Ver Mensaje Individual
  post #3 (permalink)  
Antiguo 16/03/06, 18:59:11
serg10 serg10 está offline
Usuario
 
Registrado: mar 2006
Ubicación: madrid
Mensajes: 6
Re: no se si tengo un virus o el ordenador estropeado

Vale ya los he pasado. Sigue funcionando mal
El Vundufix no encontro nada.
El spy-sweeper encontro unas cuantas cookies, que ya habia encontrado y borrado en otra ocasion, luego en el log venian gran cantidad de errores que no tienen muy buena pinta. Echale un vistazo porfa, es un poco largo:

********
8:23 PM: | Start of Session, Thursday, March 16, 2006 |
8:23 PM: Spy Sweeper started
8:23 PM: Sweep initiated using definitions version 634
8:23 PM: Starting Memory Sweep
8:24 PM: Memory Sweep Complete, Elapsed Time: 00:01:07
8:24 PM: Starting Registry Sweep
8:24 PM: Registry Sweep Complete, Elapsed Time:00:00:06
8:24 PM: Starting Cookie Sweep
8:24 PM: Found Spy Cookie: 2o7.net cookie
8:24 PM: administrator@2o7[1].txt (ID = 1957)
8:24 PM: Found Spy Cookie: pointroll cookie
8:24 PM: administrator@ads.pointroll[1].txt (ID = 3148)
8:24 PM: Found Spy Cookie: apmebf cookie
8:24 PM: administrator@apmebf[2].txt (ID = 2229)
8:24 PM: Found Spy Cookie: falkag cookie
8:24 PM: administrator@as-us.falkag[2].txt (ID = 2650)
8:24 PM: Found Spy Cookie: casalemedia cookie
8:24 PM: administrator@casalemedia[2].txt (ID = 2354)
8:24 PM: Found Spy Cookie: clickbank cookie
8:24 PM: administrator@clickbank[2].txt (ID = 2398)
8:24 PM: Found Spy Cookie: kinghost cookie
8:24 PM: administrator@kinghost[2].txt (ID = 2903)
8:24 PM: administrator@microsofteup.112.2o7[1].txt (ID = 1958)
8:24 PM: administrator@msnportal.112.2o7[1].txt (ID = 1958)
8:24 PM: Found Spy Cookie: questionmarket cookie
8:24 PM: administrator@questionmarket[1].txt (ID = 3217)
8:24 PM: administrator@sel.as-us.falkag[1].txt (ID = 2650)
8:24 PM: Found Spy Cookie: statcounter cookie
8:24 PM: administrator@statcounter[1].txt (ID = 3447)
8:24 PM: Found Spy Cookie: reliablestats cookie
8:24 PM: administrator@stats1.reliablestats[2].txt (ID = 3254)
8:24 PM: Found Spy Cookie: tribalfusion cookie
8:24 PM: administrator@tribalfusion[1].txt (ID = 3589)
8:24 PM: Found Spy Cookie: adminder cookie
8:24 PM: administrator@www.adminder[2].txt (ID = 2079)
8:24 PM: Found Spy Cookie: adserver cookie
8:24 PM: administrator@z1.adserver[1].txt (ID = 2142)
8:24 PM: Cookie Sweep Complete, Elapsed Time: 00:00:00
8:24 PM: Starting File Sweep
8:51 PM: Warning: Failed to read file "c:\musica\1973 - dark side of the moon\08 - brain damage.mp3". External exception C0000006
8:56 PM: Warning: Failed to read file "c:\avg71t_375a716.exe". External exception C0000006
8:59 PM: Warning: Failed to read file "c:\documents and settings\sergio\escritorio\avg71t_375a716.exe". External exception C0000006
9:00 PM: Warning: Failed to open file "d:\windows\system32\dllcache\d3d9.dll". The system cannot find the path specified
8:20 PM: Warning: Failed to open file "d:\windows\system32\dllcache\tcpmonui.dll". The system cannot find the path specified
8:21 PM: File Sweep Complete, Elapsed Time: 00:24:28
8:21 PM: Full Sweep has completed. Elapsed time 00:25:39
8:21 PM: Traces Found: 13
9:02 PM: Error: Failed to load SSI driver. The operation completed successfully.
9:02 PM: Warning: Driver not initialized
9:05 PM: Error: Driver not initialized.
9:06 PM: Deleted error log without sending: D:\Documents and Settings\Administrator\Application Data\Webroot\Spy Sweeper\Logs\bugreport.txt
9:07 PM: Processing Startup Alerts
9:07 PM: Allowed Startup entry: AVG7_Run
9:07 PM: Allowed Startup entry: AVG7_CC
10:07 AM: Error: Failed to load SSI driver. The operation completed successfully.
10:07 AM: Warning: Driver not initialized

