Ver Mensaje Individual
Antiguo 19/05/08, 01:41:20
Avatar de Gonba
Gonba Gonba está offline
Usuario
 
Registrado: feb 2008
Ubicación: Mexico
Mensajes: 29
Re: No se como eliminar esto

Analise la pc con el kaspersky otra vez y me aparece esto:
KASPERSKY ONLINE SCANNER INFORME
domingo, 18 de mayo de 2008 22:21:29
Sistema operativo: Microsoft Windows XP Professional, Service Pack 2 (Build 2600)
Kaspersky Online Scanner versión: 5.0.98.0
Ultima actualización: 18/05/2008
Registros en la base antivirus: 783970
-------------------------------------------------------------------------------

Configuración del análisis:
Analizar usando las siguientes bases: estendidas
Analizar archivos: verdadero
Analizar bases de correo: verdadero

Objetivo a analizar - Mi PC:
C:\
D:\
E:\
F:\
I:\
J:\
K:\
L:\

Estadísticas:
Número de objeros analizados: 179435
Virus encontrados: 1
Objetos infectados: 4
Objetos sospechosos: 0
Duración del análisis: 02:32:10

Bombre del objeto infectado / Nombre del virus / Última acción
C:\88bf4251db7a3c8a55\%temp%dd_msxml_retMSI.txt Object is locked saltado
C:\adde4882ee06308872726c1c3e3a\update\update.exe Object is locked saltado
C:\adde4882ee06308872726c1c3e3a\update\updspapi.dl l Object is locked saltado
C:\adde4882ee06308872726c1c3e3a\update\wpdinstallu til.dll Object is locked saltado
C:\b40b9fec3e279d28eb9f2626f1\update\update.exe Object is locked saltado
C:\b40b9fec3e279d28eb9f2626f1\update\updspapi.dll Object is locked saltado
C:\b40b9fec3e279d28eb9f2626f1\update\wudfcustom.dl l Object is locked saltado
C:\bb3f90aa3e6b829e652c48e1\update\update.exe Object is locked saltado
C:\bb3f90aa3e6b829e652c48e1\update\updspapi.dll Object is locked saltado
C:\Documents and Settings\All Users\Application Data\Microsoft\eHome\logs\ehRecvr.log Object is locked saltado
C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat Object is locked saltado
C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat Object is locked saltado
C:\Documents and Settings\All Users\Documents\Recorded TV\TempRec\TempSBE\MSDVRMM_2752881254_4521984_4134 6 Object is locked saltado
C:\Documents and Settings\All Users\Documents\Recorded TV\TempRec\TempSBE\SBE1.tmp Object is locked saltado
C:\Documents and Settings\All Users\Documents\Recorded TV\TempRec\{2867D15A-7684-4065-BDF1-4345341FBAF0}.TmpSBE Object is locked saltado
C:\Documents and Settings\All Users\DRM\drmstore.hds Object is locked saltado
C:\Documents and Settings\Flor\NTUSER.DAT Object is locked saltado
C:\Documents and Settings\Flor\ntuser.dat.LOG Object is locked saltado
C:\Documents and Settings\Guest\NTUSER.DAT Object is locked saltado
C:\Documents and Settings\Guest\ntuser.dat.LOG Object is locked saltado
C:\Documents and Settings\HP_Administrator\Cookies\index.dat Object is locked saltado
C:\Documents and Settings\HP_Administrator\Local Settings\Application Data\ApplicationHistory\DiscStreamHub.exe.fddeaf63 .ini.inuse Object is locked saltado
C:\Documents and Settings\HP_Administrator\Local Settings\Application Data\ApplicationHistory\DiscUpdateMgr.exe.ca552b9d .ini.inuse Object is locked saltado
C:\Documents and Settings\HP_Administrator\Local Settings\Application Data\Microsoft\Feeds Cache\index.dat Object is locked saltado
C:\Documents and Settings\HP_Administrator\Local Settings\Application Data\Microsoft\Messenger\ale_gonba@hotmail.com\Sha ringMetadata\Logs\Dfsr00005.log Object is locked saltado
C:\Documents and Settings\HP_Administrator\Local Settings\Application Data\Microsoft\Messenger\ale_gonba@hotmail.com\Sha ringMetadata\pending.dat Object is locked saltado
C:\Documents and Settings\HP_Administrator\Local Settings\Application Data\Microsoft\Messenger\ale_gonba@hotmail.com\Sha ringMetadata\Working\database_FCA4_15E4_A415_A266\ dfsr.db Object is locked saltado
C:\Documents and Settings\HP_Administrator\Local Settings\Application Data\Microsoft\Messenger\ale_gonba@hotmail.com\Sha ringMetadata\Working\database_FCA4_15E4_A415_A266\ fsr.log Object is locked saltado
C:\Documents and Settings\HP_Administrator\Local Settings\Application Data\Microsoft\Messenger\ale_gonba@hotmail.com\Sha ringMetadata\Working\database_FCA4_15E4_A415_A266\ fsrtmp.log Object is locked saltado
C:\Documents and Settings\HP_Administrator\Local Settings\Application Data\Microsoft\Messenger\ale_gonba@hotmail.com\Sha ringMetadata\Working\database_FCA4_15E4_A415_A266\ tmp.edb Object is locked saltado
C:\Documents and Settings\HP_Administrator\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked saltado
C:\Documents and Settings\HP_Administrator\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked saltado
C:\Documents and Settings\HP_Administrator\Local Settings\Application Data\Microsoft\Windows Live Contacts\ale_gonba@hotmail.com\real\members.stg Object is locked saltado
C:\Documents and Settings\HP_Administrator\Local Settings\Application Data\Microsoft\Windows Live Contacts\ale_gonba@hotmail.com\shadow\members.stg Object is locked saltado
C:\Documents and Settings\HP_Administrator\Local Settings\History\History.IE5\index.dat Object is locked saltado
