Tema: Ayudenme Es Urgente!!!: bravesentry 2.0
Ver Mensaje Individual
  post #3 (permalink)  
Antiguo 13/05/08, 21:16:13
vickmar vickmar está offline
Usuario
  
Registrado: may 2008
Ubicación: México
Mensajes: 7
Re: Ayudenme Es Urgente!!!
HOLA! AQUI ESTA EL LOG CON EL MALWAREBYTES, HAY NO ENTIENDO MUCHO DE ESTAS COSAS PERO CREO QUE SI ESTA MUY MUY MAL.
ESPERO QUE ME SIGAS AYUDANDO
MUCHAS GRACIAS


Malwarebytes' Anti-Malware 1.12
Versión de la Base de Datos: 744

Tipo de examen : Examen Completo (C:\|)
Objetos examinados: 102227
Tiempo transcurrido: 1 hour(s), 6 minute(s), 59 second(s)

Procesos en Memoria Infectados: 0
Módulos en Memoria Infectados: 2
Claves del Registro Infectadas: 33
Valores del Registro Infectados: 2
Elementos de Datos del Registro Infectados: 2
Carpetas Infectadas: 0
Ficheros Infectados: 91

Procesos en Memoria Infectados:
(No se han detectado elementos maliciosos)

Módulos en Memoria Infectados:
C:\WINDOWS\system32\xxyabxUl.dll (Trojan.Vundo) -> Unloaded module successfully.
C:\WINDOWS\system32\fccdaxxU.dll (Trojan.Vundo) -> Unloaded module successfully.

Claves del Registro Infectadas:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Explorer\Browser Helper Objects\{34a080b3-4d6e-4e48-8c55-7a6b5047822d} (Trojan.Vundo) -> Delete on reboot.
HKEY_CLASSES_ROOT\CLSID\{34a080b3-4d6e-4e48-8c55-7a6b5047822d} (Trojan.Vundo) -> Delete on reboot.
HKEY_CLASSES_ROOT\CLSID\{147a976f-eee1-4377-8ea7-4716e4cdd239} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{9afb8248-617f-460d-9366-d71cdeda3179} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{a4730ebe-43a6-443e-9776-36915d323ad3} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{2e9937fc-cf2f-4f56-af54-5a6a3dd375cc} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{741de825-a6f0-4497-9aa6-8023cf9b0fff} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{56256a51-b582-467e-b8d4-7786eda79ae0} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{56256a51-b582-467e-b8d4-7786eda79ae0} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\ICF (Trojan.Agent) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\aoprndtws (Malware.Trace) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\Software\Microsoft\affri (Malware.Trace) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\i cf (Rootkit.ADS) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\i cf (Rootkit.ADS) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\WR (Malware.Trace) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\Software\Microsoft\rdfa (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\affri (Malware.Trace) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{240a2128-acd4-4124-87af-527124caac38} (Trojan.Vundo) -> Delete on reboot.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Explorer\Browser Helper Objects\{240a2128-acd4-4124-87af-527124caac38} (Trojan.Vundo) -> Delete on reboot.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\fccdaxxu (Trojan.Vundo) -> Delete on reboot.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\FCOVM (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\RemoveRP (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{eedef161-573c-4cc0-83e5-1f4cd35bb459} (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\pvnsmfor.bgxw (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\pvnsmfor.toolbar.1 (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\ICF (Rootkit.Agent) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\MyWebSearch (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\W MPlayer\Schemes\f3pss (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\FunWebProducts (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Fun Web Products (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\Software\MyWebSearch (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\FocusInteractive (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\Software\Fun Web Products (Adware.MyWebSearch) -> Quarantined and deleted successfully.

Valores del Registro Infectados:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\kr_done1 (Malware.Trace) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Explorer\ShellExecuteHooks\{240a2128-acd4-4124-87af-527124caac38} (Trojan.Vundo) -> Delete on reboot.

