iap aer , u.U demoro un poko porke tube problemas xD
ok en el primer skan [
http://www.kaspersky.com/virusscanner] me salio esto...
Scan Statistics:
Total number of scanned objects: 59376
Number of viruses found: 20
Number of infected objects: 58
Number of suspicious objects: 0
Duration of the scan process: 8089 sec
Infected Object Name - Virus Name
C:\Documents and Settings\All Users\Application Data\ref flap deaf eq\Beep bone.exe Infected: Trojan-Downloader.Win32.Swizzor.de
C:\Documents and Settings\All Users\Application Data\ref flap deaf eq\dvddog.exe Infected: Trojan-Downloader.Win32.Swizzor.de
C:\Documents and Settings\All Users\Application Data\ref flap deaf eq\namesoap.exe Infected: Trojan-Downloader.Win32.Swizzor.de
C:\Documents and Settings\fernanda diaz\Application Data\ACECOPYRECT\albuwhfk.exe Infected: Trojan-Downloader.Win32.Swizzor.de
C:\Documents and Settings\fernanda diaz\Application Data\ACECOPYRECT\hqwoqkxb.exe Infected: Trojan-Downloader.Win32.Swizzor.dr
C:\Documents and Settings\fernanda diaz\Application Data\ACECOPYRECT\jgfmdozf.exe Infected: Trojan-Downloader.Win32.Swizzor.de
C:\Documents and Settings\fernanda diaz\Application Data\ACECOPYRECT\name burn memo great.exe Infected: Trojan-Downloader.Win32.Swizzor.dv
C:\Documents and Settings\fernanda diaz\Application Data\ACECOPYRECT\Tool Software Hole.exe Infected: Trojan-Downloader.Win32.Swizzor.cb
C:\Documents and Settings\fernanda diaz\Application Data\ACECOPYRECT\yuwnrbnv.exe Infected: Trojan-Downloader.Win32.Swizzor.de
C:\Documents and Settings\fernanda diaz\Application Data\Mozilla\Firefox\Profiles\zso3qarh.default\Cache\E02B2F9Cd01 Infected: Trojan-Downloader.Win32.Banload.nu
C:\Documents and Settings\fernanda diaz\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\menu.jr-e4066fa-2af3ab51.zip/NudeBox.class Infected: Trojan.Java.ClassLoader.u
C:\Documents and Settings\fernanda diaz\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\menu.jr-e4066fa-2af3ab51.zip/Worker.class Infected: Trojan.Java.ClassLoader.u
C:\Documents and Settings\fernanda diaz\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\menu.jr-e4066fa-2af3ab51.zip/VerifierBug.class Infected: Trojan.Java.ClassLoader.u
C:\Documents and Settings\fernanda diaz\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\menu.jr-e4066fa-2af3ab51.zip Infected: Trojan.Java.ClassLoader.u
C:\Documents and Settings\fernanda diaz\Application Data\way kind wma\Axis File.exe Infected: Trojan-Downloader.Win32.Swizzor.bo
C:\Documents and Settings\fernanda diaz\Local Settings\Temp\36022192.exe Infected: Trojan-Downloader.Win32.Swizzor.dj
C:\Documents and Settings\fernanda diaz\Local Settings\Temp\3611ac32.exe Infected: Trojan-Downloader.Win32.Swizzor.dh
C:\Documents and Settings\fernanda diaz\Local Settings\Temp\36243fc8.exe Infected: Trojan-Downloader.Win32.Swizzor.dh
C:\Documents and Settings\fernanda diaz\Local Settings\Temp\362f7eb2.exe Infected: Trojan-Downloader.Win32.Swizzor.dr
C:\Documents and Settings\fernanda diaz\Local Settings\Temp\3635ac55.exe Infected: Trojan-Downloader.Win32.Swizzor.dh
C:\Documents and Settings\fernanda diaz\Local Settings\Temp\375a1ab7.exe Infected: Trojan-Downloader.Win32.Swizzor.dr
C:\Documents and Settings\fernanda diaz\Local Settings\Temp\375c9149.exe Infected: Trojan-Downloader.Win32.Swizzor.dv
C:\Documents and Settings\fernanda diaz\Local Settings\Temp\37be5dfe.exe Infected: Trojan-Downloader.Win32.Swizzor.dh
C:\Documents and Settings\fernanda diaz\My Documents\New Folder (2)\foto.exe Infected: Trojan-Downloader.Win32.Banload.nu
C:\Documents and Settings\fernanda diaz\Shared\01 Track 1.wma Infected: Trojan-Downloader.WMA.Wimad.d
C:\Documents and Settings\fernanda diaz\Shared\02 Track 2.wma Infected: Trojan-Downloader.WMA.Wimad.d
C:\Documents and Settings\fernanda diaz\Shared\05 Track 5.wma Infected: Trojan-Downloader.WMA.Wimad.c
C:\Documents and Settings\fernanda diaz\Shared\06 Track 6.wma Infected: Trojan-Downloader.WMA.Wimad.c
C:\Documents and Settings\fernanda diaz\Shared\Rare Recording.wma Infected: Trojan-Downloader.WMA.Wimad.c
C:\Documents and Settings\fernanda diaz\Shared\TOTALLY HIP TRACK.wma Infected: Trojan-Downloader.WMA.Wimad.c
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\18BE277F Infected: Trojan-Downloader.Win32.IstBar.kh
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\374B68B6 Infected: Trojan-Downloader.Win32.IstBar.gen