C:\Documents and Settings\HP_Administrator\Local Settings\History\History.IE5\MSHist012008051820080 519\index.dat Object is locked saltado
C:\Documents and Settings\HP_Administrator\Local Settings\Temp\hpodvd09.log Object is locked saltado
C:\Documents and Settings\HP_Administrator\Local Settings\Temp\_hphtra07.log Object is locked saltado
C:\Documents and Settings\HP_Administrator\Local Settings\Temp\~DF5B02.tmp Object is locked saltado
C:\Documents and Settings\HP_Administrator\Local Settings\Temp\~DF5BF9.tmp Object is locked saltado
C:\Documents and Settings\HP_Administrator\Local Settings\Temp\~DFB0D5.tmp Object is locked saltado
C:\Documents and Settings\HP_Administrator\Local Settings\Temp\~DFDAA7.tmp Object is locked saltado
C:\Documents and Settings\HP_Administrator\Local Settings\Temp\~DFDC39.tmp Object is locked saltado
C:\Documents and Settings\HP_Administrator\Local Settings\Temporary Internet Files\AntiPhishing\B3BB5BBA-E7D5-40AB-A041-A5B1C0B26C8F.dat Object is locked saltado
C:\Documents and Settings\HP_Administrator\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked saltado
C:\Documents and Settings\HP_Administrator\NTUSER.DAT Object is locked saltado
C:\Documents and Settings\HP_Administrator\ntuser.dat.LOG Object is locked saltado
C:\Documents and Settings\JUAN JOSE.OFICINA\NTUSER.DAT Object is locked saltado
C:\Documents and Settings\JUAN JOSE.OFICINA\ntuser.dat.LOG Object is locked saltado
C:\Documents and Settings\Juan Jose.TERAN\NTUSER.DAT Object is locked saltado
C:\Documents and Settings\Juan Jose.TERAN\ntuser.dat.LOG Object is locked saltado
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked saltado
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked saltado
C:\Documents and Settings\LocalService\Local Settings\Temp\Cookies\index.dat Object is locked saltado
C:\Documents and Settings\LocalService\Local Settings\Temp\History\History.IE5\index.dat Object is locked saltado
C:\Documents and Settings\LocalService\Local Settings\Temp\Temporary Internet Files\Content.IE5\index.dat Object is locked saltado
C:\Documents and Settings\LocalService\NTUSER.DAT Object is locked saltado
C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked saltado
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked saltado
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked saltado
C:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked saltado
C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked saltado
C:\Program Files\Updates from HP\9972322\Users\Default\Data\chandir.dat Object is locked saltado
C:\Program Files\Updates from HP\9972322\Users\Default\Data\chandir.idx Object is locked saltado
C:\Program Files\Updates from HP\9972322\Users\Default\Data\chn.dat Object is locked saltado
C:\Program Files\Updates from HP\9972322\Users\Default\Data\chn.idx Object is locked saltado
C:\Program Files\Updates from HP\9972322\Users\Default\Data\D0000000.FCS Object is locked saltado
C:\Program Files\Updates from HP\9972322\Users\Default\Data\inuse.txt Object is locked saltado
C:\Program Files\Updates from HP\9972322\Users\Default\Data\L0000010.FCS Object is locked saltado
C:\Program Files\Updates from HP\9972322\Users\Default\Data\main.log Object is locked saltado
C:\Program Files\Updates from HP\9972322\Users\Default\Data\prs.dat Object is locked saltado
C:\Program Files\Updates from HP\9972322\Users\Default\Data\prs.idx Object is locked saltado
C:\Program Files\Updates from HP\9972322\Users\Default\Data\prs_die.dat Object is locked saltado
C:\Program Files\Updates from HP\9972322\Users\Default\Data\prs_die.idx Object is locked saltado
C:\Program Files\Updates from HP\9972322\Users\Default\Data\prs_dnd.dat Object is locked saltado
C:\Program Files\Updates from HP\9972322\Users\Default\Data\prs_dnd.idx Object is locked saltado
C:\Program Files\Updates from HP\9972322\Users\Default\Data\prs_ext.dat Object is locked saltado
C:\Program Files\Updates from HP\9972322\Users\Default\Data\prs_ext.idx Object is locked saltado
C:\Program Files\Updates from HP\9972322\Users\Default\Data\prs_rcv.dat Object is locked saltado
C:\Program Files\Updates from HP\9972322\Users\Default\Data\prs_rcv.idx Object is locked saltado
C:\Program Files\Updates from HP\9972322\Users\Default\Data\storydb.dat Object is locked saltado
C:\Program Files\Updates from HP\9972322\Users\Default\Data\storydb.idx Object is locked saltado
C:\System Volume Information\MountPointManagerRemoteDatabase Object is locked saltado
C:\System Volume Information\_restore{106CF321-99A3-4E3A-9103-1BD027606A99}\RP3\A0001045.exe Infectados: not-a-virus:Monitor.Win32.PKRPoker.a saltado
C:\System Volume Information\_restore{106CF321-99A3-4E3A-9103-1BD027606A99}\RP3\A0001046.exe/stream/data0007 Infectados: not-a-virus:Monitor.Win32.PKRPoker.a saltado
C:\System Volume Information\_restore{106CF321-99A3-4E3A-9103-1BD027606A99}\RP3\A0001046.exe/stream Infectados: not-a-virus:Monitor.Win32.PKRPoker.a saltado
C:\System Volume Information\_restore{106CF321-99A3-4E3A-9103-1BD027606A99}\RP3\A0001046.exe NSIS: infectado - 2 saltado

