Ver la Versión Completa : Ayuda con un troyano


BlackStone
04/11/06, 16:01:02
He pasado esta tarde KASPERSKY ONLINE SCANNER y me informa que tengo un troyano me aparece lo siguiente:

Saturday, November 04, 2006 6:17:42 PM
Operating System: Microsoft Windows XP Professional, Service Pack 2 (Build 2600)
Kaspersky Online Scanner version: 5.0.83.0
Kaspersky Anti-Virus database last update: 4/11/2006
Kaspersky Anti-Virus database records: 224758


Scan Settings
Scan using the following antivirus database standard
Scan Archives true
Scan Mail Bases true

Scan Target Folders
C:\
H:\

Scan Statistics
Total number of scanned objects 87162
Number of viruses found 1
Number of infected objects 1 / 0
Number of suspicious objects 0
Duration of the scan process 01:36:53

Infected Object Name Virus Name Last Action
C:\Archivos de programa\Alcohol Soft\Alcohol 120\StarWind\logs\starwind.2006-11-04.14-20-01.log Object is locked skipped

C:\Archivos de programa\ESET\logs\virlog.dat Object is locked skipped

C:\Archivos de programa\ESET\logs\warnlog.dat Object is locked skipped

C:\Archivos de programa\Logitech\Desktop Messenger\8876480\Users\David\Data\BWDocMap.pht Object is locked skipped

C:\Archivos de programa\Logitech\Desktop Messenger\8876480\Users\David\Data\BWInfopakMap.ph t Object is locked skipped

C:\Archivos de programa\Logitech\Desktop Messenger\8876480\Users\David\Data\chandir.dat Object is locked skipped

C:\Archivos de programa\Logitech\Desktop Messenger\8876480\Users\David\Data\chandir.idx Object is locked skipped

C:\Archivos de programa\Logitech\Desktop Messenger\8876480\Users\David\Data\chn.dat Object is locked skipped

C:\Archivos de programa\Logitech\Desktop Messenger\8876480\Users\David\Data\chn.idx Object is locked skipped

C:\Archivos de programa\Logitech\Desktop Messenger\8876480\Users\David\Data\D0000000.FCS Object is locked skipped

C:\Archivos de programa\Logitech\Desktop Messenger\8876480\Users\David\Data\inuse.txt Object is locked skipped

C:\Archivos de programa\Logitech\Desktop Messenger\8876480\Users\David\Data\L0000002.FCS Object is locked skipped

C:\Archivos de programa\Logitech\Desktop Messenger\8876480\Users\David\Data\main.log Object is locked skipped

C:\Archivos de programa\Logitech\Desktop Messenger\8876480\Users\David\Data\prs.dat Object is locked skipped

C:\Archivos de programa\Logitech\Desktop Messenger\8876480\Users\David\Data\prs.idx Object is locked skipped

C:\Archivos de programa\Logitech\Desktop Messenger\8876480\Users\David\Data\prs_die.dat Object is locked skipped

C:\Archivos de programa\Logitech\Desktop Messenger\8876480\Users\David\Data\prs_die.idx Object is locked skipped

C:\Archivos de programa\Logitech\Desktop Messenger\8876480\Users\David\Data\prs_dnd.dat Object is locked skipped

C:\Archivos de programa\Logitech\Desktop Messenger\8876480\Users\David\Data\prs_dnd.idx Object is locked skipped

C:\Archivos de programa\Logitech\Desktop Messenger\8876480\Users\David\Data\prs_ext.dat Object is locked skipped

C:\Archivos de programa\Logitech\Desktop Messenger\8876480\Users\David\Data\prs_ext.idx Object is locked skipped

C:\Archivos de programa\Logitech\Desktop Messenger\8876480\Users\David\Data\prs_rcv.dat Object is locked skipped

C:\Archivos de programa\Logitech\Desktop Messenger\8876480\Users\David\Data\prs_rcv.idx Object is locked skipped

C:\Archivos de programa\Logitech\Desktop Messenger\8876480\Users\David\Data\storydb.dat Object is locked skipped

C:\Archivos de programa\Logitech\Desktop Messenger\8876480\Users\David\Data\storydb.idx Object is locked skipped

C:\Documents and Settings\David\Configuración local\Archivos temporales de Internet\Content.IE5\index.dat Object is locked skipped

C:\Documents and Settings\David\Configuración local\Datos de programa\ApplicationHistory\hpqimzone.exe.12eac55c .ini.inuse Object is locked skipped

