eflores
03/06/05, 07:46:32
Veran soy nuevo en esto...en mi PC tengo Windows 98 SE. en la barra de abajo..me sale un icono al lado de los programas que corren en forma de una X en rojo...cuando me posiciono encima de el me dice este mensaje : Your Computer is Infect !!!...cuando le doy doble clip me envia a una pagina de un antivirus llamado Antivirus GOld..como elimino este molestoso icono....Será un virus ?..o es un Spyware....
Por favor detallarme como eliminarlo...
eflores
03/06/05, 08:58:16
Aquí estoy de nuevo..nadie me ha ayudado...aquí les envio un log..que le hice con un programita llamado microWord Antivirus & Toolkit Utility ver.6.2.9
File C:\WINDOWS\SYSTEM\WINNOOK.EXE infected by "Trojan.Win32.TopAntiSpyware.l" Virus! Action Taken: No Action Taken.
File C:\WINDOWS\SYSTEM\WINNOOK.EXE infected by "Trojan.Win32.TopAntiSpyware.l" Virus! Action Taken: No Action Taken.
File C:\WINDOWS\SYSTEM32\IASADA.DLL tagged as "not-a-virus:AdWare.AzSearch.b". Action Taken: No Action Taken.
File C:\WINDOWS\SYSTEM\winnook.exe infected by "Trojan.Win32.TopAntiSpyware.l" Virus! Action Taken: No Action Taken.
Object "Favoriteman Spyware/Adware" found in File System! Action Taken: No Action Taken.
Object "Wind Updates Spyware/Adware" found in File System! Action Taken: No Action Taken.
Object "AltNet Spyware/Adware" found in File System! Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Mod uleUsage" refers to invalid object "C:\WINDOWS\Downloaded Program Files\SysWebTelecomInt.dll". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Mod uleUsage" refers to invalid object "C:\WINDOWS\SYSTEM\ObjSafe.tlb". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Mod uleUsage" refers to invalid object "C:\WINDOWS\Downloaded Program Files\mm20.ocx". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Mod uleUsage" refers to invalid object "C:\WINDOWS\Downloaded Program Files\SyncroAdX.dll". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Mod uleUsage" refers to invalid object "C:\WINDOWS\DOWNLOADED PROGRAM FILES\WinAdServX.dll". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Mod uleUsage" refers to invalid object "C:\WINDOWS\Downloaded Program Files\PPremiumInternacional.dll". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Mod uleUsage" refers to invalid object "C:\WINDOWS\DOWNLOADED PROGRAM FILES\WinCtlAdX.dll". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Sha redDlls" refers to invalid object "C:\WINDOWS\Downloaded Program Files\SysWebTelecomInt.dll". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Sha redDlls" refers to invalid object "C:\WINDOWS\Fonts\CALLI___.TTF". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Sha redDlls" refers to invalid object "C:\WINDOWS\SYSTEM\CDAC11BA.VXD". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Sha redDlls" refers to invalid object "C:\WINDOWS\SYSTEM\ObjSafe.tlb". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Sha redDlls" refers to invalid object "C:\WINDOWS\Downloaded Program Files\mm20.ocx". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Sha redDlls" refers to invalid object "C:\WINDOWS\Downloaded Program Files\SyncroAdX.dll". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Sha redDlls" refers to invalid object "C:\WINDOWS\DOWNLOADED PROGRAM FILES\WinAdServX.dll". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Sha redDlls" refers to invalid object "C:\WINDOWS\Downloaded Program Files\PPremiumInternacional.dll". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Sha redDlls" refers to invalid object "C:\WINDOWS\DOWNLOADED PROGRAM FILES\WinCtlAdX.