Foros de daboweb
SEGURIDAD INFORMATICA, Firewall, parches, vacunas, antivirus, anti troyanos, spyware etc => Seguridad Informatica - Firewall - Virus - Troyanos - Spyware - Ad Aware - Malware => Mensaje iniciado por: neox21 en 25 de Junio de 2006, 10:44:37 pm
-
:-d hola necesito ayuda tab tengo este problema ya hice todo lo q habian escrito en otros post pero me sigue saliendo los spaywares u malware , pasa cuando abro una pag web nueva me sale esta direccion web http://www.sysprotectionpage.com/ :-x :-x tb hice lo del auturun aca esta lo del bloc
**********************************************************************************
HKLM\System\CurrentControlSet\Control\Terminal Server\Wds\rdpwd\StartupPrograms
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\AppSetup
HKLM\Software\Policies\Microsoft\Windows\System\Scripts\Startup
HKCU\Software\Policies\Microsoft\Windows\System\Scripts\Logon
HKLM\Software\Policies\Microsoft\Windows\System\Scripts\Logon
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System\Shell
HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System\Shell
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Taskman
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\TerminalServer\Install\Software\Microsoft\Windows\CurrentVersion\Runonce
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\TerminalServer\Install\Software\Microsoft\Windows\CurrentVersion\RunonceEx
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\TerminalServer\Install\Software\Microsoft\Windows\CurrentVersion\Run
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
+ ATICCC CLI Application (Command Line Interface) (Not verified) ATI Technologies Inc. c:\archivos de programa\ati technologies\ati.ace\cli.exe
+ ATIPTA ATI Desktop Control Panel (Not verified) ATI Technologies, Inc. c:\archivos de programa\ati technologies\ati control panel\atiptaxx.exe
+ InCD File not found: C:\Archivos de programa\Ahead\InCD\InCD.exe
+ InstantAccess c:\archivos de programa\textbridge plus\bin\instantaccess.exe
+ iTunesHelper iTunesHelper Module (Not verified) Apple Computer, Inc. c:\archivos de programa\itunes\ituneshelper.exe
+ LGODDFU (Not verified) CST c:\archivos de programa\lg_fwupdate\fwupdate.exe
+ MCAgentExe McAfee SecurityCenter Agent (Not verified) McAfee, Inc c:\archivos de programa\mcafee.com\agent\mcagent.exe
+ MCUpdateExe McAfee SecurityCenter Update Engine (Not verified) McAfee, Inc c:\archivos de programa\mcafee.com\agent\mcupdate.exe
+ Mercora File not found: C:\Archivos de programa\Mercora\MercoraClient.exe
+ MessengerPlus3 Messenger Plus! (Verified) Patchou c:\archivos de programa\messengerplus! 3\msgplus.exe
+ NeroFilterCheck NeroCheck (Not verified) Ahead Software Gmbh c:\windows\system32\nerocheck.exe
+ NuTCSetupEnviron c:\archivos de programa\rational\rational test\nutcroot\bin\ncoeenv.exe
+ OASClnt McAfee VirusScan OAS Client (Not verified) McAfee, Inc. c:\archivos de programa\mcafee.com\vso\oasclnt.exe
+ Pando pando (Not verified) Pando Networks c:\archivos de programa\pando networks\pando\pando.exe
+ PinnacleDriverCheck c:\windows\system32\psdrvcheck.exe
+ QuickTime Task QuickTime Task (Not verified) Apple Computer, Inc. c:\archivos de programa\quicktime\qttask.exe
+ SoDA Startup SoDA Startup (Not verified) Rational Software Corp. c:\archivos de programa\rational\sodaword\wizards\sodastartup.exe
+ SunJavaUpdateSched Java(TM) 2 Platform Standard Edition binary (Not verified) Sun Microsystems, Inc. c:\archivos de programa\java\jre1.5.0_06\bin\jusched.exe
+ TkBellExe RealNetworks Scheduler (Not verified) RealNetworks, Inc. c:\archivos de programa\archivos comunes\real\update_ob\realsched.exe
+ USBToolTip Pinnacle USB Tip - for Multi Media eXtensions (Not verified) Pinnacle Systems GmbH c:\archivos de programa\pinnacle\shared files\programs\usbtip\usbtip.exe
+ VirusScan Online McAfee VirusScan ActiveShield Resource (Not verified) McAfee, Inc. c:\archivos de programa\mcafee.com\vso\mcvsshld.exe