C:\Documents and Settings\David\Configuración local\Datos de programa\HP\Digital Imaging\db\administrativeInfo.dbf Object is locked skipped

C:\Documents and Settings\David\Configuración local\Datos de programa\HP\Digital Imaging\db\albumImagesTable.cdx Object is locked skipped

C:\Documents and Settings\David\Configuración local\Datos de programa\HP\Digital Imaging\db\albumImagesTable.dbf Object is locked skipped

C:\Documents and Settings\David\Configuración local\Datos de programa\HP\Digital Imaging\db\albumTable.cdx Object is locked skipped

C:\Documents and Settings\David\Configuración local\Datos de programa\HP\Digital Imaging\db\albumTable.dbf Object is locked skipped

C:\Documents and Settings\David\Configuración local\Datos de programa\HP\Digital Imaging\db\CB_Server_Errors.txt Object is locked skipped

C:\Documents and Settings\David\Configuración local\Datos de programa\HP\Digital Imaging\db\EXIFTable.cdx Object is locked skipped

C:\Documents and Settings\David\Configuración local\Datos de programa\HP\Digital Imaging\db\EXIFTable.dbf Object is locked skipped

C:\Documents and Settings\David\Configuración local\Datos de programa\HP\Digital Imaging\db\imageTable.cdx Object is locked skipped

C:\Documents and Settings\David\Configuración local\Datos de programa\HP\Digital Imaging\db\imageTable.dbf Object is locked skipped

C:\Documents and Settings\David\Configuración local\Datos de programa\HP\Digital Imaging\db\imageTable.fpt Object is locked skipped

C:\Documents and Settings\David\Configuración local\Datos de programa\HP\Digital Imaging\db\keywordImagesTable.cdx Object is locked skipped

C:\Documents and Settings\David\Configuración local\Datos de programa\HP\Digital Imaging\db\keywordImagesTable.dbf Object is locked skipped

C:\Documents and Settings\David\Configuración local\Datos de programa\HP\Digital Imaging\db\keywordTable.cdx Object is locked skipped

C:\Documents and Settings\David\Configuración local\Datos de programa\HP\Digital Imaging\db\keywordTable.dbf Object is locked skipped

C:\Documents and Settings\David\Configuración local\Datos de programa\HP\Digital Imaging\db\managedFolderTable.dbf Object is locked skipped

C:\Documents and Settings\David\Configuración local\Datos de programa\HP\Digital Imaging\db\pathnameTable.cdx Object is locked skipped

C:\Documents and Settings\David\Configuración local\Datos de programa\HP\Digital Imaging\db\pathnameTable.dbf Object is locked skipped

C:\Documents and Settings\David\Configuración local\Datos de programa\HP\Digital Imaging\db\propertiesTable.cdx Object is locked skipped

C:\Documents and Settings\David\Configuración local\Datos de programa\HP\Digital Imaging\db\propertiesTable.dbf Object is locked skipped

C:\Documents and Settings\David\Configuración local\Datos de programa\HP\Digital Imaging\db\ROFImagesTable.cdx Object is locked skipped

C:\Documents and Settings\David\Configuración local\Datos de programa\HP\Digital Imaging\db\ROFImagesTable.dbf Object is locked skipped

C:\Documents and Settings\David\Configuración local\Datos de programa\HP\Digital Imaging\db\ROFTable.cdx Object is locked skipped

C:\Documents and Settings\David\Configuración local\Datos de programa\HP\Digital Imaging\db\ROFTable.dbf Object is locked skipped

C:\Documents and Settings\David\Configuración local\Datos de programa\Microsoft\Windows\UsrClass.dat Object is locked skipped

C:\Documents and Settings\David\Configuración local\Datos de programa\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped

C:\Documents and Settings\David\Configuración local\Historial\History.IE5\index.dat Object is locked skipped

C:\Documents and Settings\David\Configuración local\Historial\History.IE5\MSHist0120061104200611 05\index.dat Object is locked skipped

C:\Documents and Settings\David\Configuración local\Temp\hsperfdata_David\2016 Object is locked skipped

C:\Documents and Settings\David\Configuración local\Temp\~DFA3DA.tmp Object is locked skipped

C:\Documents and Settings\David\Cookies\index.dat Object is locked skipped

C:\Documents and Settings\David\Datos de programa\Sun\Java\Deployment\log\plugin150_06.trac e Object is locked skipped

