Buscador
YoReparo.com La Web 
www.YoReparo.com

Regístrate gratis para participar de los foros, o si ya estás registrado haz login.

Mi PC en lentitud de muerte

comentario del autor Mar May 20, 2008 10:23 pm
   
Tengo la Pc con sistema operativo muy lenta, desde hace varias semana, le pase el antivirus Panda Segurity y el SUPERAntiSpyware y me detectaron un virus y varios Malwares y otros bichos, que fueron eliminados, pero mi maquina continua lenta, le active el Hijackthis y este es el resultado:
Por favor me podrian indicar si mi maquina esta infectada.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:09:48 p.m., on 20/05/2008
Platform: Windows 2003 SP2 (WinNT 5.02.3790)
MSIE: Internet Explorer v7.00 (7.00.6000.16640)
Boot mode: Normal

Running processes:
D:\Program Files (x86)\Panda Security\Panda Internet Security

2008\TPSrvWow.exe
D:\WINDOWS\RTHDCPL.EXE
D:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe
D:\Program Files (x86)\Common Files\Ahead\Lib\NMBgMonitor.exe
D:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe
D:\WINDOWS\SysWOW64\ctfmon.exe
D:\Program Files (x86)\MSN Messenger\msnmsgr.exe
D:\Program Files (x86)\SUPERAntiSpyware\SUPERAntiSpyware.exe
D:\Program Files (x86)\Hp\Digital Imaging\bin\hpqtra08.exe
D:\Program Files (x86)\Panda Security\Panda Internet Security

2008\PsCtrls.exe
D:\Program Files (x86)\Sony\Sony Picture

Utility\VolumeWatcher\SPUVolumeWatcher.exe
D:\Program Files (x86)\Panda Security\Panda Internet Security

2008\PavFnSvr.exe
D:\Program Files (x86)\HP\Digital Imaging\bin\hpqimzone.exe
D:\Program Files (x86)\Common Files\Panda Software\PavShld\pavprsrv.exe
D:\Program Files (x86)\Panda Security\Panda Internet Security

2008\pavsrvx86.exe
D:\Program Files (x86)\Roxio\Media Experience\DMXLauncher.exe
D:\Program Files (x86)\Roxio\Drag-to-Disc\DrgToDsc.exe
D:\WINDOWS\SysWOW64\HPZipm12.exe
D:\Program Files (x86)\Panda Security\Panda Internet Security

2008\AVENGINE.EXE
D:\Program Files (x86)\Panda Security\Panda Internet Security

2008\AntiSpam\pskmssvc.exe
d:\program files (x86)\panda security\panda internet security

2008\firewall\PSHOST.EXE
D:\Program Files (x86)\Panda Security\Panda Internet Security

2008\PsImSvc.exe
d:\Program Files (x86)\Common Files\Protexis\License

Service\PsiService_2.exe
D:\Program Files (x86)\HP\Digital Imaging\bin\hpqSTE08.exe
D:\Program Files (x86)\Dantz\Retrospect\retrorun.exe
D:\Program Files (x86)\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe
D:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe
D:\Program Files (x86)\Common Files\Roxio

Shared\9.0\SharedCOM\RoxMediaDB9.exe
D:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
D:\Program Files (x86)\Panda Security\Panda Internet Security

2008\ApvxdWin.exe
D:\Program Files (x86)\MSN Messenger\usnsvc.exe
D:\Program Files (x86)\Common Files\InstallShield\UpdateService\issch.exe
D:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe
D:\Program Files (x86)\Common

Files\Logitech\LComMgr\Communications_Helper.exe
D:\Program Files (x86)\Logitech\QuickCam10\QuickCam10.exe
D:\Program Files (x86)\Common Files\Logitech\LComMgr\LVComSX.exe
D:\Program Files (x86)\Common Files\Roxio

Shared\9.0\SharedCOM\RoxWatchTray9.exe
D:\Program Files (x86)\Winamp\winampa.exe
D:\Program Files (x86)\Java\jre1.6.0_05\bin\jusched.exe
D:\Program Files (x86)\Panda Security\Panda Internet Security

2008\SRVLOAD.EXE
D:\Program Files (x86)\Common Files\Roxio

Shared\9.0\SharedCOM\CPSHelpRunner.exe
D:\Program Files (x86)\Common Files\Logishrd\LQCVFX\COCIManager.exe
D:\Program Files (x86)\Panda Security\Panda Internet Security