C:\System Volume Information\_restore{106CF321-99A3-4E3A-9103-1BD027606A99}\RP4\change.log Object is locked saltado
C:\WINDOWS\Debug\PASSWD.LOG Object is locked saltado
C:\WINDOWS\Registration\{02D4B3F1-FD88-11D1-960D-00805FC79235}.{B3D02905-1770-404B-B28A-5FB1F224E7BF}.crmlog Object is locked saltado
C:\WINDOWS\SchedLgU.Txt Object is locked saltado
C:\WINDOWS\SoftwareDistribution\EventCache\{9FEBC3 36-5043-471B-BBB5-8FB336E1E8E1}.bin Object is locked saltado
C:\WINDOWS\SoftwareDistribution\ReportingEvents.lo g Object is locked saltado
C:\WINDOWS\Sti_Trace.log Object is locked saltado
C:\WINDOWS\system32\CatRoot2\edb.log Object is locked saltado
C:\WINDOWS\system32\CatRoot2\tmp.edb Object is locked saltado
C:\WINDOWS\system32\config\Antivirus.Evt Object is locked saltado
C:\WINDOWS\system32\config\AppEvent.Evt Object is locked saltado
C:\WINDOWS\system32\config\default Object is locked saltado
C:\WINDOWS\system32\config\default.LOG Object is locked saltado
C:\WINDOWS\system32\config\IntelDH.evt Object is locked saltado
C:\WINDOWS\system32\config\Internet.evt Object is locked saltado
C:\WINDOWS\system32\config\Media Ce.evt Object is locked saltado
C:\WINDOWS\system32\config\SAM Object is locked saltado
C:\WINDOWS\system32\config\SAM.LOG Object is locked saltado
C:\WINDOWS\system32\config\SecEvent.Evt Object is locked saltado
C:\WINDOWS\system32\config\SECURITY Object is locked saltado
C:\WINDOWS\system32\config\SECURITY.LOG Object is locked saltado
C:\WINDOWS\system32\config\software Object is locked saltado
C:\WINDOWS\system32\config\software.LOG Object is locked saltado
C:\WINDOWS\system32\config\SysEvent.Evt Object is locked saltado
C:\WINDOWS\system32\config\system Object is locked saltado
C:\WINDOWS\system32\config\system.LOG Object is locked saltado
C:\WINDOWS\system32\h323log.txt Object is locked saltado
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked saltado
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP Object is locked saltado
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER Object is locked saltado
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MA P Object is locked saltado
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MA P Object is locked saltado
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DAT A Object is locked saltado
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP Object is locked saltado
C:\WINDOWS\Temp\Perflib_Perfdata_bd4.dat Object is locked saltado
C:\WINDOWS\wiadebug.log Object is locked saltado
C:\WINDOWS\wiaservc.log Object is locked saltado
C:\WINDOWS\WindowsUpdate.log Object is locked saltado
D:\System Volume Information\_restore{106CF321-99A3-4E3A-9103-1BD027606A99}\RP4\change.log Object is locked saltado

Análisis completado.

ya los elimine con FileASSASSIN y espero y ese sea el problema y quisiera saber por que sigue apareciendo Infectados: not-a-virus:Monitor.Win32.PKRPoker.a que es eso y por donde esta entrando? por que eso es lo que a estado apareciendo siempre.
Gracias
Responder Con Cita