PDA

Ver la versi髇 completa : Problema con virus -__-



Boogeymn
04-04-2008, 17:24
Saludos. Desde hace aproximadamente una semana el pc me esta dando varios problemas, como:
-Cuando inicio el PC, lo primero que me sale es una advertencia de Windows Defender diciendo que hay un error, a los pocos minutos sale una pantalla azul de windows y se reinicia, luego todo va bien.
-El fondo de escritorio esta completamente negro y no lo puedo cambiar
-Los iconos de las carpetas no se ven
-No puedo iniciar mi antivirus (avast) ni instalar programas, pues todos me dan error al instalar archivos "dll"

Pido por favor que me ayuden a solucionarlo, pues no quisiera formatear...
Muchas gracias

mimasol
04-04-2008, 18:17
Hola !
Primero decime si has actualizado para esa fecha mas o menos tu win..ya que en las ultimas han generado errores en la instalacion de soft dando error en las dll ;en el caso que no fuera asi..
..Escanea con Ewido (http://www.ewido.net/en/onlinescan/)
y contanos que aparecio.

Saludos
Mimasol.

Boogeymn
04-04-2008, 18:37
No he actualizado windows. Ahora analizo y copio el resultado

Boogeymn
04-04-2008, 20:51
__________________________________________________
ewido anti-spyware online scanner
http://www.ewido.net
__________________________________________________


Name: TrackingCookie.Atdmt
Path: C:\Users\usuario\AppData\Roaming\Microsoft\Windows \Cookies\Low\usuario@atdmt[2].txt
Risk: Medium

Name: TrackingCookie.Doubleclick
Path: C:\Users\usuario\AppData\Roaming\Microsoft\Windows \Cookies\Low\usuario@doubleclick[2].txt
Risk: Medium

Name: TrackingCookie.Atdmt
Path: C:\Users\usuario\AppData\Roaming\Microsoft\Windows \Cookies\usuario@atdmt[2].txt
Risk: Medium

Name: TrackingCookie.Netflame
Path: C:\Users\usuario\AppData\Roaming\Microsoft\Windows \Cookies\[email protected][1].txt
Risk: Medium

Name: Trojan.Pakes.ciw
Path: C:\Users\usuario\AppData\Local\Microsoft\Windows\T emporary Internet Files\Content.IE5\6YLO94BI\b64_1[1].jpg
Risk: High

Name: TrackingCookie.2o7
Path: C:\Users\usuario\AppData\Roaming\Microsoft\Windows \Cookies\[email protected][1].txt
Risk: Medium

Name: TrackingCookie.Netflame
Path: :mozilla.225:C:\Users\usuario\AppData\Roaming\Mozi lla\Firefox\Profiles\cp2zscdb.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Netflame
Path: :mozilla.226:C:\Users\usuario\AppData\Roaming\Mozi lla\Firefox\Profiles\cp2zscdb.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Statcounter
Path: :mozilla.307:C:\Users\usuario\AppData\Roaming\Mozi lla\Firefox\Profiles\cp2zscdb.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Statcounter
Path: :mozilla.308:C:\Users\usuario\AppData\Roaming\Mozi lla\Firefox\Profiles\cp2zscdb.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Statcounter
Path: :mozilla.309:C:\Users\usuario\AppData\Roaming\Mozi lla\Firefox\Profiles\cp2zscdb.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Statcounter
Path: :mozilla.310:C:\Users\usuario\AppData\Roaming\Mozi lla\Firefox\Profiles\cp2zscdb.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Statcounter
Path: :mozilla.311:C:\Users\usuario\AppData\Roaming\Mozi lla\Firefox\Profiles\cp2zscdb.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Statcounter
Path: :mozilla.312:C:\Users\usuario\AppData\Roaming\Mozi lla\Firefox\Profiles\cp2zscdb.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Statcounter
Path: :mozilla.313:C:\Users\usuario\AppData\Roaming\Mozi lla\Firefox\Profiles\cp2zscdb.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Statcounter
Path: :mozilla.314:C:\Users\usuario\AppData\Roaming\Mozi lla\Firefox\Profiles\cp2zscdb.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Statcounter
Path: :mozilla.315:C:\Users\usuario\AppData\Roaming\Mozi lla\Firefox\Profiles\cp2zscdb.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Statcounter
Path: :mozilla.316:C:\Users\usuario\AppData\Roaming\Mozi lla\Firefox\Profiles\cp2zscdb.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Statcounter
Path: :mozilla.317:C:\Users\usuario\AppData\Roaming\Mozi lla\Firefox\Profiles\cp2zscdb.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Statcounter
Path: :mozilla.318:C:\Users\usuario\AppData\Roaming\Mozi lla\Firefox\Profiles\cp2zscdb.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Coremetrics
Path: :mozilla.336:C:\Users\usuario\AppData\Roaming\Mozi lla\Firefox\Profiles\cp2zscdb.default\cookies.txt
Risk: Medium

