hola vi q postearon por el mismo problema pero a mi me tiara algo distinto.. q tengo q borrar??? desde ya.. gracias..
System Hijack Scanner Entries:
---------------
R0 - HKCU\Software\Microsoft\Internet Explorer\Main, Start Page=about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Main, Start Page=about:blank
R0 - HKCU\Software\Microsoft\Internet Explorer\Main, Local Page=about:blank
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search, CustomizeSearch=about:blank
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search, SearchAssistant=about:NavigationFailure
R1 - HKLM\Software\Microsoft\Internet Explorer\Main, Default_page_url=about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main, Default_search_url=about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Main, search bar=about:NavigationFailure
R1 - HKLM\Software\Microsoft\Internet Explorer\Main, search bar=about:NavigationFailure
R1 - HKCU\Software\Microsoft\Internet Explorer\Main, window title=Microsoft Internet Explorer
R1 - HKLM\Software\Microsoft\Internet Explorer\Main, window title=Microsoft Internet Explorer
R1 - HKCU\Software\Microsoft\Internet Explorer\Main, homeOldSp=about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main, homeOldSp=about:blank
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search, CustomizeSearch=about:blank
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search, SearchAssistant=about:NavigationFailure
O2 - BHO: (no name) - {0678DF4A-FDC2-4C9E-B68F-209AD3F91016} - C:\WINNT\system32\elbkkda.dll
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Archivos de programa\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\ARCHIV~1\SPYBOT~1\SDHelper.dll
O3 - ToolBar: (no name) - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\system32\msdxm.ocx
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon (file missing)
O4 - HKLM\..\Run: [SiS Windows KeyHook] C:\WINNT\System32\keyhook.exe
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd (file missing)
O4 - HKLM\..\Run: [PCTVOICE] pctspk.exe (file missing)
O4 - HKLM\..\Run: [SCANINICIO] "C:\Archivos de programa\Panda Software\Panda Antivirus Platinum\Inicio.exe"
O4 - HKLM\..\Run: [APVXDWIN] "C:\Archivos de programa\Panda Software\Panda Antivirus Platinum\APVXDWIN.EXE" /s
O4 - HKLM\..\Run: [NeroCheck] C:\WINNT\system32\NeroCheck.exe
O4 - HKLM\..\Run: [Network Service] (file missing)
O4 - HKLM\..\Run: [NetPumper] "C:\Archivos de programa\NetPumper\NetPumperIEProxy.exe"
O4 - HKCU\..\Run: [MsnMsgr] "C:\Archivos de programa\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [Network Service] (file missing)
O4 - HKCU\..\Run: [Windows Internet Protocol] (file missing)
O4 - Start Up: C:\Documents and Settings\Tiki\Menú Inicio\Programas\Inicio\AVResident.lnk
O4 - User Start Up: C:\Documents and Settings\Tiki\Menú Inicio\Programas\Inicio\AVResident.lnk
O4 - Global Start Up: C:\Documents and Settings\All Users\Menú Inicio\Programas\Inicio\Troyan Explore Antivirus.LNK
O4 - Global User Start Up: C:\Documents and Settings\All Users\Menú Inicio\Programas\Inicio\Troyan Explore Antivirus.LNK
O5 - HKCU\control panel\don't load: ncpa.cpl = No
O5 - HKCU\control panel\don't load: odbccp32.cpl = No
O8 - Extra Context Menu Items: Download with NetPumper - C:\Archivos de programa\NetPumper\AddUrl.htm
O8 - Extra Context Menu Items: E&xportar a Microsoft Excel - res://C:\ARCHIV~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O16 - DPF: {11111111-1111-1111-1111-111111113457} ((no name)) - file://c:\explorer.cab
O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) - http://v4.windowsupdate.microsoft.co...211.5075462963
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/s...sh/swflash.cab
O17 - HKEY_LOCAL_MACHINE\System\CurrentControlSet\Servic es\TCPIP\Parameters\Interfaces\{680A89BF-AD1E-4AF8-B222-B1BF74E6D960}, NameServer=200.43.18.243 200.43.18.250
O18 - Protocol: about - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINNT\system32\mshtml.dll
O18 - Protocol: cdl - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} - C:\WINNT\system32\urlmon.dll
O18 - Protocol: gopher - {79eac9e4-baf9-11ce-8c82-00aa004ba90b} - C:\WINNT\system32\urlmon.dll
O18 - Protocol: its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\WINNT\System32\itss.dll
O18 - Protocol: javascript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINNT\system32\mshtml.dll
O18 - Protocol: local - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\WINNT\system32\urlmon.dll
O18 - Protocol: mailto - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINNT\system32\mshtml.dll
O18 - Protocol: mhtml - {05300401-BCBC-11d0-85E3-00C04FD85AB4} - C:\WINNT\system32\inetcomm.dll
O18 - Protocol: mk - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} - C:\WINNT\system32\urlmon.dll
O18 - Protocol: ms-its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\WINNT\System32\itss.dll
O18 - Protocol: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Archivos de programa\Archivos comunes\Microsoft Shared\Information Retrieval\MSITSS.DLL
O18 - Protocol: mso-offdap - {3D9F03FA-7A94-11D3-BE81-0050048385D1} - C:\ARCHIV~1\ARCHIV~1\MICROS~1\WEBCOM~1\10\OWC10.DL L
O18 - Protocol: mso-offdap11 - {32505114-5902-49B2-880A-1F7738E5A384} - C:\ARCHIV~1\ARCHIV~1\MICROS~1\WEBCOM~1\11\OWC11.DL L
O18 - Protocol: res - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINNT\system32\mshtml.dll
O18 - Protocol: sysimage - {76E67A63-06E9-11D2-A840-006008059382} - C:\WINNT\system32\mshtml.dll
O18 - Protocol: vbscript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINNT\system32\mshtml.dll
O18 - Protocol: vnd.ms.radio - {3DA2AA3B-3D96-11D2-9BD2-204C4F4F5020} - C:\WINNT\system32\msdxm.ocx
