| Re: ayuda con HijackThis -hola piedra,perdona mi retraso,bueno tal y como me pediste te dejo los dos logs,ahora me marca que tengo un virus menos,pues elimine el archivo (CHMRedir.chm.)y sus derivados,tambien lo que me pidio patomaS,pero no todo pues hay cosas que no sabia....
-este es el analisis de panda...
Sistema Archivos Mensajes
Analizados Si 44993 22
Infectados - 0 0
Sospechosos - 0 0
Desinfectados - 0 0
-este es el virus log information de MWAV
virus log informacion
-file.C:\windows\windows\escritorio\descargas\nueva carpeta\outpostinstall.exe tagged as not-a-virus:tool.win.32.reboot.no action taken
-file.C:\wnidows\escritorio\programas\outpost\outpo stinstall.exe lagged as not-a-virus:tool.win32 reboot.no action taken.
-object"ALTNET spyware\adware"foun in file system action taken:no action taken
-object"search spyware\adware"foun in file system\action taken:no action taken
-Entry"HKLM\software\microsoft\windows\CurrentVersi on\ModuleUsage"refers to invalid object"C:\windows\downloaded Program Files\installer ocx".action taken:no action taken
-Entry"HKLM\Software\Microsoft\Windows\CurrentVersi on\SharedDlls"refers to invalid object"D:\OFFICE97\Office\Actors\logo.act".Action Taken: No Action Taken.
-Entry"HKLM\Software\Microsoft\Windows\CurrentVersi on\SharedDlls"refers to invalid object"D.\OFFICE97\Office\Actors\scribble.act".Act ion Taken: NoAction Taken.
-Entry\HKLM\Software\Microsoft\Windows\CurrentVersi on\SharedDlls"refers to invalid object"D.\OFFICE97\Office\Actors\dot.act".Action Taken: No Action Taken.
-Entry\HKLM\Software\Microsoft\Windows\CurrentVersi on\SharedDlls"refers to invalid object"D.\OFFICE97\Office\Actors\mnature.act".Acti on Taken: NoAction Taken.
-Entry\HKLM\Software\Microsoft\Windows\CurrentVersi on\SharedDlls"refers to invalid object"D.\OFFICE97\Office\Actors\hoberbot.act".Act ion Taken:
NoAction Taken.
-Entry\HKLM\Software\Microsoft\Windows\CurrentVersi on\SharedDlls"refers to invalid object"D.\OFFICE97\Office\Actors\will.act".Action Taken:
NoAction Taken.
-Entry\HKLM\Software\Microsoft\Windows\CurrentVersi on\SharedDlls"refers to invalid object"D.\OFFICE97\Office\Actors\powerpup.act".Act ion Taken:
NoAction Taken.
-Entry\HKLM\Software\Microsoft\Windows\CurrentVersi on\SharedDlls"refers to invalid object"D.\OFFICE97\Office\Actors\genius.act".Actio n Taken:
NoAction Taken.
-Entry\HKCR\CLSID\(BO693766-5278-4ec6-B9E1-3CE4O56OEF5A)"refers to invalid object"CaPlgin.ax".Action Taken:NoAction Taken.
-File C:\WINDOWS\SYSTEM\hmod32.exe infected by "Trojan-Downloader.Win32.Agent.io"Virus!Action Taken:NoAction Taken.
-estos son los virus que tengo y elimine....
---Thu Jul 07 16:57:33 2005 => Offending value found in HKLM\Software\microsoft\downloadmanager !!!
---Thu Jul 07 16:57:33 2005 => Object "AltNet Spyware/Adware" found in File System! Action Taken: No Action Taken.
--Thu Jul 07 16:57:42 2005 => System found infected with iSearch Spyware/Adware (patch.exe)! Action taken: No Action Taken.
--Thu Jul 07 16:57:42 2005 => Object "iSearch Spyware/Adware" found in File System! Action Taken: No Action Taken.
--Thu Jul 07 16:59:51 2005 => File C:\WINDOWS\SYSTEM\hmod32.exe infected by "Trojan-Downloader.Win32.Agent.io" Virus! Action Taken: No Action Taken.
-ELIMINADO-Thu Jul 07 17:00:04 2005 => File C:\WINDOWS\SYSTEM\mxbkup.exe infected by "Trojan.Win32.SpoofDNS.a" Virus! Action Taken: No Action Taken.-----ELIMINADO
-bueno un saludo y no me canso de daros las gracias por vuestras ayudas y atenciones,1000 gracias de nuevo.....en espera de vuestras resoluciones...
saludos cordiales.....charly7674 |