C:\Documents and Settings\David\NTUSER.DAT Object is locked skipped

C:\Documents and Settings\David\ntuser.dat.LOG Object is locked skipped

C:\Documents and Settings\LocalService\Configuración local\Archivos temporales de Internet\Content.IE5\index.dat Object is locked skipped

C:\Documents and Settings\LocalService\Configuración local\Datos de programa\Microsoft\Windows\UsrClass.dat Object is locked skipped

C:\Documents and Settings\LocalService\Configuración local\Datos de programa\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped

C:\Documents and Settings\LocalService\Configuración local\Historial\History.IE5\index.dat Object is locked skipped

C:\Documents and Settings\LocalService\Cookies\index.dat Object is locked skipped

C:\Documents and Settings\LocalService\NTUSER.DAT Object is locked skipped

C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked skipped

C:\Documents and Settings\NetworkService\Configuración local\Archivos temporales de Internet\Content.IE5\index.dat Object is locked skipped

C:\Documents and Settings\NetworkService\Configuración local\Datos de programa\Microsoft\Windows\UsrClass.dat Object is locked skipped

C:\Documents and Settings\NetworkService\Configuración local\Datos de programa\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped

C:\Documents and Settings\NetworkService\Configuración local\Historial\History.IE5\index.dat Object is locked skipped

C:\Documents and Settings\NetworkService\Cookies\index.dat Object is locked skipped

C:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked skipped

C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked skipped

C:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped

C:\System Volume Information\_restore{45C2A4CC-D561-439A-AD26-2C18A923DF05}\RP247\A0048640.exe Object is locked skipped

C:\System Volume Information\_restore{45C2A4CC-D561-439A-AD26-2C18A923DF05}\RP247\A0048685.exe Object is locked skipped

C:\System Volume Information\_restore{45C2A4CC-D561-439A-AD26-2C18A923DF05}\RP248\A0048716.exe Object is locked skipped

C:\System Volume Information\_restore{45C2A4CC-D561-439A-AD26-2C18A923DF05}\RP248\A0048742.exe Object is locked skipped

C:\System Volume Information\_restore{45C2A4CC-D561-439A-AD26-2C18A923DF05}\RP255\A0050110.exe Object is locked skipped

C:\System Volume Information\_restore{45C2A4CC-D561-439A-AD26-2C18A923DF05}\RP256\A0050242.exe Infected: Trojan-Proxy.Win32.Horst.ky skipped

C:\System Volume Information\_restore{45C2A4CC-D561-439A-AD26-2C18A923DF05}\RP257\A0050273.exe Object is locked skipped

C:\System Volume Information\_restore{45C2A4CC-D561-439A-AD26-2C18A923DF05}\RP258\A0050338.exe Object is locked skipped

C:\System Volume Information\_restore{45C2A4CC-D561-439A-AD26-2C18A923DF05}\RP258\change.log Object is locked skipped

C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped

C:\WINDOWS\SchedLgU.Txt Object is locked skipped

C:\WINDOWS\SoftwareDistribution\ReportingEvents.lo g Object is locked skipped

C:\WINDOWS\Sti_Trace.log Object is locked skipped

C:\WINDOWS\system32\CatRoot2\edb.log Object is locked skipped

C:\WINDOWS\system32\CatRoot2\tmp.edb Object is locked skipped

C:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped

C:\WINDOWS\system32\config\default Object is locked skipped

C:\WINDOWS\system32\config\default.LOG Object is locked skipped

C:\WINDOWS\system32\config\SAM Object is locked skipped

C:\WINDOWS\system32\config\SAM.LOG Object is locked skipped

C:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped

C:\WINDOWS\system32\config\SECURITY Object is locked skipped

C:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped

C:\WINDOWS\system32\config\software Object is locked skipped

C:\WINDOWS\system32\config\software.LOG Object is locked skipped

C:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped

C:\WINDOWS\system32\config\system Object is locked skipped

C:\WINDOWS\system32\config\system.LOG Object is locked skipped

C:\WINDOWS\system32\drivers\dtscsi.sys Object is locked skipped

C:\WINDOWS\system32\drivers\sptd.sys Object is locked skipped

C:\WINDOWS\system32\drivers\sptd9581.sys Object is locked skipped

C:\WINDOWS\system32\h323log.txt Object is locked skipped

C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked skipped

C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP Object is locked skipped

C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER Object is locked skipped

C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MA P Object is locked skipped

C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MA P Object is locked skipped

C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DAT A Object is locked skipped

C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP Object is locked skipped

C:\WINDOWS\wiadebug.log Object is locked skipped

C:\WINDOWS\wiaservc.log Object is locked skipped

C:\WINDOWS\WindowsUpdate.log Object is locked skipped

H:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped

Scan process completed.