Name: TrackingCookie.2o7
Path: :mozilla.408:C:\Users\usuario\AppData\Roaming\Mozi lla\Firefox\Profiles\cp2zscdb.default\cookies.txt
Risk: Medium

Name: TrackingCookie.2o7
Path: :mozilla.409:C:\Users\usuario\AppData\Roaming\Mozi lla\Firefox\Profiles\cp2zscdb.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Fastclick
Path: :mozilla.457:C:\Users\usuario\AppData\Roaming\Mozi lla\Firefox\Profiles\cp2zscdb.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Fastclick
Path: :mozilla.458:C:\Users\usuario\AppData\Roaming\Mozi lla\Firefox\Profiles\cp2zscdb.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Fastclick
Path: :mozilla.459:C:\Users\usuario\AppData\Roaming\Mozi lla\Firefox\Profiles\cp2zscdb.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Advertising
Path: :mozilla.462:C:\Users\usuario\AppData\Roaming\Mozi lla\Firefox\Profiles\cp2zscdb.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Advertising
Path: :mozilla.464:C:\Users\usuario\AppData\Roaming\Mozi lla\Firefox\Profiles\cp2zscdb.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Advertising
Path: :mozilla.465:C:\Users\usuario\AppData\Roaming\Mozi lla\Firefox\Profiles\cp2zscdb.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Advertising
Path: :mozilla.466:C:\Users\usuario\AppData\Roaming\Mozi lla\Firefox\Profiles\cp2zscdb.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Revsci
Path: :mozilla.467:C:\Users\usuario\AppData\Roaming\Mozi lla\Firefox\Profiles\cp2zscdb.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Revsci
Path: :mozilla.468:C:\Users\usuario\AppData\Roaming\Mozi lla\Firefox\Profiles\cp2zscdb.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Revsci
Path: :mozilla.469:C:\Users\usuario\AppData\Roaming\Mozi lla\Firefox\Profiles\cp2zscdb.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Revsci
Path: :mozilla.470:C:\Users\usuario\AppData\Roaming\Mozi lla\Firefox\Profiles\cp2zscdb.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Revsci
Path: :mozilla.471:C:\Users\usuario\AppData\Roaming\Mozi lla\Firefox\Profiles\cp2zscdb.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Revsci
Path: :mozilla.472:C:\Users\usuario\AppData\Roaming\Mozi lla\Firefox\Profiles\cp2zscdb.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Doubleclick
Path: :mozilla.473:C:\Users\usuario\AppData\Roaming\Mozi lla\Firefox\Profiles\cp2zscdb.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Tradedoubler
Path: :mozilla.474:C:\Users\usuario\AppData\Roaming\Mozi lla\Firefox\Profiles\cp2zscdb.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Yieldmanager
Path: :mozilla.475:C:\Users\usuario\AppData\Roaming\Mozi lla\Firefox\Profiles\cp2zscdb.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Yieldmanager
Path: :mozilla.476:C:\Users\usuario\AppData\Roaming\Mozi lla\Firefox\Profiles\cp2zscdb.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Yieldmanager
Path: :mozilla.477:C:\Users\usuario\AppData\Roaming\Mozi lla\Firefox\Profiles\cp2zscdb.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Yieldmanager
Path: :mozilla.478:C:\Users\usuario\AppData\Roaming\Mozi lla\Firefox\Profiles\cp2zscdb.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Yieldmanager
Path: :mozilla.479:C:\Users\usuario\AppData\Roaming\Mozi lla\Firefox\Profiles\cp2zscdb.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Yieldmanager