+ VSOCheckTask McAfee VirusScan Command Handler (Not verified) McAfee, Inc. c:\archivos de programa\mcafee.com\vso\mcmnhdlr.exe
+ YCentral Yahoo! Central (Verified) Yahoo! Inc. c:\archivos de programa\yahoo!\ycentral\yahoocentral.exe
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce
C:\Documents and Settings\All Users\Menú Inicio\Programas\Inicio
+ Administrador de servicios.lnk SQL Server Service Manager (Not verified) Microsoft Corporation c:\archivos de programa\microsoft sql server\80\tools\binn\sqlmangr.exe
+ ATI CATALYST System Tray.lnk CLI Application (Command Line Interface) (Not verified) ATI Technologies Inc. c:\archivos de programa\ati technologies\ati.ace\cli.exe
+ Inicio rápido de Adobe Reader.lnk Adobe Acrobat SpeedLauncher (Not verified) Adobe Systems Incorporated c:\archivos de programa\adobe\acrobat 7.0\reader\reader_sl.exe
+ InterVideo WinCinema Manager.lnk WinCinema Manager (Not verified) InterVideo Inc. c:\archivos de programa\intervideo\common\bin\wincinemamgr.exe
C:\Documents and Settings\Isaac Barrios\Menú Inicio\Programas\Inicio
+ Yahoo! Widget Engine.lnk Yahoo! Widget Engine (Not verified) Yahoo! Inc. c:\archivos de programa\yahoo!\yahoo! widget engine\yahoowidgetengine.exe
HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows\Load
HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows\Run
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run
+ dcomcfg.exe c:\windows\system32\dcomcfg.exe
+ kernel32.dll c:\windows\system32\atmclk.exe
+ wininet.dll c:\windows\system32\regperf.exe
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run
HKCU\Software\Microsoft\Windows\CurrentVersion\Run
+ 1d8df78e.exe File not found: C:\Documents and Settings\Isaac Barrios\Configuración local\Datos de programa\1d8df78e.exe
+ BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA} Nero Home (Not verified) Nero AG c:\archivos de programa\archivos comunes\ahead\lib\nmbgmonitor.exe
+ IW_Drop_Icon InstantWrite Control Center (Not verified) Pinnacle Systems GmbH. c:\archivos de programa\pinnacle\instantcddvd\instantwrite\iwctrl.exe
+ Pando pando (Not verified) Pando Networks c:\archivos de programa\pando networks\pando\pando.exe
+ RTEGPRS Controlador de móvil GPRS/GSM (Not verified) SmartCom c:\archivos de programa\archivos comunes\rte\rtegprs.exe
+ SpybotSD TeaTimer System settings protector (Verified) Safer Networking Ltd. c:\archivos de programa\spybot - search & destroy\teatimer.exe
+ µTorrent File not found: C:\Documents and Settings\Isaac Barrios\Mis documentos\Fotitos\utorrent.exe
HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnce
HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\TerminalServer\Install\Software\Microsoft\Windows\CurrentVersion\Runonce
HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\TerminalServer\Install\Software\Microsoft\Windows\CurrentVersion\RunonceEx
HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\TerminalServer\Install\Software\Microsoft\Windows\CurrentVersion\Run
HKLM\SOFTWARE\Classes\Protocols\Filter
+ application/octet-stream Microsoft .NET Runtime Execution Engine (Not verified) Microsoft Corporation c:\windows\system32\mscoree.dll
+ application/x-complus Microsoft .NET Runtime Execution Engine (Not verified) Microsoft Corporation c:\windows\system32\mscoree.dll
+ application/x-msdownload Microsoft .NET Runtime Execution Engine (Not verified) Microsoft Corporation c:\windows\system32\mscoree.dll
HKLM\SOFTWARE\Classes\Protocols\Handler
+ ms-help Microsoft® Help Data Services Module (Not verified) Microsoft Corporation c:\archivos de programa\archivos comunes\microsoft shared\help\hxds.dll
+ ms-itss Microsoft® InfoTech Storage System Library (Not verified) Microsoft Corporation c:\archivos de programa\archivos comunes\microsoft shared\information retrieval\msitss.dll
+ msnim MSN Messenger Protocol Handler (Not verified) Microsoft Corporation c:\archivos de programa\msn messenger\msgrapp.dll