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\3FE863A2/installer_MARKETING11.exe Infected: Trojan-Downloader.Win32.Adload.a
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\3FE863A2 Infected: Trojan-Downloader.Win32.Adload.a
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\668B0670 Infected: Trojan-Spy.Win32.BJCG.d
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\70951964 Infected: Trojan-Clicker.Win32.Small.gu
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\Incoming\AP0.htm Infected: Exploit.HTML.Mht
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\Incoming\AP0.tmp Infected: Trojan-Downloader.Win32.Small.akz
C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP158\A0337425.exe Infected: Trojan-Downloader.Win32.Swizzor.de
C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP158\A0337426.exe Infected: Trojan-Downloader.Win32.Swizzor.de
C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP158\A0337429.exe Infected: Trojan-Downloader.Win32.Swizzor.de
C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP158\A0337434.exe Infected: Trojan-Downloader.Win32.Swizzor.dr
C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP158\A0337435.exe Infected: Trojan-Downloader.Win32.Swizzor.cb
C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP158\A0337436.exe Infected: Trojan-Downloader.Win32.Swizzor.bo
C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP158\A0343425.exe Infected: Trojan-Downloader.Win32.Swizzor.de
C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP158\A0343427.exe Infected: Trojan-Downloader.Win32.Swizzor.de
C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP158\A0343430.exe Infected: Trojan-Downloader.Win32.Swizzor.de
C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP158\A0343435.exe Infected: Trojan-Downloader.Win32.Swizzor.dv
C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP158\A0343436.exe Infected: Trojan-Downloader.Win32.Swizzor.cb
C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP158\A0343437.exe Infected: Trojan-Downloader.Win32.Swizzor.bo
C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP175\A0403799.exe Infected: Trojan-Downloader.Win32.Swizzor.de
C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP175\A0403801.exe Infected: Trojan-Downloader.Win32.Swizzor.de
C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP175\A0403804.exe Infected: Trojan-Downloader.Win32.Swizzor.de
C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP175\A0403810.exe Infected: Trojan-Downloader.Win32.Swizzor.bo
C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP175\A0403811.exe Infected: Trojan-Downloader.Win32.Swizzor.dv
C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP175\A0403812.exe Infected: Trojan-Downloader.Win32.Swizzor.cb
C:\WINDOWS\SYSTEM32\awvtt.dll Infected: Trojan-Downloader.Win32.Agent.yf
C:\WINDOWS\SYSTEM32\service\services.exe Infected: Trojan-Spy.Win32.Banker.ant
*
i depue le pase el spy sweeper i no me dejo sakarlos porke
me salia q me tenia q subscribir.... pero aki le sake foto a lo ke me salio [ ia ke tp lo pude guardar ]
*
i bueno lo ultimo ke es del hijack this
Logfile of HijackThis v1.99.1
Scan saved at 10:04:51 PM, on 12/25/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Yahoo!\Antivirus\ISafe.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\WLTRYSVC.EXE
C:\WINDOWS\System32\bcmwltry.exe
C:\Program Files\Yahoo!\Antivirus\VetMsg.exe
C:\WINDOWS\system32\hkcmd.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\Program Files\Dell\Media Experience\PCMService.exe
C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
C:\Program Files\Creative\Shared Files\CAMTRAY.EXE
C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
C:\PROGRA~1\Yahoo!\YOP\yop.exe
C:\Program Files\Yahoo!\Antivirus\CAVTray.exe
C:\Program Files\Yahoo!\Antivirus\CAVRID.exe
C:\Program Files\MessengerPlus! 3\MsgPlus.exe
C:\Program Files\MUSICMATCH\Musicmatch Jukebox\mmtask.exe
C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe
C:\WINDOWS\system32\service\services.exe
C:\Program Files\Dell Support\DSAgnt.exe
C:\Program Files\WhatPulse\WhatPulse.exe
c:\progra~1\intern~1\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Digital Line Detect\DLG.exe
C:\PROGRA~1\Yahoo!\browser\ycommon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe
C:\Documents and Settings\All Users\Application Data\ref flap deaf eq\Aboutkeep.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Windows Media Player\wmplayer.exe