2008\WebProxy.exe
D:\Program Files (x86)\Panda Security\Panda Internet Security

2008\PavBckPT.exe
D:\Program Files (x86)\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page =

http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =

http://www.vagos.es/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =

http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =

http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =

http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =

http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext =

http://go.microsoft.com/fwlink/?LinkId=74005
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =

Vínculos
F2 - REG:system.ini: UserInit=userinit
O2 - BHO: Aplicación auxiliar de vínculos de Adobe PDF Reader -

{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - D:\Program Files (x86)\Common

Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer -

{3049C3E9-B461-4BC5-8870-4C09146192CA} - (no file)
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F}

- D:\PROGRA~2\SPYBOT~1\SDHelper.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E}

- D:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -

D:\Program Files (x86)\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper -

{9030D464-4C02-4ABF-8ECC-5164760863C6} - D:\Program Files (x86)\Common

Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O4 - HKLM\..\Run: [GrooveMonitor] "D:\Program Files (x86)\Microsoft

Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [DMXLauncher] "D:\Program Files (x86)\Roxio\Media

Experience\DMXLauncher.exe"
O4 - HKLM\..\Run: [RoxioDragToDisc] "D:\Program Files

(x86)\Roxio\Drag-to-Disc\DrgToDsc.exe"
O4 - HKLM\..\Run: [ISUSPM Startup] "d:\Program Files (x86)\Common

Files\InstallShield\UpdateService\isuspm.exe" -startup
O4 - HKLM\..\Run: [ISUSScheduler] "D:\Program Files (x86)\Common

Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [HP Software Update] D:\Program Files (x86)\HP\HP Software

Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "D:\Program Files

(x86)\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [LogitechCommunicationsManager] "D:\Program Files

(x86)\Common Files\Logitech\LComMgr\Communications_Helper.exe"
O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "D:\Program Files

(x86)\Logitech\QuickCam10\QuickCam10.exe" /hide
O4 - HKLM\..\Run: [LVCOMSX] "D:\Program Files (x86)\Common

Files\Logitech\LComMgr\LVComSX.exe"
O4 - HKLM\..\Run: [RoxWatchTray] "D:\Program Files (x86)\Common Files\Roxio

Shared\9.0\SharedCOM\RoxWatchTray9.exe"
O4 - HKLM\..\Run: [WinampAgent] "D:\Program Files (x86)\Winamp\winampa.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "D:\Program Files

(x86)\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKLM\..\Run: [APVXDWIN] "D:\Program Files (x86)\Panda Security\Panda

Internet Security 2008\APVXDWIN.EXE" /s
O4 - HKLM\..\Run: [SCANINICIO] "D:\Program Files (x86)\Panda Security\Panda

Internet Security 2008\Inicio.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] D:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}]

"D:\Program Files (x86)\Common Files\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [SpybotSD TeaTimer] D:\Program Files (x86)\Spybot - Search

& Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [Cambiador de Fondos] D:\Program Files (x86)\Cambiador de

fondos\CambiadorDeFondos.exe cambiar
O4 - HKCU\..\Run: [msnmsgr] "D:\Program Files (x86)\MSN

Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [SUPERAntiSpyware] D:\Program Files

(x86)\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] D:\WINDOWS\system32\CTFMON.EXE (User

'SERVICIO LOCAL')
O4 - HKUS\S-1-5-19\..\RunOnce: [tscuninstall]

%systemroot%\system32\tscupgrd.exe (User 'SERVICIO LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] D:\WINDOWS\system32\CTFMON.EXE (User

'Servicio de red')
O4 - HKUS\S-1-5-20\..\RunOnce: [tscuninstall]

%systemroot%\system32\tscupgrd.exe (User 'Servicio de red')
O4 - HKUS\S-1-5-21-3394078683-725629867-2348534172-500\..\Run: [CTFMON.EXE]

D:\WINDOWS\system32\ctfmon.exe (User 'Administrator')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] D:\WINDOWS\system32\CTFMON.EXE (User

'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [tscuninstall]

%systemroot%\system32\tscupgrd.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] D:\WINDOWS\system32\CTFMON.EXE (User

'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [tscuninstall]

%systemroot%\system32\tscupgrd.exe (User 'Default user')
O4 - Startup: Herramienta de búsqueda de soportes de Picture Motion

Browser.lnk = D:\Program Files (x86)\Sony\Sony Picture

Utility\VolumeWatcher\SPUVolumeWatcher.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = D:\Program Files

(x86)\Hp\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Inicio rápido de HP Photosmart Premier.lnk = D:\Program

