> No action taken.
C:\System Volume Information\_restore{C2705F1B-2AB5-4605-ADB9-DF35D67059D8}\RP257\A0083307.DLL (Adware.MyWebSearch) -> No action taken.
C:\System Volume Information\_restore{C2705F1B-2AB5-4605-ADB9-DF35D67059D8}\RP257\A0083309.DLL (Adware.MyWebSearch) -> No action taken.
C:\System Volume Information\_restore{C2705F1B-2AB5-4605-ADB9-DF35D67059D8}\RP257\A0083314.EXE (Adware.MyWebSearch) -> No action taken.
C:\System Volume Information\_restore{C2705F1B-2AB5-4605-ADB9-DF35D67059D8}\RP257\A0083315.DLL (Adware.MyWebSearch) -> No action taken.
C:\System Volume Information\_restore{C2705F1B-2AB5-4605-ADB9-DF35D67059D8}\RP257\A0083316.DLL (Adware.MyWebSearch) -> No action taken.
C:\System Volume Information\_restore{C2705F1B-2AB5-4605-ADB9-DF35D67059D8}\RP257\A0083317.EXE (Adware.MyWebSearch) -> No action taken.
C:\System Volume Information\_restore{C2705F1B-2AB5-4605-ADB9-DF35D67059D8}\RP257\A0083319.DLL (Adware.MyWebSearch) -> No action taken.
C:\System Volume Information\_restore{C2705F1B-2AB5-4605-ADB9-DF35D67059D8}\RP257\A0083321.DLL (Adware.MyWebSearch) -> No action taken.
C:\System Volume Information\_restore{C2705F1B-2AB5-4605-ADB9-DF35D67059D8}\RP257\A0083322.DLL (Adware.MyWebSearch) -> No action taken.
C:\System Volume Information\_restore{C2705F1B-2AB5-4605-ADB9-DF35D67059D8}\RP257\A0083323.EXE (Adware.MyWebSearch) -> No action taken.
C:\System Volume Information\_restore{C2705F1B-2AB5-4605-ADB9-DF35D67059D8}\RP257\A0083324.EXE (Adware.MyWebSearch) -> No action taken.
C:\System Volume Information\_restore{C2705F1B-2AB5-4605-ADB9-DF35D67059D8}\RP257\A0083325.EXE (Adware.MyWebSearch) -> No action taken.
C:\System Volume Information\_restore{C2705F1B-2AB5-4605-ADB9-DF35D67059D8}\RP257\A0083326.DLL (Adware.MyWebSearch) -> No action taken.
C:\System Volume Information\_restore{C2705F1B-2AB5-4605-ADB9-DF35D67059D8}\RP257\A0083327.EXE (Adware.MyWebSearch) -> No action taken.
C:\System Volume Information\_restore{C2705F1B-2AB5-4605-ADB9-DF35D67059D8}\RP257\A0083328.DLL (Adware.MyWebSearch) -> No action taken.
C:\System Volume Information\_restore{C2705F1B-2AB5-4605-ADB9-DF35D67059D8}\RP258\A0083337.dll (Adware.MyWebSearch) -> No action taken.
C:\System Volume Information\_restore{C2705F1B-2AB5-4605-ADB9-DF35D67059D8}\RP258\A0083338.DLL (Adware.MyWebSearch) -> No action taken.
C:\System Volume Information\_restore{C2705F1B-2AB5-4605-ADB9-DF35D67059D8}\RP258\A0083340.DLL (Adware.MyWebSearch) -> No action taken.
C:\System Volume Information\_restore{C2705F1B-2AB5-4605-ADB9-DF35D67059D8}\RP258\A0083341.DLL (Adware.MyWebSearch) -> No action taken.
C:\System Volume Information\_restore{C2705F1B-2AB5-4605-ADB9-DF35D67059D8}\RP258\A0083342.DLL (Adware.MyWebSearch) -> No action taken.
C:\System Volume Information\_restore{C2705F1B-2AB5-4605-ADB9-DF35D67059D8}\RP258\A0083343.DLL (Adware.MyWebSearch) -> No action taken.
C:\System Volume Information\_restore{C2705F1B-2AB5-4605-ADB9-DF35D67059D8}\RP258\A0083344.EXE (Adware.MyWebSearch) -> No action taken.
C:\System Volume Information\_restore{C2705F1B-2AB5-4605-ADB9-DF35D67059D8}\RP258\A0083345.DLL (Adware.MyWebSearch) -> No action taken.
C:\System Volume Information\_restore{C2705F1B-2AB5-4605-ADB9-DF35D67059D8}\RP258\A0083346.DLL (Adware.MyWebSearch) -> No action taken.