HKCU\SOFTWARE\Microsoft\Internet Explorer\Desktop\Components
+ 0 File not found: About:Home
HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components
+ n/a Microsoft .NET IE SECURITY REGISTRATION (Not verified) Microsoft Corporation c:\windows\system32\mscories.dll
HKCU\SOFTWARE\Microsoft\Active Setup\Installed Components
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler
+ bals File not found: C:\WINDOWS\system32\hvcycg.dll
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks
HKLM\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved
+ blue.shell c:\archivos de programa\pinnacle\studio 10\programs\blueshellext.dll
+ Catalyst Context Menu extension ACE Context Menu c:\archivos de programa\ati technologies\ati.ace\atiacmxx.dll
+ CD Copy Shell Extension IDisc Shellextension (Not verified) Pinnacle Systems, Inc. c:\windows\system32\shellext\cdwshext.dll
+ CD Wizard Shell Extension IDisc Shellextension (Not verified) Pinnacle Systems, Inc. c:\windows\system32\shellext\cdwshext.dll
+ ClearCase Shell Extension Base for Context Menus c:\archivos de programa\rational\clearcase\bin\ccshelxb.dll
+ ClearCase Shell Extension Base for Property Pages c:\archivos de programa\rational\clearcase\bin\ccshelxb.dll
+ ClearCase Shell Extension Dispatcher for Context Menus CCSHELXD DLL (Not verified) Rational Software Corporation c:\archivos de programa\rational\clearcase\bin\ccshelxd.dll
+ ClearCase Shell Extension Dispatcher for Property Pages CCSHELXD DLL (Not verified) Rational Software Corporation c:\archivos de programa\rational\clearcase\bin\ccshelxd.dll
+ Extensión de paneo de pantalla del Panel de control File not found: deskpan.dll
+ Fusion Cache Microsoft .NET Runtime Execution Engine (Not verified) Microsoft Corporation c:\windows\system32\mscoree.dll
+ InstantWrite Shellextension InstantWrite Shellextension (Not verified) VOB Computersysteme GmbH c:\windows\system32\shellext\iwshex.dll
+ iTunes iTunes Mini Player DLL (Not verified) Apple Computer, Inc. c:\archivos de programa\itunes\itunesminiplayer.dll
+ Macromedia FTP & RDS CfShellFtpRds Module (Not verified) Macromedia, Inc. c:\windows\system32\cfshellftprds.dll
+ MKS Icon Handler File not found: mksicon.dll
+ NeroDigitalIconHandler Nero Digital Shell Extension (Not verified) Nero AG c:\archivos de programa\archivos comunes\ahead\lib\nerodigitalext.dll
+ NeroDigitalPropSheetHandler Nero Digital Shell Extension (Not verified) Nero AG c:\archivos de programa\archivos comunes\ahead\lib\nerodigitalext.dll
+ Shell Extension for CDRW UDF Shell Extension DLL (Not verified) Ahead Software AG c:\archivos de programa\ahead\incd\incdshx.dll
+ Shell Extensions for RealOne Player RealPlayer Shell Extensions (Not verified) RealNetworks, Inc. c:\archivos de programa\real\realone player\rpshell.dll
+ WinRAR shell extension c:\archivos de programa\winrar\rarext.dll
+ WinZip WinZip Shell Extension DLL (Not verified) WinZip Computing, Inc. c:\archivos de programa\winzip\wzshlstb.dll
+ WinZip WinZip Shell Extension DLL (Not verified) WinZip Computing, Inc. c:\archivos de programa\winzip\wzshlstb.dll
+ WinZip WinZip Shell Extension DLL (Not verified) WinZip Computing, Inc. c:\archivos de programa\winzip\wzshlstb.dll
+ WinZip WinZip Shell Extension DLL (Not verified) WinZip Computing, Inc. c:\archivos de programa\winzip\wzshlstb.dll
HKCU\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved
HKLM\Software\Classes\Folder\Shellex\ColumnHandlers
+ NeroDigitalColumnHandler Class Nero Digital Shell Extension (Not verified) Nero AG c:\archivos de programa\archivos comunes\ahead\lib\nerodigitalext.dll
+ PDF Shell Extension PDF Shell Extension (Not verified) Adobe Systems, Inc. c:\archivos de programa\adobe\acrobat 7.0\activex\pdfshell.dll
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects
+ Adobe PDF Reader Link Helper Adobe Acrobat IE Helper Version 7.0 for ActiveX (Verified) Adobe Systems, Incorporated c:\archivos de programa\adobe\acrobat 7.0\activex\acroiehelper.dll