Files (x86)\Hp\Digital Imaging\bin\hpqthb08.exe
O8 - Extra context menu item: E&xportar a Microsoft Excel -

res://D:\PROGRA~2\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} -

D:\Program Files (x86)\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Consola de Sun Java -

{08B0E5C0-4FCB-11CF-AAA5-00401C608501} - D:\Program Files

(x86)\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Enviar a OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49}

- D:\PROGRA~2\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Enviar a OneNote -

{2670000A-7350-4f3c-8081-5663EE0C6C49} -

D:\PROGRA~2\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Referencia - {92780B25-18CC-41C8-B9BE-3C9C571A8263} -

D:\PROGRA~2\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Barra de búsqueda de Encarta -

{B205A35E-1FC4-4CE3-818B-899DBBB3388C} - D:\Program Files (x86)\Common

Files\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} -

D:\PROGRA~2\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration -

{DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - D:\PROGRA~2\SPYBOT~1\SDHelper.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} -

D:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger -

{FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program

Files\Messenger\msmsgs.exe
O15 - ESC Trusted Zone: http://runonce.msn.com
O16 - DPF: {49232000-16E4-426C-A231-62846947304B} (SysData Class) -

http://ipgweb.cce.hp.com/rdqlar/downloads/sysinfo.cab
O16 - DPF: {54BE6B6F-3056-470B-97E1-BB92E051B6C4} (DeviceEnum Class) -

http://h30155.www3.hp.com/ediags/dd/install/HPDriverDiagnosticsxp2k.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) -

http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_

site.cab?1188602274359
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) -

http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O16 - DPF: {E8F628B5-259A-4734-97EE-BA914D7BE941} (Driver Agent ActiveX

Control) - http://www.driveragent.com/files/driveragent.cab
O17 -

HKLM\System\CCS\Services\Tcpip\..\{C0E4B9AF-75CB-46CC-958D-323899327D8E}:

NameServer = 200.51.212.7,200.51.211.7
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} -

D:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll
O20 - Winlogon Notify: !SASWinLogon - D:\Program Files

(x86)\SUPERAntiSpyware\SASWINLO.dll
O23 - Service: Logical Disk Manager Administrative Service (dmadmin) -

Unknown owner - D:\WINDOWS\System32\dmadmin.exe (file missing)
O23 - Service: Event Log (Eventlog) - Unknown owner -

D:\WINDOWS\system32\services.exe (file missing)
O23 - Service: HTTP SSL (HTTPFilter) - Unknown owner -

D:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision

Corporation - D:\Program Files (x86)\Common

Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: IMAPI CD-Burning COM Service (ImapiService) - Unknown owner -

D:\WINDOWS\system32\imapi.exe (file missing)
O23 - Service: Process Monitor (LVPrcS64) - Logitech Inc. - d:\program

files\common files\logitech\lvmvfm\LVPrcSrv.exe
O23 - Service: LVSrvLauncher - Logitech Inc. - D:\Program Files\Common

Files\Logitech\SrvLnch\SrvLnch.exe
O23 - Service: Coordinador de transacciones distribuidas de Microsoft

(MSDTC) - Unknown owner - D:\WINDOWS\system32\msdtc.exe (file missing)
O23 - Service: NBService - Nero AG - D:\Program Files (x86)\Nero\Nero 7\Nero

BackItUp\NBService.exe
O23 - Service: Net Logon (Netlogon) - Unknown owner -

D:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: NMIndexingService - Nero AG - D:\Program Files (x86)\Common

Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: NT LM Security Support Provider (NtLmSsp) - Unknown owner -

D:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (NVSvc) - Unknown owner -

D:\WINDOWS\system32\nvsvc64.exe (file missing)
O23 - Service: Panda Software Controller - Panda Software International -

D:\Program Files (x86)\Panda Security\Panda Internet Security

2008\PsCtrls.exe
O23 - Service: Panda Function Service (PAVFNSVR) - Panda Software

International - D:\Program Files (x86)\Panda Security\Panda Internet

Security 2008\PavFnSvr.exe
O23 - Service: Panda Process Protection Service (PavPrSrv) - Panda Software

- D:\Program Files (x86)\Common Files\Panda Software\PavShld\pavprsrv.exe
O23 - Service: Panda anti-virus service (PAVSRV) - Panda Software

International - D:\Program Files (x86)\Panda Security\Panda Internet

Security 2008\pavsrvx86.exe
O23 - Service: Plug and Play (PlugPlay) - Unknown owner -

D:\WINDOWS\system32\services.exe (file missing)
O23 - Service: Pml Driver HPZ12 - HP - D:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Panda Antispam Engine (pmshellsrv) - Panda Software