C:\System Volume Information\_restore{C2705F1B-2AB5-4605-ADB9-DF35D67059D8}\RP259\A0083406.dll (Adware.MyWebSearch) -> No action taken.
C:\System Volume Information\_restore{C2705F1B-2AB5-4605-ADB9-DF35D67059D8}\RP174\A0032068.exe (Trojan.Downloader) -> No action taken.
C:\System Volume Information\_restore{C2705F1B-2AB5-4605-ADB9-DF35D67059D8}\RP174\A0032070.exe (Trojan.Downloader) -> No action taken.
-----Agregado el 11/10/2009 a las 08 : 09 : 22-----
Y este es el del Hijackthis
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 20:08:36, on 11/10/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Archivos de programa\Alwil Software\Avast4\aswUpdSv.exe
C:\Archivos de programa\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\ARCHIV~1\ALWILS~1\Avast4\ashDisp.exe
C:\Archivos de programa\Spyware Doctor\pctsTray.exe
C:\WINDOWS\system32\WTClient.exe
C:\Archivos de programa\Java\jre6\bin\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Archivos de programa\Google\GoogleToolbarNotifier\GoogleToolba rNotifier.exe
C:\Archivos de programa\Messenger\msmsgs.exe
C:\Documents and Settings\Usuario\Configuración local\Datos de programa\Google\Update\GoogleUpdate.exe
C:\Archivos de programa\RocketDock\RocketDock.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Documents and Settings\Usuario\Configuración local\Datos de programa\Google\Update\1.2.183.7\GoogleCrashHandle r.exe
C:\WINDOWS\BricoPacks\Vista Inspirat 2\UberIcon\UberIcon Manager.exe
C:\WINDOWS\system32\svchost.exe
C:\Archivos de programa\Java\jre6\bin\jqs.exe
C:\Archivos de programa\Archivos comunes\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\PSIService.exe
C:\Archivos de programa\Spyware Doctor\pctsAuxs.exe
C:\Archivos de programa\Spyware Doctor\pctsSvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\Drivers\WTSRV.EXE
C:\Archivos de programa\Internet Explorer\iexplore.exe
C:\Archivos de programa\Alwil Software\Avast4\ashMaiSv.exe
C:\Archivos de programa\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\system32\WISPTIS.EXE
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\Archivos de programa\Internet Explorer\iexplore.exe
C:\Archivos de programa\Trend Micro\HijackThis\HijackThis.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
http://ar.msn.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings,ProxyServer = 127.0.0.1:8080
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings,ProxyOverride = local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Vínculos
O2 - BHO: Aplicación auxiliar de vínculos de Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Archivos de programa\Archivos comunes\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: AskBar BHO - {201f27d4-3704-41d6-89c1-aa35e39143ed} - C:\Archivos de programa\AskBarDis\bar\bin\askBar.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Windows Live Aplicación auxiliar de inicio de sesión - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Archivos de programa\Archivos comunes\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Archivos de programa\Google\GoogleToolbarNotifier\5.3.4501.141 8\swg.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Archivos de programa\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Archivos de programa\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dl l
O3 - Toolbar: Ask Toolbar - {3041d03e-fd4b-44e0-b742-2d9b88305f98} - C:\Archivos de programa\AskBarDis\bar\bin\askBar.dll
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [amd_dc_opt] C:\Archivos de programa\AMD\Dual-Core Optimizer\amd_dc_opt.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [avast!] C:\ARCHIV~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Archivos de programa\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Archivos de programa\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [ISTray] "C:\Archivos de programa\Spyware Doctor\pctsTray.exe"
O4 - HKLM\..\Run: [AdobeCS4ServiceManager] "C:\Archivos de programa\Archivos comunes\Adobe\CS4ServiceManager\CS4ServiceManager. exe" -launchedbylogin
O4 - HKLM\..\Run: [WTClient] WTClient.exe
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Archivos de programa\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [IMBooster] C:\Archivos de programa\Iminent\IMBooster\IMBooster.exe /warmup
O4 - HKLM\..\Run: [Malwarebytes Anti-Malware (reboot)] "C:\Archivos de programa\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] "C:\Archivos de programa\Google\GoogleToolbarNotifier\GoogleToolba rNotifier.exe"
O4 - HKCU\..\Run: [MSMSGS] "C:\Archivos de programa\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Livestation] C:\Archivos de programa\Livestation\Livestation.exe -startup
O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\Usuario\Configuración local\Datos de programa\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [RocketDock] "C:\Archivos de programa\RocketDock\RocketDock.exe"
O4 - HKCU\..\Run: [Real Desktop] "D:\Mis Documentos 2\Real Desktop\Real Desktop\Real Desktop.exe"