+ Google Toolbar Helper Barra Google para los clientes de Internet Explorer (Verified) Google Inc c:\archivos de programa\google\googletoolbar1.dll
+ Nothing c:\windows\system32\hp100.tmp
+ SSVHelper Class Java(TM) 2 Platform Standard Edition binary (Not verified) Sun Microsystems, Inc. c:\archivos de programa\java\jre1.5.0_06\bin\ssv.dll
HKCU\Software\Microsoft\Internet Explorer\UrlSearchHooks
HKLM\Software\Microsoft\Internet Explorer\Toolbar
+ googletoolbar1.dll Barra Google para los clientes de Internet Explorer (Verified) Google Inc c:\archivos de programa\google\googletoolbar1.dll
+ McAfee VirusScan McAfee VirusScan Shell Extension Module (Not verified) McAfee, Inc. c:\archivos de programa\mcafee.com\vso\mcvsshl.dll
HKCU\Software\Microsoft\Internet Explorer\Explorer Bars
HKLM\Software\Microsoft\Internet Explorer\Explorer Bars
HKCU\Software\Microsoft\Internet Explorer\Extensions
HKLM\Software\Microsoft\Internet Explorer\Extensions
+ Run IMVU File not found: C:\Documents and Settings\Isaac Barrios\Menú Inicio\Programas\IMVU\Run IMVU.lnk
+ ²¥°ÔµçÊÓ File not found: http://itv.mop.com
Task Scheduler
+ Analizar mediante McAfee.com - Mi equipo (ISAAC-Isaac Barrios).job McAfee VirusScan Command Handler (Not verified) McAfee, Inc. c:\archivos de programa\mcafee.com\vso\mcmnhdlr.exe
HKLM\System\CurrentControlSet\Services
+ Ati HotKey Poller ATI External Event Utility EXE Module (Not verified) ATI Technologies Inc. c:\windows\system32\ati2evxx.exe
+ ATI Smart ATI Smart c:\windows\system32\ati2sgag.exe
+ InCDsrv Helper service for the InCD filesystem driver (Not verified) Ahead Software AG c:\archivos de programa\ahead\incd\incdsrv.exe
+ MailService Rational ClearQuest Mail Service ... description ... c:\archivos de programa\rational\clearquest\mailservice.exe
+ McDetect.exe McAfee WSC Integration Service (Not verified) McAfee, Inc c:\archivos de programa\mcafee.com\agent\mcdetect.exe
+ McShield On-Access Scanner service (Not verified) McAfee Inc. c:\archivos de programa\mcafee.com\vso\mcshield.exe
+ McTskshd.exe McAfee Task Scheduler (Not verified) McAfee, Inc c:\archivos de programa\mcafee.com\agent\mctskshd.exe
+ MDM Supports local and remote debugging for Visual Studio and script debuggers. If this service is stopped, the debuggers will not function properly. (Not verified) Microsoft Corporation c:\archivos de programa\archivos comunes\microsoft shared\vs7debug\mdm.exe
+ MSSQLSERVER SQL Server Windows NT (Not verified) Microsoft Corporation c:\archivos de programa\microsoft sql server\mssql\binn\sqlservr.exe
+ MSSQLServerOLAPService Microsoft SQL Server 2000 Analysis Services (Not verified) Microsoft Corporation c:\archivos de programa\microsoft analysis services\bin\msmdsrv.exe
+ NuTcr..kERService NuTcr..kER Service (Not verified) DataFocus, Inc. c:\windows\system32\nutsrv4.exe
+ RTETAPIService RTETpiSv (Not verified) RTE Software c:\fotowin\rtetpisv.exe
HKLM\System\CurrentControlSet\Services
+ ASAPIW2K ASAPIW2K service (Not verified) Pinnacle Systems GmbH c:\windows\system32\drivers\asapiw2k.sys
+ ati2mtag ATI Radeon WindowsNT Miniport Driver (Not verified) ATI Technologies Inc. c:\windows\system32\drivers\ati2mtag.sys
+ CdaC15BA Macrovision SECURITY Driver (Not verified) Macrovision Europe Ltd c:\windows\system32\drivers\cdac15ba.sys
+ cdrdrv InstantWrite Recorder driver (Not verified) Pinnacle Systems GmbH c:\windows\system32\drivers\cdrdrv.sys
+ GEARAspiWDM CDRom Class Filter Driver (Verified) GEAR Software Inc. c:\windows\system32\drivers\gearaspiwdm.sys
+ GMSIPCI File not found: D:\INSTALL\GMSIPCI.SYS
+ InCDPass File not found: system32\drivers\InCDPass.sys
+ InCDRm File not found: system32\drivers\InCDRm.sys
+ MarvinBus Pinnacle Marvin Discrete Bus Enumerator (Not verified) Pinnacle Systems GmbH c:\windows\system32\drivers\marvinbus.sys
+ MSICPL File not found: D:\install4\MSICPL.sys