7:16 PM: Warning: Driver not initialized
7:16 PM: Error: Failed to load SSI driver. The operation completed successfully.
7:18 PM: Error: Driver not initialized.
7:18 PM: Deleted error log without sending: D:\Documents and Settings\Administrator\Application Data\Webroot\Spy Sweeper\Logs\bugreport.txt
10:29 PM: Error: Driver not initialized.
10:29 PM: Error: Failed to load SSI driver. The specified service does not exist as an installed service.
7:20 PM: Error: Driver not initialized.
7:25 PM: Deleted error log without sending: D:\Documents and Settings\Administrator\Application Data\Webroot\Spy Sweeper\Logs\bugreport.txt
7:54 PM: Error: Driver not initialized.
7:54 PM: Error: Driver not initialized.
7:54 PM: | End of Session, Thursday, March 09, 2006 |
********
|
Eso estodo, salvo que hay muchisimos mas errores y los warnings, los he omitido por que sino no cabe el mensaje



Yo creo que tengo el ordenador estropeado

Ahi va el log del hijackthis


Logfile of HijackThis v1.99.1
Scan saved at 10:06:45 PM, on 3/16/2006
Platform: Windows 2003 SP1 (WinNT 5.02.3790)
MSIE: Internet Explorer v6.00 SP1 (6.00.3790.1830)