Elementos de Datos del Registro Infectados:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Contro l\LSA\Authentication Packages (Trojan.Vundo) -> Data: c:\windows\system32\xxyabxul -> Delete on reboot.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Contro l\Lsa\Authentication Packages (Backdoor.Agent) -> Data: c:\windows\system32\xxyabxul -> Delete on reboot.

Carpetas Infectadas:
(No se han detectado elementos maliciosos)

Ficheros Infectados:
C:\WINDOWS\system32\xxyabxUl.dll (Trojan.Vundo) -> Delete on reboot.
C:\WINDOWS\system32\lUxbayxx.ini (Trojan.Vundo) -> Delete on reboot.
C:\WINDOWS\system32\lUxbayxx.ini2 (Trojan.Vundo) -> Delete on reboot.
C:\Documents and Settings\Propietario\cftmon.exe (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propietario\ftpdll.dll (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propietario\mwcg.exe (Backdoor.Bot) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propietario\Configuración local\Archivos temporales de Internet\Content.IE5\S5MR8XYR\17PHolmes[1].cmt (Trojan.DownLoader) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propietario\Configuración local\Temp\1.dllb (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propietario\Configuración local\Temp\2.dllb (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propietario\Configuración local\Temp\34.exe (Backdoor.Bot) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propietario\Configuración local\Temp\5.dllb (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propietario\Configuración local\Temp\56.exe (Backdoor.Bot) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propietario\Configuración local\Temp\6.dllb (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propietario\Configuración local\Temp\7.dllb (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propietario\Configuración local\Temp\75.exe (Backdoor.Bot) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propietario\Configuración local\Temp\76.exe (Backdoor.Bot) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propietario\Configuración local\Temp\explorer32.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propietario\Configuración local\Temp\gold.exe (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propietario\Configuración local\Temp\ic.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propietario\Configuración local\Temp\istat.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propietario\Configuración local\Temp\loads.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propietario\Configuración local\Temp\rsyncini.exe (Trojan.Shutdowner) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propietario\Configuración local\Temp\ttzfwkgl.exe (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propietario\Configuración local\Temp\{2CE55B0F-3514-4CEB-8092-586B9567D43F}\{98032D6F-3EE6-4646-B68C-40BF012AC89B}\BORL81d3.rra (Trojan.Clicker) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propietario\Datos de programa\printer.exe (Trojan.Fakealert) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propietario\Menú Inicio\Programas\Inicio\findfast.Vexe (Trojan.Fakealert) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3C65CD92-0AF9-4D82-BA7B-E67DD704A9A1}\RP128\A0217082.exe (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3C65CD92-0AF9-4D82-BA7B-E67DD704A9A1}\RP128\A0217084.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3C65CD92-0AF9-4D82-BA7B-E67DD704A9A1}\RP130\A0220607.dll (Adware.MyWeb.FunWeb) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3C65CD92-0AF9-4D82-BA7B-E67DD704A9A1}\RP130\A0220608.dll (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3C65CD92-0AF9-4D82-BA7B-E67DD704A9A1}\RP130\A0220609.scr (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3C65CD92-0AF9-4D82-BA7B-E67DD704A9A1}\RP130\A0220610.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3C65CD92-0AF9-4D82-BA7B-E67DD704A9A1}\RP130\A0220611.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3C65CD92-0AF9-4D82-BA7B-E67DD704A9A1}\RP130\A0220613.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3C65CD92-0AF9-4D82-BA7B-E67DD704A9A1}\RP130\A0220615.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3C65CD92-0AF9-4D82-BA7B-E67DD704A9A1}\RP130\A0220616.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3C65CD92-0AF9-4D82-BA7B-E67DD704A9A1}\RP130\A0220617.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3C65CD92-0AF9-4D82-BA7B-E67DD704A9A1}\RP130\A0220618.SCR (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3C65CD92-0AF9-4D82-BA7B-E67DD704A9A1}\RP130\A0220619.DLL (Adware.MyWeb.FunWeb) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3C65CD92-0AF9-4D82-BA7B-E67DD704A9A1}\RP130\A0220620.EXE (Adware.MyWeb.FunWeb) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3C65CD92-0AF9-4D82-BA7B-E67DD704A9A1}\RP130\A0220621.