C:\Program Files\LimeWire\LimeWire.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
C:\Documents and Settings\fernanda diaz\My Documents\HijackThis[www.trucoswindows.net].exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
http://www.dell4me.com/mywayR1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar =
http://www.nfbtfqwmkcmktvirmihagja.com/Mg5...HLCv9wk3L38.phpR1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page =
http://home.netscape.com/home/winsearch.htmlR1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
http://yahoo.sbc.com/dslR1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
http://home.netscape.com/home/winsearch.htmlR1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar =
http://home.netscape.com/home/winsearch200.htmlR1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
http://home.netscape.com/home/winsearch.htmlR0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
http://yahoo.sbc.com/dslR1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) =
http://keyword.netscape.com/keyword/%sR0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - {00A6FAF6-072E-44cf-8957-5838F569A31D} - C:\Program Files\MyWebSearch\SrchAstt\1.bin\MWSSRCAS.DLL (file missing)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: mwsBar BHO - {07B18EA1-A523-4961-B6BB-170DE4475CCA} - C:\Program Files\MyWebSearch\bar\1.bin\MWSBAR.DLL
O2 - BHO: (no name) - {14643F2D-FD3A-51C9-CB48-C0DE375EA92C} - C:\DOCUME~1\FERNAN~1\APPLIC~1\WAYKIN~1\Axis File.exe
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
O2 - BHO: Viewpoint Toolbar BHO - {A7327C09-B521-4EDB-8509-7D2660C9EC98} - C:\Program Files\Viewpoint\Viewpoint Toolbar\ViewBarBHO.dll
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.3000.1001\en-us\msntb.dll
O2 - BHO: MSEvents Object - {FC148228-87E1-4D00-AC06-58DCAA52A4D1} - C:\WINDOWS\system32\oppoo.dll (file missing)
O3 - Toolbar: (no name) - {a19ef336-01d4-48e6-926a-fe7e1c747aed} - (no file)
O3 - Toolbar: Viewpoint Toolbar - {F8AD5AA5-D966-4667-9DAF-2561D68B2012} - C:\Program Files\Viewpoint\Viewpoint Toolbar\ViewBar.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
O4 - HKLM\..\Run: [UpdateManager] "C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe" /r
O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Dell\Media Experience\PCMService.exe"
O4 - HKLM\..\Run: [DVDLauncher] "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Creative WebCam Tray] C:\Program Files\Creative\Shared Files\CAMTRAY.EXE
O4 - HKLM\..\Run: [MyWebSearch Email Plugin] C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoemon.exe
O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\\NeroCheck.exe
O4 - HKLM\..\Run: [ViewMgr] C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
O4 - HKLM\..\Run: [YOP] C:\PROGRA~1\Yahoo!\YOP\yop.exe /autostart
O4 - HKLM\..\Run: [CaAvTray] "C:\Program Files\Yahoo!\Antivirus\CAVTray.exe"
O4 - HKLM\..\Run: [CAVRID] "C:\Program Files\Yahoo!\Antivirus\CAVRID.exe"
O4 - HKLM\..\Run: [APVXDWIN] "C:\Program Files\Panda Software\Panda Antivirus Titanium\APVXDWIN.EXE" /s
O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe"
O4 - HKLM\..\Run: [mmtask] "C:\Program Files\MUSICMATCH\Musicmatch Jukebox\mmtask.exe"
O4 - HKLM\..\Run: [Deaf eq dale aim] C:\Documents and Settings\All Users\Application Data\ref flap deaf eq\comp boob.exe
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [services] C:\WINDOWS\system32\service\services.exe
O4 - HKLM\..\Run: [SpySweeper] "C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe" /startintray
O4 - HKCU\..\Run: [DellSupport] "C:\Program Files\Dell Support\DSAgnt.exe" /startup
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [MyWebSearch Email Plugin] C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoemon.exe
O4 - HKCU\..\Run: [soap for] C:\DOCUME~1\FERNAN~1\APPLIC~1\ACECOP~1\RDR EACH.exe
O4 - HKCU\..\Run: [SpyKiller] C:\Program Files\SpyKiller\spykiller.exe /startup
O4 - HKCU\..\Run: [BestPopUpKiller] C:\Program Files\BestPopUpKiller\BestPopupKiller.exe /startup
O4 - HKCU\..\Run: [ares] "C:\Program Files\Ares\Ares.exe" -h
O4 - HKCU\..\Run: [areslite] "C:\Program Files\Ares Lite Edition\AresLite.exe" -h
O4 - HKCU\..\Run: [WhatPulse] C:\Program Files\WhatPulse\WhatPulse.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Digital Line Detect.lnk = ?