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{D3B1DE00-6B94-1069-8754-08002B2BD64F}" refers to invalid object "c:\windows\SYSTEM\disktool.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{00020D05-0000-0000-C000-000000000046}" refers to invalid object "outex.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{DDF5A600-B9C0-101A-AF1A-00AA0034B50B}" refers to invalid object "C:\WINDOWS\SYSTEM\OC30.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{2542F180-3532-1069-A2CD-00AA0034B50B}" refers to invalid object "C:\WINDOWS\SYSTEM\OC30.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{99180163-DA16-101A-935C-444553540000}" refers to invalid object "recncl.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4}" refers to invalid object "c:\windows\SYSTEM\igfxpph.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{19e46580-348f-11cf-8771-08005ace04fc}" refers to invalid object "C:\WINDOWS\SYSTEM\cwbsoext.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{BB350B21-4D4A-11d2-ADE1-0004ACFCEAD3}" refers to invalid object "C:\Program Files\IBM\Client Access\Shared\cwbuntcn.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{963C0C00-39B0-11d1-8743-08005AC22F32}" refers to invalid object "C:\Program Files\IBM\Client Access\Shared\cwbuntcn.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{0BE35200-8F91-11CE-9DE3-00AA004BB851}" refers to invalid object "C:\PROGRA~1\VERBAT~1\MFC42.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{0BE35201-8F91-11CE-9DE3-00AA004BB851}" refers to invalid object "C:\PROGRA~1\VERBAT~1\MFC42.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{0BE35202-8F91-11CE-9DE3-00AA004BB851}" refers to invalid object "C:\PROGRA~1\VERBAT~1\MFC42.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{0D30E742-270A-11D2-A3D4-000629B05A9E}" refers to invalid object "C:\Program Files\IBM\Client Access\Emulator\autsdsc.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{20D74AB2-271D-11D2-A3D5-000629B05A9E}" refers to invalid object "C:\Program Files\IBM\Client Access\Emulator\autsrec.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{2E21FC70-0402-11D3-9A24-00203529A3C6}" refers to invalid object "C:\Program Files\IBM\Client Access\Emulator\autohio.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{B0693766-5278-4ec6-B9E1-3CE40560EF5A}" refers to invalid object "CaPlgin.ax". Action Taken: No Action Taken.
Entry "HKCR\Overview.Document" refers to invalid object "{DA23B9C9-6893-11D0-8534-00C04FD7AD0C}". Action Taken: No Action Taken.
Entry "HKCR\TSHOOT.TSHOOTCtrl.1" refers to invalid object "{4B106874-DD36-11D0-8B44-00A024DD9EFF}". Action Taken: No Action Taken.
Entry "HKCR\ATMSessionManager" refers to invalid object "{7FAE9451-C040-11CD-B010-0000C06E6B8A}". Action Taken: No Action Taken.
Entry "HKCR\FreeHand.Doc" refers to invalid object "{03B8EAA1-CCD3-4ed8-A47F-0796F380487E}". Action Taken: No Action Taken.
Entry "HKCR\Mmedia.RadioBand.1" refers to invalid object "{8E718888-423F-11D2-876E-00A0C9082467}". Action Taken: No Action Taken.
Entry "HKCR\Mmedia.RadioBand" refers to invalid object "{8E718888-423F-11D2-876E-00A0C9082467}". Action Taken: No Action Taken.
Entry "HKCR\WinAdServX.Installer" refers to invalid object "{15AD4789-CDB4-47E1-A9DA-992EE8E6BAD6}". Action Taken: No Action Taken.
Entry "HKCR\WinCtlAdX.Installer" refers to invalid object "{15AD4789-CDB4-47E1-A9DA-992EE8E6BAD6}". Action Taken: No Action Taken.
File C:\WINDOWS\msbb.exe tagged as "not-a-virus:AdWare.180Solutions". Action Taken: No Action Taken.
File C:\WINDOWS\SYSTEM\IfMegaWbr.dll infected by "Trojan-Dropper.Win32.Small.xm" Virus! Action Taken: No Action Taken.