International - D:\Program Files (x86)\Panda Security\Panda Internet

Security 2008\AntiSpam\pskmssvc.exe
O23 - Service: IPSEC Services (PolicyAgent) - Unknown owner -

D:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Protected Storage (ProtectedStorage) - Unknown owner -

D:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Panda Host Service (PSHost) - Panda Software International -

d:\program files (x86)\panda security\panda internet security

2008\firewall\PSHOST.EXE
O23 - Service: Panda IManager Service (PSIMSVC) - Panda Software

International - D:\Program Files (x86)\Panda Security\Panda Internet

Security 2008\PsImSvc.exe
O23 - Service: Protexis Licensing V2 (PSI_SVC_2) - Protexis Inc. -

d:\Program Files (x86)\Common Files\Protexis\License

Service\PsiService_2.exe
O23 - Service: Remote Desktop Help Session Manager (RDSessMgr) - Unknown

owner - D:\WINDOWS\system32\sessmgr.exe (file missing)
O23 - Service: Retrospect Launcher (RetroLauncher) - Dantz Development

Corporation - D:\Program Files (x86)\Dantz\Retrospect\retrorun.exe
O23 - Service: Roxio UPnP Renderer 9 - Sonic Solutions - D:\Program Files

(x86)\Common Files\Sonic Shared\RoxioUPnPRenderer9.exe
O23 - Service: Roxio Upnp Server 9 - Sonic Solutions - D:\Program Files

(x86)\Common Files\Sonic Shared\RoxioUpnpService9.exe
O23 - Service: LiveShare P2P Server 9 (RoxLiveShare9) - Sonic Solutions -

D:\Program Files (x86)\Common Files\Roxio

Shared\9.0\SharedCOM\RoxLiveShare9.exe
O23 - Service: RoxMediaDB9 - Sonic Solutions - D:\Program Files (x86)\Common

Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
O23 - Service: Roxio Hard Drive Watcher 9 (RoxWatch9) - Sonic Solutions -

D:\Program Files (x86)\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe
O23 - Service: Security Accounts Manager (SamSs) - Unknown owner -

D:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: stllssvr - MicroVision Development, Inc. - D:\Program Files

(x86)\Common Files\SureThing Shared\stllssvr.exe
O23 - Service: Panda TPSrv (TPSrv) - Panda Software International -

D:\Program Files (x86)\Panda Security\Panda Internet Security

2008\TPSrvWow.exe
O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - Unknown owner -

D:\WINDOWS\System32\TuneUpDefragService.exe (file missing)
O23 - Service: Virtual Disk Service (vds) - Unknown owner -

D:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: Volume Shadow Copy (VSS) - Unknown owner -

D:\WINDOWS\System32\vssvc.exe (file missing)
O23 - Service: WMI Performance Adapter (WmiApSrv) - Unknown owner -

D:\WINDOWS\system32\wbem\wmiapsrv.exe (file missing)

--
End of file - 16206 bytes


Muchas gracias, Eugirne de Bariloche, Argentina

EUGIRNE

Reputación

sin valorar Mie May 21, 2008 1:30 pm
   
Tu log esta limpio.
El tema de lentitud es por el monton de antivirus residentes y servicios que carga tu maquina en el inicio, pero no es tema de virus.
Vola el Panda que chupa como bestia e instala el Avira y de los demas deja solo el SuperAntiSpyware
Despues corre el CCleaner: Limpiador y Registro hasta que tire limpio y anda a Herramientas, Inicio y deja solo lo imprescindible, lo demas se carga cuando ejecutas el programa no es necesario por ejemplo Adobe en el inicio.

daniel zanella

Reputación

comentario del autor Mie May 21, 2008 5:42 pm
   
por vuestra respuesta, ahora me que tranqui, hice los pasos que me indicaste, respecto al antivirus, no es facil encontrar uno que trabaje con xp 64x, todos corren en XP 32x y Vista sea este en 32 o 64x, lo unico que consegui fue el Panda, aunque se que es bastante pesado, pero a caballo regalado no se le mira los dientes.
Tenia antes el kaspersky, pero problema con la llaves, despues puse el Nod 32, y no agarraba un Virus, despues puse el Norton Segurity y no corria en xp 64x, y este que me indicas no lo conocia. el Panda lo tengo con licencia 1 año real.

Bueno te agradezco toda tu ayuda.

Eugirne de Bariloche - Argentina

EUGIRNE

Reputación

Hacer una pregunta

Reglamento / P+F

Foros

Miembros / Expertos