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O8 - Extra context menu item: &Search -
http://bar.mywebsearch.com/menusearch.html?p=ZNxmk121AMUSO8 - Extra context menu item: &Viewpoint Search - res://C:\Program Files\Viewpoint\Viewpoint Toolbar\ViewBar.dll/CXTSEARCH.HTML
O8 - Extra context menu item: Easy-WebPrint Add To Print List - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html
O8 - Extra context menu item: Easy-WebPrint High Speed Print - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html
O8 - Extra context menu item: Easy-WebPrint Preview - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html
O8 - Extra context menu item: Easy-WebPrint Print - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Print.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O9 - Extra button: MUSICMATCH MX Web Player - {d81ca86b-ef63-42af-bee3-4502d9a03c2d} -
http://wwws.musicmatch.com/mmz/openWebRadio.html (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) -
http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cabO16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) -
http://www.kaspersky.com/downloads/kws/kav...can_unicode.cabO16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) -
http://messenger.zone.msn.com/binary/Messe...nt.cab31267.cabO16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) -
http://go.microsoft.com/fwlink/?LinkId=39204&clcid=0x409O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} -
http://ak.imgfarm.com/images/nocache/funwe...up1.0.0.8-2.cabO16 - DPF: {231B1C6E-F934-42A2-92B6-C2FEFEC24276} (yucsetreg Class) - C:\Program Files\Yahoo!\common\yucconfig.dll
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) -
http://messenger.zone.msn.com/binary/MineS...er.cab31267.cabO16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) -
http://spaces.msn.com//PhotoUpload/MsnPUpld.cabO16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) -
http://update.microsoft.com/microsoftupdat...b?1124561970115O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) -
http://messenger.zone.msn.com/binary/Messe...nt.cab31267.cabO16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) -
http://www.pandasoftware.com/activescan/as5free/asinst.cabO16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) -
http://messenger.msn.com/download/MsnMesse...pDownloader.cabO16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) -
http://messenger.zone.msn.com/binary/ZIntro.cab32846.cabO16 - DPF: {BD393C14-72AD-4790-A095-76522973D6B8} (CBreakshotControl Class) -
http://messenger.zone.msn.com/binary/Bankshot.cab31267.cabO16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) -
http://messenger.zone.msn.com/binary/Solit...wn.cab31267.cabO18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O20 - Winlogon Notify: oppoo - C:\WINDOWS\system32\oppoo.dll (file missing)
O20 - Winlogon Notify: WRNotifier - C:\WINDOWS\SYSTEM32\WRLogonNTF.dll
O23 - Service: CAISafe - Computer Associates International, Inc. - C:\Program Files\Yahoo!\Antivirus\ISafe.exe
O23 - Service: Panda anti-virus service (PAVSRV) - Unknown owner - C:\Program Files\Panda Software\Panda Antivirus Titanium\Pavsrv51.exe (file missing)
O23 - Service: Webroot Spy Sweeper Engine (svcWRSSSDK) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
O23 - Service: VET Message Service (VETMSGNT) - Computer Associates International, Inc. - C:\Program Files\Yahoo!\Antivirus\VetMsg.exe
O23 - Service: WLTRYSVC - Unknown owner - C:\WINDOWS\System32\WLTRYSVC.EXE
O23 - Service: YPCService - Yahoo! Inc. - C:\WINDOWS\SYSTEM32\YPCSER~1.EXE
uta al parecer tgo kleta de virus u.U
porfavor revisen mi Log
Dec 25 2005, 10:09 PM