Si alguien me puede decir como eliminarlo le estaria muy agradecido :biggrin:

Lalets
04/11/06, 16:04:53
hola, bueno solo realiza lo siguiente:

:1: apaga restuarar el sistema (http://www.forospyware.com/45-post2.html)

:2: reinicia

:3: vuelve a habilitar la opcion de restaurar el sistema



nos comentas


salu2 :Bien:

BlackStone
04/11/06, 18:12:47
Gracias por la respuesta, hice lo que dijiste creo que acabe con el problema pero ha aparecido otro troyano aperce en forma de un icono de instalacion se llama setup.exe junto con una archivo autorun.inf le pase de nuevo el KASPERSKY y aparece esto

Scan using the following antivirus database standard
Scan Archives true
Scan Mail Bases true

Scan Target My Computer
A:\
C:\
D:\
E:\
F:\
G:\
H:\

Scan Statistics
Total number of scanned objects 76654
Number of viruses found 1
Number of infected objects 1 / 0
Number of suspicious objects 0
Duration of the scan process 01:25:43

Infected Object Name Virus Name Last Action
C:\Archivos de programa\Alcohol Soft\Alcohol 120\StarWind\logs\starwind.2006-11-04.22-19-39.log Object is locked skipped

C:\Archivos de programa\ESET\logs\virlog.dat Object is locked skipped

C:\Archivos de programa\ESET\logs\warnlog.dat Object is locked skipped

C:\Archivos de programa\Logitech\Desktop Messenger\8876480\Users\David\Data\BWDocMap.pht Object is locked skipped

C:\Archivos de programa\Logitech\Desktop Messenger\8876480\Users\David\Data\BWInfopakMap.ph t Object is locked skipped

C:\Archivos de programa\Logitech\Desktop Messenger\8876480\Users\David\Data\chandir.dat Object is locked skipped

C:\Archivos de programa\Logitech\Desktop Messenger\8876480\Users\David\Data\chandir.idx Object is locked skipped

C:\Archivos de programa\Logitech\Desktop Messenger\8876480\Users\David\Data\chn.dat Object is locked skipped

C:\Archivos de programa\Logitech\Desktop Messenger\8876480\Users\David\Data\chn.idx Object is locked skipped

C:\Archivos de programa\Logitech\Desktop Messenger\8876480\Users\David\Data\D0000000.FCS Object is locked skipped

C:\Archivos de programa\Logitech\Desktop Messenger\8876480\Users\David\Data\inuse.txt Object is locked skipped

C:\Archivos de programa\Logitech\Desktop Messenger\8876480\Users\David\Data\L0000002.FCS Object is locked skipped

C:\Archivos de programa\Logitech\Desktop Messenger\8876480\Users\David\Data\main.log Object is locked skipped

C:\Archivos de programa\Logitech\Desktop Messenger\8876480\Users\David\Data\prs.dat Object is locked skipped

C:\Archivos de programa\Logitech\Desktop Messenger\8876480\Users\David\Data\prs.idx Object is locked skipped

C:\Archivos de programa\Logitech\Desktop Messenger\8876480\Users\David\Data\prs_die.dat Object is locked skipped

C:\Archivos de programa\Logitech\Desktop Messenger\8876480\Users\David\Data\prs_die.idx Object is locked skipped

C:\Archivos de programa\Logitech\Desktop Messenger\8876480\Users\David\Data\prs_dnd.dat Object is locked skipped

C:\Archivos de programa\Logitech\Desktop Messenger\8876480\Users\David\Data\prs_dnd.idx Object is locked skipped

C:\Archivos de programa\Logitech\Desktop Messenger\8876480\Users\David\Data\prs_ext.dat Object is locked skipped

C:\Archivos de programa\Logitech\Desktop Messenger\8876480\Users\David\Data\prs_ext.idx Object is locked skipped

C:\Archivos de programa\Logitech\Desktop Messenger\8876480\Users\David\Data\prs_rcv.dat Object is locked skipped

C:\Archivos de programa\Logitech\Desktop Messenger\8876480\Users\David\Data\prs_rcv.idx Object is locked skipped

