| Re: nuevo aqui solicitando ayuda! agustin, si de hecho realice todos los pasos asi como los marcaste...el flashdisinfecter, lo corri antes de insertar el usb (f), y despues de insertarlo...
voy a intentar los nuevos pasos que me dices y te pego los reportes aqui en cuanto acabe...gracias de nueva cuenta!!
ok listo:
le/Folder C:\WINDOWS\system32\wnms.exe not found.
File/Folder C:\WINDOWS\system32\wnpms.exe not found.
File/Folder F:\NUEVOS DOS MIL CUATRO REVISION 1\acad.lsp not found.
F:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013 moved successfully.
File/Folder C:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013 not found.
< C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\OTAZ4HI1\skp20_3[1].jpg >
File/Folder C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\OTAZ4HI1\skp20_3[1].jpg not found.
File/Folder F:\FOTOS TOSCANA PERMISOS\acad.lsp not found.
OTMoveIt2 by OldTimer - Version 1.0.4.1 log created on 05152008_231445
Malwarebytes' Anti-Malware 1.12
Versión de la Base de Datos: 755
Tipo de examen : Examen Completo (C:\|D:\|E:\|F:\|)
Objetos examinados: 111902
Tiempo transcurrido: 38 minute(s), 9 second(s)
Procesos en Memoria Infectados: 0
Módulos en Memoria Infectados: 0
Claves del Registro Infectadas: 0
Valores del Registro Infectados: 0
Elementos de Datos del Registro Infectados: 0
Carpetas Infectadas: 0
Ficheros Infectados: 0
Procesos en Memoria Infectados:
(No se han detectado elementos maliciosos)
Módulos en Memoria Infectados:
(No se han detectado elementos maliciosos)
Claves del Registro Infectadas:
(No se han detectado elementos maliciosos)
Valores del Registro Infectados:
(No se han detectado elementos maliciosos)
Elementos de Datos del Registro Infectados:
(No se han detectado elementos maliciosos)
Carpetas Infectadas:
(No se han detectado elementos maliciosos)
Ficheros Infectados:
(No se han detectado elementos maliciosos)
taskmanp.exe;C:\;Trojan.Packed.181;Eliminado.;
taskmanr.exe;C:\;Trojan.Packed.181;Eliminado.;
skp20_3[1].jpg;C:\_OTMoveIt\MovedFiles\05152008_225310\Docum ents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.I;Trojan.Packed.181;Eliminado.;
acad.lsp;C:\_OTMoveIt\MovedFiles\05152008_225310\F OTOS TOSCANA PERMISOS;ACAD.Bursted;Eliminado.;
acad.lsp;C:\_OTMoveIt\MovedFiles\05152008_225310\N UEVOS DOS MIL CUATRO REVISION 1;ACAD.Bursted;Eliminado.;
sys32.exe;C:\_OTMoveIt\MovedFiles\05152008_225310\ RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013;Trojan.Inject.3265;Eliminado.;
wnms.exe;C:\_OTMoveIt\MovedFiles\05152008_225310\W INDOWS\system32;Trojan.Packed.181;Eliminado.;
wnpms.exe;C:\_OTMoveIt\MovedFiles\05152008_225310\ WINDOWS\system32;Trojan.Packed.181;Eliminado.;
-------------------------------------------------------------------------------
KASPERSKY ONLINE SCANNER REPORT
Friday, May 16, 2008 10:02:52 AM
Operating System: Microsoft Windows XP Home Edition, Service Pack 3 (Build 2600)
Kaspersky Online Scanner version: 5.0.98.0
Kaspersky Anti-Virus database last update: 16/05/2008
Kaspersky Anti-Virus database records: 777256
-------------------------------------------------------------------------------
Scan Settings:
Scan using the following antivirus database: extended
Scan Archives: true
Scan Mail Bases: true
Scan Target - My Computer:
C:\
D:\
E:\
F:\
Scan Statistics:
Total number of scanned objects: 77877
Number of viruses found: 1
Number of infected objects: 2
Number of suspicious objects: 0
Duration of the scan process: 00:59:10
Infected Object Name / Virus Name / Last Action
C:\autorun.inf\lpt3.This folder was created by Flash_Disinfector Object is locked skipped
C:\Documents and Settings\Arq. Santos Lizcano\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\Arq. Santos Lizcano\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\Arq. Santos Lizcano\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\Arq. Santos Lizcano\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\Arq. Santos Lizcano\Local Settings\History\History.IE5\MSHist012008051620080 517\index.dat Object is locked skipped
C:\Documents and Settings\Arq. Santos Lizcano\Local Settings\Temp\~DFA6D5.tmp Object is locked skipped
C:\Documents and Settings\Arq. Santos Lizcano\Local Settings\Temp\~DFA70F.tmp Object is locked skipped
C:\Documents and Settings\Arq. Santos Lizcano\Local Settings\Temporary Internet Files\AntiPhishing\B3BB5BBA-E7D5-40AB-A041-A5B1C0B26C8F.dat Object is locked skipped
C:\Documents and Settings\Arq. Santos Lizcano\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\Arq. Santos Lizcano\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\Arq. Santos Lizcano\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked skipped
C:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped
C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped
C:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\default Object is locked skipped
C:\WINDOWS\system32\config\default.LOG Object is locked skipped
C:\WINDOWS\system32\config\Internet.evt Object is locked skipped
C:\WINDOWS\system32\config\ODiag.evt Object is locked skipped
C:\WINDOWS\system32\config\OSession.evt Object is locked skipped
C:\WINDOWS\system32\config\SAM Object is locked skipped
C:\WINDOWS\system32\config\SAM.LOG Object is locked skipped
C:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\SECURITY Object is locked skipped
C:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped
C:\WINDOWS\system32\config\software Object is locked skipped
C:\WINDOWS\system32\config\software.LOG Object is locked skipped
C:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\system Object is locked skipped
C:\WINDOWS\system32\config\system.LOG Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MA P Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MA P Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DAT A Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP Object is locked skipped
C:\_OTMoveIt\MovedFiles\05152008_225310\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\iuhx32.exe Infected: Worm.Win32.AutoRun.dha skipped
C:\_OTMoveIt\MovedFiles\05152008_231445\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\iuhx32.exe Infected: Worm.Win32.AutoRun.dha skipped
F:\autorun.inf\lpt3.This folder was created by Flash_Disinfector Object is locked skipped
Scan process completed.
Última edición por misterghost fecha: 16/05/08 a las 12:05:35.
|