Ver Mensaje Individual
Antiguo 16/05/08, 01:06:19
misterghost misterghost está offline
Usuario
 
Registrado: may 2008
Ubicación: mexico
Mensajes: 13
Re: nuevo aqui solicitando ayuda!

agustin, si de hecho realice todos los pasos asi como los marcaste...el flashdisinfecter, lo corri antes de insertar el usb (f), y despues de insertarlo...

voy a intentar los nuevos pasos que me dices y te pego los reportes aqui en cuanto acabe...gracias de nueva cuenta!!

ok listo:
le/Folder C:\WINDOWS\system32\wnms.exe not found.
File/Folder C:\WINDOWS\system32\wnpms.exe not found.
File/Folder F:\NUEVOS DOS MIL CUATRO REVISION 1\acad.lsp not found.
F:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013 moved successfully.
File/Folder C:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013 not found.
< C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\OTAZ4HI1\skp20_3[1].jpg >
File/Folder C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\OTAZ4HI1\skp20_3[1].jpg not found.
File/Folder F:\FOTOS TOSCANA PERMISOS\acad.lsp not found.

OTMoveIt2 by OldTimer - Version 1.0.4.1 log created on 05152008_231445


Malwarebytes' Anti-Malware 1.12
Versión de la Base de Datos: 755

Tipo de examen : Examen Completo (C:\|D:\|E:\|F:\|)
Objetos examinados: 111902
Tiempo transcurrido: 38 minute(s), 9 second(s)

Procesos en Memoria Infectados: 0
Módulos en Memoria Infectados: 0
Claves del Registro Infectadas: 0
Valores del Registro Infectados: 0
Elementos de Datos del Registro Infectados: 0
Carpetas Infectadas: 0
Ficheros Infectados: 0

Procesos en Memoria Infectados:
(No se han detectado elementos maliciosos)

Módulos en Memoria Infectados:
(No se han detectado elementos maliciosos)

Claves del Registro Infectadas:
(No se han detectado elementos maliciosos)

Valores del Registro Infectados:
(No se han detectado elementos maliciosos)

Elementos de Datos del Registro Infectados:
(No se han detectado elementos maliciosos)

Carpetas Infectadas:
(No se han detectado elementos maliciosos)

Ficheros Infectados:
(No se han detectado elementos maliciosos)



taskmanp.exe;C:\;Trojan.Packed.181;Eliminado.;
taskmanr.exe;C:\;Trojan.Packed.181;Eliminado.;
skp20_3[1].jpg;C:\_OTMoveIt\MovedFiles\05152008_225310\Docum ents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.I;Trojan.Packed.181;Eliminado.;
acad.lsp;C:\_OTMoveIt\MovedFiles\05152008_225310\F OTOS TOSCANA PERMISOS;ACAD.Bursted;Eliminado.;
acad.lsp;C:\_OTMoveIt\MovedFiles\05152008_225310\N UEVOS DOS MIL CUATRO REVISION 1;ACAD.Bursted;Eliminado.;
sys32.exe;C:\_OTMoveIt\MovedFiles\05152008_225310\ RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013;Trojan.Inject.3265;Eliminado.;
wnms.exe;C:\_OTMoveIt\MovedFiles\05152008_225310\W INDOWS\system32;Trojan.Packed.181;Eliminado.;
wnpms.exe;C:\_OTMoveIt\MovedFiles\05152008_225310\ WINDOWS\system32;Trojan.Packed.181;Eliminado.;




-------------------------------------------------------------------------------
KASPERSKY ONLINE SCANNER REPORT
Friday, May 16, 2008 10:02:52 AM
Operating System: Microsoft Windows XP Home Edition, Service Pack 3 (Build 2600)
Kaspersky Online Scanner version: 5.0.98.0
Kaspersky Anti-Virus database last update: 16/05/2008
Kaspersky Anti-Virus database records: 777256
-------------------------------------------------------------------------------

Scan Settings:
Scan using the following antivirus database: extended
Scan Archives: true
Scan Mail Bases: true

Scan Target - My Computer:
C:\
D:\
E:\
F:\

Scan Statistics:
Total number of scanned objects: 77877
Number of viruses found: 1
Number of infected objects: 2
Number of suspicious objects: 0
Duration of the scan process: 00:59:10

Infected Object Name / Virus Name / Last Action
C:\autorun.inf\lpt3.This folder was created by Flash_Disinfector Object is locked skipped
C:\Documents and Settings\Arq. Santos Lizcano\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\Arq. Santos Lizcano\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\Arq. Santos Lizcano\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\Arq. Santos Lizcano\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\Arq. Santos Lizcano\Local Settings\History\History.IE5\MSHist012008051620080 517\index.dat Object is locked skipped
C:\Documents and Settings\Arq. Santos Lizcano\Local Settings\Temp\~DFA6D5.tmp Object is locked skipped
C:\Documents and Settings\Arq. Santos Lizcano\Local Settings\Temp\~DFA70F.tmp Object is locked skipped
C:\Documents and Settings\Arq. Santos Lizcano\Local Settings\Temporary Internet Files\AntiPhishing\B3BB5BBA-E7D5-40AB-A041-A5B1C0B26C8F.dat Object is locked skipped
C:\Documents and Settings\Arq. Santos Lizcano\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\Arq. Santos Lizcano\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\Arq. Santos Lizcano\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked skipped
C:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped
C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped
C:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\default Object is locked skipped
C:\WINDOWS\system32\config\default.LOG Object is locked skipped
C:\WINDOWS\system32\config\Internet.evt Object is locked skipped
C:\WINDOWS\system32\config\ODiag.evt Object is locked skipped
C:\WINDOWS\system32\config\OSession.evt Object is locked skipped
C:\WINDOWS\system32\config\SAM Object is locked skipped
C:\WINDOWS\system32\config\SAM.LOG Object is locked skipped
C:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\SECURITY Object is locked skipped
C:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped
C:\WINDOWS\system32\config\software Object is locked skipped
C:\WINDOWS\system32\config\software.LOG Object is locked skipped
C:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\system Object is locked skipped
C:\WINDOWS\system32\config\system.LOG Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MA P Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MA P Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DAT A Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP Object is locked skipped
C:\_OTMoveIt\MovedFiles\05152008_225310\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\iuhx32.exe Infected: Worm.Win32.AutoRun.dha skipped
C:\_OTMoveIt\MovedFiles\05152008_231445\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\iuhx32.exe Infected: Worm.Win32.AutoRun.dha skipped
F:\autorun.inf\lpt3.This folder was created by Flash_Disinfector Object is locked skipped

Scan process completed.

Última edición por misterghost fecha: 16/05/08 a las 12:05:35.
Responder Con Cita