C:\Archivos de programa\Logitech\Desktop Messenger\8876480\Users\David\Data\storydb.dat Object is locked skipped

C:\Archivos de programa\Logitech\Desktop Messenger\8876480\Users\David\Data\storydb.idx Object is locked skipped

C:\Documents and Settings\All Users\Documentos\setup.exe Infected: Trojan-Proxy.Win32.Horst.lf skipped

C:\Documents and Settings\David\Configuración local\Archivos temporales de Internet\Content.IE5\index.dat Object is locked skipped

C:\Documents and Settings\David\Configuración local\Datos de programa\ApplicationHistory\hpqimzone.exe.12eac55c .ini.inuse Object is locked skipped

C:\Documents and Settings\David\Configuración local\Datos de programa\HP\Digital Imaging\db\administrativeInfo.dbf Object is locked skipped

C:\Documents and Settings\David\Configuración local\Datos de programa\HP\Digital Imaging\db\albumImagesTable.cdx Object is locked skipped

C:\Documents and Settings\David\Configuración local\Datos de programa\HP\Digital Imaging\db\albumImagesTable.dbf Object is locked skipped

C:\Documents and Settings\David\Configuración local\Datos de programa\HP\Digital Imaging\db\albumTable.cdx Object is locked skipped

C:\Documents and Settings\David\Configuración local\Datos de programa\HP\Digital Imaging\db\albumTable.dbf Object is locked skipped

C:\Documents and Settings\David\Configuración local\Datos de programa\HP\Digital Imaging\db\CB_Server_Errors.txt Object is locked skipped

C:\Documents and Settings\David\Configuración local\Datos de programa\HP\Digital Imaging\db\EXIFTable.cdx Object is locked skipped

C:\Documents and Settings\David\Configuración local\Datos de programa\HP\Digital Imaging\db\EXIFTable.dbf Object is locked skipped

C:\Documents and Settings\David\Configuración local\Datos de programa\HP\Digital Imaging\db\imageTable.cdx Object is locked skipped

C:\Documents and Settings\David\Configuración local\Datos de programa\HP\Digital Imaging\db\imageTable.dbf Object is locked skipped

C:\Documents and Settings\David\Configuración local\Datos de programa\HP\Digital Imaging\db\imageTable.fpt Object is locked skipped

C:\Documents and Settings\David\Configuración local\Datos de programa\HP\Digital Imaging\db\keywordImagesTable.cdx Object is locked skipped

C:\Documents and Settings\David\Configuración local\Datos de programa\HP\Digital Imaging\db\keywordImagesTable.dbf Object is locked skipped

C:\Documents and Settings\David\Configuración local\Datos de programa\HP\Digital Imaging\db\keywordTable.cdx Object is locked skipped

C:\Documents and Settings\David\Configuración local\Datos de programa\HP\Digital Imaging\db\keywordTable.dbf Object is locked skipped

C:\Documents and Settings\David\Configuración local\Datos de programa\HP\Digital Imaging\db\managedFolderTable.dbf Object is locked skipped

C:\Documents and Settings\David\Configuración local\Datos de programa\HP\Digital Imaging\db\pathnameTable.cdx Object is locked skipped

C:\Documents and Settings\David\Configuración local\Datos de programa\HP\Digital Imaging\db\pathnameTable.dbf Object is locked skipped

C:\Documents and Settings\David\Configuración local\Datos de programa\HP\Digital Imaging\db\propertiesTable.cdx Object is locked skipped

C:\Documents and Settings\David\Configuración local\Datos de programa\HP\Digital Imaging\db\propertiesTable.dbf Object is locked skipped

C:\Documents and Settings\David\Configuración local\Datos de programa\HP\Digital Imaging\db\ROFImagesTable.cdx Object is locked skipped

C:\Documents and Settings\David\Configuración local\Datos de programa\HP\Digital Imaging\db\ROFImagesTable.dbf Object is locked skipped

C:\Documents and Settings\David\Configuración local\Datos de programa\HP\Digital Imaging\db\ROFTable.cdx Object is locked skipped

C:\Documents and Settings\David\Configuración local\Datos de programa\HP\Digital Imaging\db\ROFTable.dbf Object is locked skipped

C:\Documents and Settings\David\Configuración local\Datos de programa\Microsoft\Windows\UsrClass.dat Object is locked skipped

C:\Documents and Settings\David\Configuración local\Datos de programa\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped

C:\Documents and Settings\David\Configuración local\Historial\History.IE5\index.dat Object is locked skipped