Path: :mozilla.480:C:\Users\usuario\AppData\Roaming\Mozi lla\Firefox\Profiles\cp2zscdb.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Tradedoubler
Path: :mozilla.481:C:\Users\usuario\AppData\Roaming\Mozi lla\Firefox\Profiles\cp2zscdb.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Tradedoubler
Path: :mozilla.482:C:\Users\usuario\AppData\Roaming\Mozi lla\Firefox\Profiles\cp2zscdb.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Tradedoubler
Path: :mozilla.483:C:\Users\usuario\AppData\Roaming\Mozi lla\Firefox\Profiles\cp2zscdb.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Yieldmanager
Path: :mozilla.484:C:\Users\usuario\AppData\Roaming\Mozi lla\Firefox\Profiles\cp2zscdb.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Yieldmanager
Path: :mozilla.485:C:\Users\usuario\AppData\Roaming\Mozi lla\Firefox\Profiles\cp2zscdb.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Liveperson
Path: :mozilla.486:C:\Users\usuario\AppData\Roaming\Mozi lla\Firefox\Profiles\cp2zscdb.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Liveperson
Path: :mozilla.487:C:\Users\usuario\AppData\Roaming\Mozi lla\Firefox\Profiles\cp2zscdb.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Atdmt
Path: :mozilla.488:C:\Users\usuario\AppData\Roaming\Mozi lla\Firefox\Profiles\cp2zscdb.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Clickbank
Path: :mozilla.492:C:\Users\usuario\AppData\Roaming\Mozi lla\Firefox\Profiles\cp2zscdb.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Adbrite
Path: :mozilla.497:C:\Users\usuario\AppData\Roaming\Mozi lla\Firefox\Profiles\cp2zscdb.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Adbrite
Path: :mozilla.501:C:\Users\usuario\AppData\Roaming\Mozi lla\Firefox\Profiles\cp2zscdb.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Casalemedia
Path: :mozilla.506:C:\Users\usuario\AppData\Roaming\Mozi lla\Firefox\Profiles\cp2zscdb.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Casalemedia
Path: :mozilla.507:C:\Users\usuario\AppData\Roaming\Mozi lla\Firefox\Profiles\cp2zscdb.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Casalemedia
Path: :mozilla.508:C:\Users\usuario\AppData\Roaming\Mozi lla\Firefox\Profiles\cp2zscdb.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Casalemedia
Path: :mozilla.509:C:\Users\usuario\AppData\Roaming\Mozi lla\Firefox\Profiles\cp2zscdb.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Casalemedia
Path: :mozilla.510:C:\Users\usuario\AppData\Roaming\Mozi lla\Firefox\Profiles\cp2zscdb.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Casalemedia
Path: :mozilla.511:C:\Users\usuario\AppData\Roaming\Mozi lla\Firefox\Profiles\cp2zscdb.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Revenue
Path: :mozilla.516:C:\Users\usuario\AppData\Roaming\Mozi lla\Firefox\Profiles\cp2zscdb.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Information
Path: :mozilla.517:C:\Users\usuario\AppData\Roaming\Mozi lla\Firefox\Profiles\cp2zscdb.default\cookies.txt
Risk: Medium

Name: TrackingCookie.2o7
Path: :mozilla.545:C:\Users\usuario\AppData\Roaming\Mozi lla\Firefox\Profiles\cp2zscdb.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Overture
Path: :mozilla.548:C:\Users\usuario\AppData\Roaming\Mozi lla\Firefox\Profiles\cp2zscdb.default\cookies.txt
Risk: Medium

Name: TrackingCookie.2o7
Path: :mozilla.549:C:\Users\usuario\AppData\Roaming\Mozi lla\Firefox\Profiles\cp2zscdb.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Serving-sys
Path: :mozilla.581:C:\Users\usuario\AppData\Roaming\Mozi lla\Firefox\Profiles\cp2zscdb.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Serving-sys
Path: :mozilla.582:C:\Users\usuario\AppData\Roaming\Mozi lla\Firefox\Profiles\cp2zscdb.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Serving-sys
Path: :mozilla.583:C:\Users\usuario\AppData\Roaming\Mozi lla\Firefox\Profiles\cp2zscdb.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Serving-sys
Path: :mozilla.584:C:\Users\usuario\AppData\Roaming\Mozi lla\Firefox\Profiles\cp2zscdb.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Serving-sys
Path: :mozilla.585:C:\Users\usuario\AppData\Roaming\Mozi lla\Firefox\Profiles\cp2zscdb.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Serving-sys
Path: :mozilla.586:C:\Users\usuario\AppData\Roaming\Mozi lla\Firefox\Profiles\cp2zscdb.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Serving-sys
Path: :mozilla.587:C:\Users\usuario\AppData\Roaming\Mozi lla\Firefox\Profiles\cp2zscdb.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Imrworldwide
Path: :mozilla.588:C:\Users\usuario\AppData\Roaming\Mozi lla\Firefox\Profiles\cp2zscdb.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Imrworldwide
Path: :mozilla.589:C:\Users\usuario\AppData\Roaming\Mozi lla\Firefox\Profiles\cp2zscdb.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Mediaplex
Path: :mozilla.591:C:\Users\usuario\AppData\Roaming\Mozi lla\Firefox\Profiles\cp2zscdb.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Googleadservices
Path: :mozilla.606:C:\Users\usuario\AppData\Roaming\Mozi lla\Firefox\Profiles\cp2zscdb.default\cookies.txt
Risk: Medium

Name: TrackingCookie.2o7
Path: :mozilla.607:C:\Users\usuario\AppData\Roaming\Mozi lla\Firefox\Profiles\cp2zscdb.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Googleadservices
Path: :mozilla.617:C:\Users\usuario\AppData\Roaming\Mozi lla\Firefox\Profiles\cp2zscdb.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Weborama
Path: :mozilla.621:C:\Users\usuario\AppData\Roaming\Mozi lla\Firefox\Profiles\cp2zscdb.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Webtrends
Path: :mozilla.629:C:\Users\usuario\AppData\Roaming\Mozi lla\Firefox\Profiles\cp2zscdb.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Zedo
Path: :mozilla.652:C:\Users\usuario\AppData\Roaming\Mozi lla\Firefox\Profiles\cp2zscdb.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Zedo
Path: :mozilla.654:C:\Users\usuario\AppData\Roaming\Mozi lla\Firefox\Profiles\cp2zscdb.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Zedo
Path: :mozilla.655:C:\Users\usuario\AppData\Roaming\Mozi lla\Firefox\Profiles\cp2zscdb.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Zedo
Path: :mozilla.656:C:\Users\usuario\AppData\Roaming\Mozi lla\Firefox\Profiles\cp2zscdb.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Hitbox
Path: :mozilla.681:C:\Users\usuario\AppData\Roaming\Mozi lla\Firefox\Profiles\cp2zscdb.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Hitbox
Path: :mozilla.682:C:\Users\usuario\AppData\Roaming\Mozi lla\Firefox\Profiles\cp2zscdb.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Hitbox
Path: :mozilla.683:C:\Users\usuario\AppData\Roaming\Mozi lla\Firefox\Profiles\cp2zscdb.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Hitbox
Path: :mozilla.684:C:\Users\usuario\AppData\Roaming\Mozi lla\Firefox\Profiles\cp2zscdb.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Hitbox
Path: :mozilla.685:C:\Users\usuario\AppData\Roaming\Mozi lla\Firefox\Profiles\cp2zscdb.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Adjuggler
Path: :mozilla.768:C:\Users\usuario\AppData\Roaming\Mozi lla\Firefox\Profiles\cp2zscdb.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Adjuggler
Path: :mozilla.769:C:\Users\usuario\AppData\Roaming\Mozi lla\Firefox\Profiles\cp2zscdb.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Realmedia
Path: :mozilla.780:C:\Users\usuario\AppData\Roaming\Mozi lla\Firefox\Profiles\cp2zscdb.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Realmedia
Path: :mozilla.781:C:\Users\usuario\AppData\Roaming\Mozi lla\Firefox\Profiles\cp2zscdb.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Googleadservices
Path: :mozilla.784:C:\Users\usuario\AppData\Roaming\Mozi lla\Firefox\Profiles\cp2zscdb.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Hitslink
Path: :mozilla.824:C:\Users\usuario\AppData\Roaming\Mozi lla\Firefox\Profiles\cp2zscdb.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Hitslink
Path: :mozilla.825:C:\Users\usuario\AppData\Roaming\Mozi lla\Firefox\Profiles\cp2zscdb.default\cookies.txt
Risk: Medium

Name: TrackingCookie.Esomniture
Path: :mozilla.869:C:\Users\usuario\AppData\Roaming\Mozi lla\Firefox\Profiles\cp2zscdb.default\cookies.txt
Risk: Medium

Name: Backdoor.Hupigon
Path: C:\Users\usuario\Videos\Noadware v5.0 Incl Keymaker-Arn.zip/NoAdware.v5.0.Incl.Keymaker-ARN/Keymaker/keygen.exe
Risk: High

RaidMan
04-04-2008, 21:17
Ha conseguido borrar alguna de esas entradas el Ewido??

Si no es asi:

Te sugiero que inicies en modo a prueba de fallos:


Inicio\ejecutar---> msconfig

Pero antes descarga el FileAssassin (http://fileassassin.softonic.com/) e intenta eleminar los archivos con el.

Dentro del msconfig ve a la pesta馻 BOOT.INI y selecciona /SAFEBOOT, y ya que estas ahi, ve a la pesta馻 INICIO y quita los programas que salen en el log del EWIDO.

Reinicia el PC.
Una vez que estes en modo a prueba de fallos, busca los archivos e intenta eliminarlos. Si no puedes, usa el FileAssassin.


Un saludo

PD: Dispones de un anti-spyware/adware??

Boogeymn
04-04-2008, 21:25
solo tenia instalado avast y el firewall de windows, pero no funcionan

mimasol
04-04-2008, 23:15
Fijate si tenes estas entradas en el registro y eliminalas.

[HKLM\SYSTEM\CurrentControlSet\Services\Videorwx]
• "Type"=dword:00000110
• "Start"=dword:00000002
• "ErrorControl"=dword:00000000
• "DisplayName"="Windows Video"
• "ObjectName"="LocalSystem"
• "Description"="为系统提供必要的服务"

[HKLM\SYSTEM\CurrentControlSet\Services\Videorwx\Se curity]
• "Security"=hex:01,00,14,80,90,00,00,00,9c,00,00,00,14,00,00, 00,30,00,00,00,02,\
00,1c,00,01,00,00,00,02,80,14,00,ff,01,0f,00,01,01 ,00,00,00,00,00,01,00,00,\
00,00,02,00,60,00,04,00,00,00,00,00,14,00,fd,01,02 ,00,01,01,00,00,00,00,00,\
05,12,00,00,00,00,00,18,00,ff,01,0f,00,01,02,00,00 ,00,00,00,05,20,00,00,00,\
20,02,00,00,00,00,14,00,8d,01,02,00,01,01,00,00,00 ,00,00,05,0b,00,00,00,00,\
00,18,00,fd,01,02,00,01,02,00,00,00,00,00,05,20,00 ,00,00,23,02,00,00,01,01,\
00,00,00,00,00,05,12,00,00,00,01,01,00,00,00,00,00 ,05,12,00,00,00

– [HKLM\SYSTEM\CurrentControlSet\Services\Videorwx]
• "ImagePath"=hex(2):43,00,3a,00,5c,00,57,00,49,00,4e,00,44,00, 4f,00,57,00,53,00,\
5c,00,53,00,79,00,73,00,74,00,65,00,6d,00,33,00,32 ,00,5c,00,56,00,72,00,77,\
00,78,00,2e,00,65,00,78,00,65,00,20,00,2d,00,4e,00 ,65,00,74,00,53,00,61,00,\
74,00,61,00,00,00

En el caso de que te resulte dificil..podes postear el log de hijackthis.

Pd:el antivirus no va a funcionar, si no lo reinstalas.

Saludos
Mimasol