+ NPPTNT2 nProtect NPSC Kernel Mode Driver for NT (Not verified) INCA Internet Co., Ltd. c:\windows\system32\npptnt2.sys
+ NTACCESS File not found: D:\NTACCESS.sys
+ P1001VID DirectShow Video Streaming and Capture Kernel Driver (Not verified) Creative Technology Ltd. c:\windows\system32\drivers\p1001vid.sys
+ PCLEPCI PCLEPCI (Not verified) Pinnacle Systems GmbH c:\windows\system32\drivers\pclepci.sys
+ PxHelp20 Px Engine Device Driver for Windows 2000/XP (Not verified) Sonic Solutions c:\windows\system32\drivers\pxhelp20.sys
+ ScFBPNT c:\windows\system32\drivers\scfbpnt.sys
+ Secdrv SafeDisc driver (Not verified) Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K. c:\windows\system32\drivers\secdrv.sys
+ SetupNTGLM7X File not found: D:\NTGLM7X.sys
+ SMBios Intel(R) System Management BIOS Driver (Not verified) Intel Corporation c:\windows\system32\drivers\smbios.sys
+ usb2vcom USB to Serial Bridge Controller Driver c:\windows\system32\drivers\usb2vcom.sys
HKLM\System\CurrentControlSet\Control\Session Manager\BootExecute
HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options
HKLM\Software\Microsoft\Command Processor\Autorun
HKCU\Software\Microsoft\Command Processor\Autorun
HKLM\SOFTWARE\Classes\Exefile\Shell\Open\Command\(Default)
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\Appinit_Dlls
+ MsgPlusLoader.dll Messenger Plus! Process Monitor (Verified) Patchou c:\windows\system32\msgplusloader.dll
HKLM\System\CurrentControlSet\Control\Session Manager\KnownDlls
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\System
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\UIHost
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify
+ AtiExtEvent ATI External Event Utility DLL Module (Not verified) ATI Technologies Inc. c:\windows\system32\ati2evxx.dll
+ winbue32 File not found: winbue32.dll
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\GinaDLL
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Taskman
HKCU\Control Panel\Desktop\Scrnsave.exe
HKLM\System\CurrentControlSet\Control\BootVerificationProgram\ImageName
HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9
HKLM\SYSTEM\CurrentControlSet\Control\Print\Monitors
+ Microsoft Document Imaging Writer Monitor Microsoft® Document Imaging (Not verified) Microsoft Corporation c:\windows\system32\mdimon.dll
HKLM\SYSTEM\CurrentControlSet\Control\Lsa\Authentication Packages
HKLM\SYSTEM\CurrentControlSet\Control\Lsa\Notification Packages
HKLM\SYSTEM\CurrentControlSet\Control\Lsa\Security Packages
*************************************************************************
sperando sus respuestas gracias
-
Mejor separamos la consulta en un nuevo tema.
-
Haz copia de seguridad del registro, deshabilita el "Restaurar el sistema", reinicia en Modo seguro, ejecuta el Autoruns, selecciona con el botón derecho las siguientes entradas y dale a "Delete":
+ Mercora File not found: C:\Archivos de programa\Mercora\MercoraClient.exe
+ dcomcfg.exe c:\windows\system32\dcomcfg.exe
+ kernel32.dll c:\windows\system32\atmclk.exe
+ wininet.dll c:\windows\system32\regperf.exe
+ 1d8df78e.exe File not found: C:\Documents and Settings\Isaac Barrios\Configuración local\Datos de programa\1d8df78e.exe
+ 0 File not found: About:Home
+ bals File not found: C:\WINDOWS\system32\hvcycg.dll
+ MKS Icon Handler File not found: mksicon.dll
+ Nothing c:\windows\system32\hp100.tmp
+ Run IMVU File not found: C:\Documents and Settings\Isaac Barrios\Menú Inicio\Programas\IMVU\Run IMVU.lnk
+ ²¥°ÔµçÊÓ File not found: http://itv.mop.com
+ winbue32 File not found: winbue32.dll
Reinicia normal, actualiza el McAfee y pásalo reiniciando en Modo seguro... Baja, instala, actualiza y ejecuta el Spybot S&D (http://www.safer-networking.de/es/mirrors/index.html), el Adaware (http://www.lavasoft.com/) y el Spywareblaster (http://www.javacoolsoftware.com/sbdownload.html)... Además te recomiendo deshabilitar el Messenger Plus... Saca un nuevo Log...