C:\Documents and Settings\David\Configuración local\Historial\History.IE5\MSHist0120061103200611 04\index.dat Object is locked skipped

C:\Documents and Settings\David\Configuración local\Historial\History.IE5\MSHist0120061104200611 05\index.dat Object is locked skipped

C:\Documents and Settings\David\Configuración local\Temp\~DFF039.tmp Object is locked skipped

C:\Documents and Settings\David\Cookies\index.dat Object is locked skipped

C:\Documents and Settings\David\NTUSER.DAT Object is locked skipped

C:\Documents and Settings\David\ntuser.dat.LOG Object is locked skipped

C:\Documents and Settings\LocalService\Configuración local\Archivos temporales de Internet\Content.IE5\index.dat Object is locked skipped

C:\Documents and Settings\LocalService\Configuración local\Datos de programa\Microsoft\Windows\UsrClass.dat Object is locked skipped

C:\Documents and Settings\LocalService\Configuración local\Datos de programa\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped

C:\Documents and Settings\LocalService\Configuración local\Historial\History.IE5\index.dat Object is locked skipped

C:\Documents and Settings\LocalService\Cookies\index.dat Object is locked skipped

C:\Documents and Settings\LocalService\NTUSER.DAT Object is locked skipped

C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked skipped

C:\Documents and Settings\NetworkService\Configuración local\Archivos temporales de Internet\Content.IE5\index.dat Object is locked skipped

C:\Documents and Settings\NetworkService\Configuración local\Datos de programa\Microsoft\Windows\UsrClass.dat Object is locked skipped

C:\Documents and Settings\NetworkService\Configuración local\Datos de programa\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped

C:\Documents and Settings\NetworkService\Configuración local\Historial\History.IE5\index.dat Object is locked skipped

C:\Documents and Settings\NetworkService\Cookies\index.dat Object is locked skipped

C:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked skipped

C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked skipped

C:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped

C:\System Volume Information\_restore{45C2A4CC-D561-439A-AD26-2C18A923DF05}\RP1\change.log Object is locked skipped

C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped

C:\WINDOWS\SchedLgU.Txt Object is locked skipped

C:\WINDOWS\SoftwareDistribution\ReportingEvents.lo g Object is locked skipped

C:\WINDOWS\Sti_Trace.log Object is locked skipped

C:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped

C:\WINDOWS\system32\config\default Object is locked skipped

C:\WINDOWS\system32\config\default.LOG Object is locked skipped

C:\WINDOWS\system32\config\SAM Object is locked skipped

C:\WINDOWS\system32\config\SAM.LOG Object is locked skipped

C:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped

C:\WINDOWS\system32\config\SECURITY Object is locked skipped

C:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped

C:\WINDOWS\system32\config\software Object is locked skipped

C:\WINDOWS\system32\config\software.LOG Object is locked skipped

C:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped

C:\WINDOWS\system32\config\system Object is locked skipped

C:\WINDOWS\system32\config\system.LOG Object is locked skipped

C:\WINDOWS\system32\drivers\dtscsi.sys Object is locked skipped

C:\WINDOWS\system32\drivers\sptd.sys Object is locked skipped

C:\WINDOWS\system32\drivers\sptd9581.sys Object is locked skipped

C:\WINDOWS\system32\h323log.txt Object is locked skipped

C:\WINDOWS\system32\LogFiles\HTTPERR\httperr1.log Object is locked skipped

C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked skipped

C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP Object is locked skipped

C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER Object is locked skipped

C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MA P Object is locked skipped

C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MA P Object is locked skipped

C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DAT A Object is locked skipped

C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP Object is locked skipped

C:\WINDOWS\wiadebug.log Object is locked skipped

C:\WINDOWS\wiaservc.log Object is locked skipped

C:\WINDOWS\WindowsUpdate.log Object is locked skipped

H:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped

Scan process completed.

Borro ambos archivos o solo el setup?? o hay que hacer algo mas??

Gracias.

Lalets
04/11/06, 18:32:07
hola, bueno solo realiza lo siguiente:

busca y elimina:

C:\Documents and Settings\All Users\Documentos\setup.exe

si no se deja utiliza killbox (http://www.forospyware.com/t42.html)

nos comentas


salu2 :Bien:

© Copyright 2005 - 2008 InfoSpyware ® Todos los derechos reservados.
InfoSpyware Security Blog