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3C65CD92-0AF9-4D82-BA7B-E67DD704A9A1}\RP130\A0220623.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3C65CD92-0AF9-4D82-BA7B-E67DD704A9A1}\RP130\A0220625.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3C65CD92-0AF9-4D82-BA7B-E67DD704A9A1}\RP130\A0220626.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3C65CD92-0AF9-4D82-BA7B-E67DD704A9A1}\RP130\A0220627.EXE (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3C65CD92-0AF9-4D82-BA7B-E67DD704A9A1}\RP130\A0220628.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3C65CD92-0AF9-4D82-BA7B-E67DD704A9A1}\RP130\A0220630.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3C65CD92-0AF9-4D82-BA7B-E67DD704A9A1}\RP130\A0220632.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3C65CD92-0AF9-4D82-BA7B-E67DD704A9A1}\RP130\A0220633.EXE (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3C65CD92-0AF9-4D82-BA7B-E67DD704A9A1}\RP130\A0220634.EXE (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3C65CD92-0AF9-4D82-BA7B-E67DD704A9A1}\RP131\A0220651.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3C65CD92-0AF9-4D82-BA7B-E67DD704A9A1}\RP131\A0220652.dll (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3C65CD92-0AF9-4D82-BA7B-E67DD704A9A1}\RP131\A0220653.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3C65CD92-0AF9-4D82-BA7B-E67DD704A9A1}\RP131\A0220655.EXE (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3C65CD92-0AF9-4D82-BA7B-E67DD704A9A1}\RP131\A0220656.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3C65CD92-0AF9-4D82-BA7B-E67DD704A9A1}\RP146\A0248355.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3C65CD92-0AF9-4D82-BA7B-E67DD704A9A1}\RP146\A0249431.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3C65CD92-0AF9-4D82-BA7B-E67DD704A9A1}\RP146\A0250452.exe (Trojan.Fakealert) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3C65CD92-0AF9-4D82-BA7B-E67DD704A9A1}\RP146\A0250453.exe (Trojan.Fakealert) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3C65CD92-0AF9-4D82-BA7B-E67DD704A9A1}\RP146\A0250454.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\WINDOWS\mrofinu27.exe (Trojan.DownLoader) -> Quarantined and deleted successfully.
C:\WINDOWS\vbksrofa.dll (Trojan.FalkeAlert) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\dllgh8jkd1q1.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\dllgh8jkd1q2.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\dllgh8jkd1q5.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\dllgh8jkd1q6.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\dllgh8jkd1q7.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\ftpdll.dll (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\maxpaynowti1.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\pngfcg.exe (Backdoor.Bot) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\vedxg3am1et3.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\vedxga3me2.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\pmhjjj.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\difkghmd.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\enksu.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\ydrvr.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\sysmwqk.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\svchost.exe:exe.exe (Rootkit.ADS) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\fccdaxxU.dll (Trojan.Vundo) -> Delete on reboot.
C:\WINDOWS\system32\dllgh8jkd1q8.exe (Heuristics.Malware) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\vedxg4am1et2.exe (Heuristics.Malware) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\vedxg6ame4.exe (Heuristics.Malware) -> Quarantined and deleted successfully.
C:\WINDOWS\pvnsmfor.dll (Trojan.FakeAlert) -> Quarantined and deleted successfully.
C:\WINDOWS\oadkxrts.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.
C:\WINDOWS\mpfanvqg.dll (Trojan.FakeAlert) -> Quarantined and deleted successfully.
C:\WINDOWS\fvowketqksn.dll (Trojan.FakeAlert) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\kr_done1 (Malware.Trace) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\maxpaynowti.exe (Heuristics.Malware) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\wind32.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\vx.tll (Malware.Trace) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propietario\Datos de programa\Install.dat (Trojan.Agent) -> Quarantined and deleted successfully.
Responder Con Cita