Running processes:
D:\PROGRA~2\Grisoft\AVG7\avgupsvc.exe
D:\Program Files (x86)\Creative\MediaSource\Detector\CTDetect.exe
D:\Program Files (x86)\Creative\MediaSource\Go\CTCMSGo.exe
D:\Program Files (x86)\Trend Micro\Tmas\Tmas.exe
D:\Program Files (x86)\Java\jre1.5.0_06\bin\jusched.exe
D:\WINDOWS\SysWOW64\CTsvcCDA.EXE
D:\Program Files (x86)\Creative\SBAudigy4\Surround Mixer\CTSysVol.exe
D:\Program Files (x86)\Creative\Shared Files\Module Loader\DLLML.exe
D:\WINDOWS\system32\CTHELPER.EXE
D:\Program Files (x86)\Webroot\Spy Sweeper\SpySweeper.exe
D:\PROGRA~2\Grisoft\AVG7\avgcc.exe
D:\Program Files (x86)\Webroot\Spy Sweeper\WRSSSDK.exe
D:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
D:\Documents and Settings\Administrator\Desktop\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
F2 - REG:system.ini: UserInit=userinit
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - D:\PROGRA~2\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - D:\Program Files (x86)\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - d:\program files (x86)\google\googletoolbar2.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - d:\program files (x86)\google\googletoolbar2.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] "D:\Program Files (x86)\Java\jre1.5.0_06\bin\jusched.exe"
O4 - HKLM\..\Run: [stnospy] "D:\Program Files (x86)\SinEspias\no-spy.exe" /autorun
O4 - HKLM\..\Run: [CTSysVol] "D:\Program Files (x86)\Creative\SBAudigy4\Surround Mixer\CTSysVol.exe" /r
O4 - HKLM\..\Run: [RCSystem] "D:\Program Files (x86)\Creative\Shared Files\Module Loader\DLLML.exe" RCSystem * -Startup
O4 - HKLM\..\Run: [AudioDrvEmulator] "D:\Program Files (x86)\Creative\Shared Files\Module Loader\DLLML.exe" -1 AudioDrvEmulator "D:\Program Files (x86)\Creative\Shared Files\Module Loader\Audio Emulator\AudDrvEm.dll"
O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE
O4 - HKLM\..\Run: [UpdReg] D:\WINDOWS\UpdReg.EXE
O4 - HKLM\..\Run: [SpySweeper] "D:\Program Files (x86)\Webroot\Spy Sweeper\SpySweeper.exe" /startintray
O4 - HKLM\..\Run: [AVG7_CC] D:\PROGRA~2\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [Personal Firewall] "D:\Program Files (x86)\Lavasoft\Personal Firewall\lpfw.exe" /waitservice
O4 - HKCU\..\Run: [Creative Detector] D:\Program Files (x86)\Creative\MediaSource\Detector\CTDetect.exe /R
O4 - HKCU\..\Run: [Creative MediaSource Go] "D:\Program Files (x86)\Creative\MediaSource\Go\CTCMSGo.exe" /SCB
O4 - Global Startup: Microsoft Office.lnk = D:\Program Files (x86)\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: Trend Micro Anti-Spyware.lnk = D:\Program Files (x86)\Trend Micro\Tmas\Tmas.exe
O8 - Extra context menu item: &Google Search - res://d:\program files (x86)\google\GoogleToolbar2.dll/cmsearch.html
O8 - Extra context menu item: &Translate English Word - res://d:\program files (x86)\google\GoogleToolbar2.dll/cmwordtrans.html
O8 - Extra context menu item: Backward Links - res://d:\program files (x86)\google\GoogleToolbar2.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://d:\program files (x86)\google\GoogleToolbar2.dll/cmcache.html
O8 - Extra context menu item: E&xportar a Microsoft Excel - res://D:\PROGRA~2\MICROS~2\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Similar Pages - res://d:\program files (x86)\google\GoogleToolbar2.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page into English - res://d:\program files (x86)\google\GoogleToolbar2.dll/cmtrans.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - D:\Program Files (x86)\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - D:\Program Files (x86)\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O17 - HKLM\System\CCS\Services\Tcpip\..\{396C5A76-D232-44EC-BE26-87EEC23F46FB}: NameServer = 80.58.0.33
O17 - HKLM\System\CCS\Services\Tcpip\..\{AC8F51A8-7858-4887-B487-037C6071C251}: NameServer = 80.58.0.33
O17 - HKLM\System\CS1\Services\Tcpip\..\{396C5A76-D232-44EC-BE26-87EEC23F46FB}: NameServer = 80.58.0.33
O17 - HKLM\System\CS2\Services\Tcpip\..\{396C5A76-D232-44EC-BE26-87EEC23F46FB}: NameServer = 80.58.0.33
O20 - AppInit_DLLs: D:\PROGRA~2\Lavasoft\PERSON~1\wl_hook.dll
O20 - Winlogon Notify: dimsntfy - D:\WINDOWS\SYSTEM32\dimsntfy.dll
O20 - Winlogon Notify: EFS - D:\WINDOWS\SYSTEM32\sclgntfy.dll
O20 - Winlogon Notify: WRNotifier - D:\WINDOWS\SYSTEM32\WRLogonNTF.dll
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - D:\PROGRA~2\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - D:\PROGRA~2\Grisoft\AVG7\avgupsvc.exe
O23 - Service: AVG7 Resident Shield Service (AvgCoreSvc) - GRISOFT, s.r.o. - D:\PROGRA~2\Grisoft\AVG7\avgrssvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - D:\PROGRA~2\Grisoft\AVG7\avgemc.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - D:\WINDOWS\system32\CTsvcCDA.EXE
O23 - Service: Logical Disk Manager Administrative Service (dmadmin) - Unknown owner - D:\WINDOWS\System32\dmadmin.exe (file missing)
O23 - Service: Event Log (Eventlog) - Unknown owner - D:\WINDOWS\system32\services.exe (file missing)
O23 - Service: HTTP SSL (HTTPFilter) - Unknown owner - D:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: IMAPI CD-Burning COM Service (ImapiService) - Unknown owner - D:\WINDOWS\system32\imapi.exe (file missing)
O23 - Service: Lavasoft Personal Firewall Service (LavasoftFirewall) - Agnitum Ltd. - D:\Program Files (x86)\Lavasoft\Personal Firewall\lpfw.exe
O23 - Service: Distributed Transaction Coordinator (MSDTC) - Unknown owner - D:\WINDOWS\system32\msdtc.exe (file missing)
O23 - Service: Net Logon (Netlogon) - Unknown owner - D:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: NT LM Security Support Provider (NtLmSsp) - Unknown owner - D:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Plug and Play (PlugPlay) - Unknown owner - D:\WINDOWS\system32\services.exe (file missing)
O23 - Service: IPSEC Services (PolicyAgent) - Unknown owner - D:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Protected Storage (ProtectedStorage) - Unknown owner - D:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Remote Desktop Help Session Manager (RDSessMgr) - Unknown owner - (no file)
O23 - Service: Security Accounts Manager (SamSs) - Unknown owner - D:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Webroot Spy Sweeper Engine (svcWRSSSDK) - Webroot Software, Inc. - D:\Program Files (x86)\Webroot\Spy Sweeper\WRSSSDK.exe
O23 - Service: Virtual Disk Service (vds) - Unknown owner - D:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: Volume Shadow Copy (VSS) - Unknown owner - D:\WINDOWS\System32\vssvc.exe (file missing)
O23 - Service: WMI Performance Adapter (WmiApSrv) - Unknown owner - D:\WINDOWS\system32\wbem\wmiapsrv.exe (file missing)


Quedo a la espera, muchas gracias!
Responder Con Cita