O4 - HKCU\..\RunOnce: [Shockwave Updater] C:\WINDOWS\system32\Adobe\Shockwave 11\SwHelper_1150596.exe -Update -1150596 -"Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.1; .NET CLR 3.0.04506.30; msn OptimizedIE8;ESAR)" -"
http://www.juegate.com/template2/gam...ame=pictionary"
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICIO LOCAL')
O4 - HKUS\S-1-5-20\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'Servicio de red')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Adobe Media Player.lnk = C:\Archivos de programa\Adobe Media Player\Adobe Media Player.exe
O4 - Startup: Thoosje Vista Sidebar.lnk = D:\Mis Documentos 2\Gadget Side Bar\Thoosje Vista Sidebar.exe
O4 - Startup: TransBar.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\TransBar\TransBar.exe
O4 - Startup: UberIcon.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\UberIcon\UberIcon Manager.exe
O8 - Extra context menu item: E&xportar a Microsoft Excel - res://C:\ARCHIV~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Referencia - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\ARCHIV~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Archivos de programa\ICQ6.5\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Archivos de programa\ICQ6.5\ICQ.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Archivos de programa\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Archivos de programa\Messenger\msmsgs.exe
O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5 Control) -
http://upload.facebook.com/controls/...oUploader5.cab
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) -
http://messenger.zone.msn.com/binary...r.cab56986.cab
O16 - DPF: {3188FB46-456D-4C07-8A11-F5F3BBBA8AF2} (SeeTooControl Class) -
http://www.seetoo.com/downloadAddon....serVersion=7.0
O16 - DPF: {4871A87A-BFDD-4106-8153-FFDE2BAC2967} (DLM Control) -
http://dlm.tools.akamai.com/dlmanage...ex-2.2.4.1.cab
O16 - DPF: {49232000-16E4-426C-A231-62846947304B} (SysData Class) -
https://wimpro3.cce.hp.com/ChatEntry...ds/sysinfo.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) -
http://messenger.zone.msn.com/ES-AR/.../GAME_UNO1.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) -
http://www.update.microsoft.com/wind...?1210257401875
O16 - DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} (Facebook Photo Uploader 5 Control) -
http://upload.facebook.com/controls/...Uploader55.cab
O16 - DPF: {88D969C0-F192-11D4-A65F-0040963251E5} (XML DOM Document 4.0) -
https://wimpro3.cce.hp.com/ChatEntry...ads/msxml4.cab
O16 - DPF: {BD8667B7-38D8-4C77-B580-18C3E146372C} (Creative Toolbox Plug-in) -
http://kiw.imgag.com/imgag/cp/install/crusher-kiwen.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) -
http://messenger.zone.msn.com/binary...t.cab56907.cab
O16 - DPF: {D0C0F75C-683A-4390-A791-1ACFD5599AB8} (Oberon Flash Game Host) -
http://icq.oberon-media.com/Gameshel...onGameHost.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) -
http://fpdownload2.macromedia.com/ge...nt/swflash.cab
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} -
http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O23 - Service: Ares Chatroom server (AresChatServer) - Ares Development Group - C:\Archivos de programa\Ares\chatServer.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Archivos de programa\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Archivos de programa\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Archivos de programa\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Archivos de programa\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Archivos de programa\Archivos comunes\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Archivos de programa\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Archivos de programa\Java\jre6\bin\jqs.exe
O23 - Service: ProtexisLicensing - Unknown owner - C:\WINDOWS\system32\PSIService.exe
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Archivos de programa\Spyware Doctor\pctsAuxs.exe
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Archivos de programa\Spyware Doctor\pctsSvc.exe
O23 - Service: ServiceLayer - Nokia. - C:\Archivos de programa\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: WinTab Service (WinTabService) - Tablet Driver - C:\WINDOWS\System32\Drivers\WTSRV.EXE
--
End of file - 12107 bytes
-----Agregado el 11/10/2009 a las 08 : 11 : 35-----
Y este es el ultimo mail que le estuvo llegando a mis contactos, antes habia comentado que llegaban vacios y ahora llegaron con esto:
6
Hey， how are you doing recently? I would like to introduce you a very good company and its website is www.hawkoffer.com. It can offer you all kinds of electronic products that you may be in need,such as laptops ,gps ,TV LCD,cell phones,ps3,MP3/4,motorcycles and etc........ You can take some time to have a check ,there must be something interesting you 'd like to purchase . The contact email: hawkoffer@188.com MSN: hawkoffer@hotmail.com Phone: 86+015201036859 Hope you can enjoy yourself in shopping from that company ! Regards 