File C:\WINDOWS\SYSTEM\azesearch4.ocx tagged as "not-a-virus:AdWare.AzSearch.b". Action Taken: No Action Taken.
File C:\windows\options\cabs\ols\at&t\attkit.exe tagged as not-a-virus:Tool.Win32.Reboot. No Action Taken.
File C:\windows\SYSTEM\IfMegaWbr.dll infected by "Trojan-Dropper.Win32.Small.xm" Virus! Action Taken: No Action Taken.
File C:\windows\SYSTEM\azesearch4.ocx tagged as "not-a-virus:AdWare.AzSearch.b". Action Taken: No Action Taken.
File C:\windows\Downloaded Program Files\MediaAccX.dll tagged as "not-a-virus:AdWare.WinAD.ak". Action Taken: No Action Taken.
File C:\windows\Downloaded Program Files\mp3.ocx infected by "Trojan-Downloader.Win32.Agent.ex" Virus! Action Taken: No Action Taken.
File C:\windows\Downloaded Program Files\instafin.dll infected by "Trojan.Win32.Delf.gh" Virus! Action Taken: No Action Taken.
File C:\windows\Downloaded Program Files\megasear.dll tagged as "not-a-virus:AdWare.BHO.MegaSearch.a". Action Taken: No Action Taken.
File C:\windows\msbb.exe tagged as "not-a-virus:AdWare.180Solutions". Action Taken: No Action Taken.
File C:\Program Files\Online Services\AT&T\ATTSETUP.EXE tagged as not-a-virus:Tool.Win32.Reboot. No Action Taken.
File C:\Program Files\Windows SyncroAd\CComm.dll tagged as "not-a-virus:AdWare.WinAD". Action Taken: No Action Taken.
File C:\Program Files\Windows SyncroAd\SyncroAd.exe tagged as "not-a-virus:AdWare.WinAD". Action Taken: No Action Taken.
File C:\Program Files\Windows ControlAd\WinCtlAdShift.dll infected by "Trojan-Downloader.Win32.Agent.gf" Virus! Action Taken: No Action Taken.
File C:\Program Files\Windows ControlAd\WinCtlAd.exe tagged as "not-a-virus:AdWare.WinAD.f". Action Taken: No Action Taken.
File C:\aida32\AIDA32.BIN tagged as not-a-virus:Tool.Win32.AIDA.3862. No Action Taken.
File C:\aida32\AIDA32.EXE tagged as not-a-virus:Tool.Win32.AIDA.3862. No Action Taken.
File C:\windows\options\cabs\ols\at&t\attkit.exe tagged as not-a-virus:Tool.Win32.Reboot. No Action Taken.
File C:\windows\SYSTEM\IfMegaWbr.dll infected by "Trojan-Dropper.Win32.Small.xm" Virus! Action Taken: No Action Taken.
File C:\windows\SYSTEM\azesearch4.ocx tagged as "not-a-virus:AdWare.AzSearch.b". Action Taken: No Action Taken.
File C:\windows\Downloaded Program Files\MediaAccX.dll tagged as "not-a-virus:AdWare.WinAD.ak". AFile C:\windows\Downloaded Program Files\megasear.dll tagged as "not-a-virus:AdWare.BHO.MegaSearch.a". Action Taken: No Action Taken.
por favor ayudenme !!!!!!! a borrar todo esto...
Aguilapelona
03/06/05, 12:20:32
Vaya que estas super infectado por trojanos y spyware. ¿tienes antivirus? si no tienes instala inmediatamente un buen antivirus (http://infospyware.com/Anti-Virus/) .
Actualizas tu antivirus local y en modo seguro le haces un scan. Luego le pasas un antivirus en linea (http://www.forospyware.com/announcement.php?f=12) .
Para los spyware y adwares que tienes que seguir estos pasos (http://www.forospyware.com/announcement.php?f=11) .
Si aun persisten los problemas será necesario que mandes un reporte del hijack this.
Saludos :adios: