Amigos resulta que todos los dias pongor a correr el ad-aware y siempre detecta algo por otra parte tengo como un virus pegado a la pagina de google, siempre que pongo alguna palabra me aparece por ejemplo busco: "foros ad-aware" y me aparece encabezando la lista de resultados esto (que antes nunca aparecía):
=== Looking for foros ad-aware ? ====== CLICK HERE to find foros ad-aware ===
http://foros+ad-aware.com - - 27k - 7 Jun 2007 - En caché - Páginas similares

Yo creo que es un virus, ayudeme por favor.

a continuación presento el informe de la última corrida del ad-aware:

Ad-Aware SE Build 1.06r1
Logfile Created on:Viernes, 08 de Junio de 2007 09:14:41 a.m.
Created with Ad-Aware SE Personal, free for private use.
Using definitions file:SE1R174 04.06.2007
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»» »

References detected during the scan:
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
MRU List(TAC index:0):17 total references
Tracking Cookie(TAC index:3):13 total references
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»

Ad-Aware SE Settings
===========================
Set : Search for negligible risk entries
Set : Safe mode (always request confirmation)
Set : Scan active processes
Set : Scan registry
Set : Deep-scan registry
Set : Scan my IE Favorites for banned URLs
Set : Scan my Hosts file

Extended Ad-Aware SE Settings
===========================
Set : Unload recognized processes & modules during scan
Set : Scan registry for all users instead of current user only
Set : Always try to unload modules before deletion
Set : During removal, unload Explorer and IE if necessary
Set : Let Windows remove files in use at next reboot
Set : Delete quarantined objects after restoring
Set : Include basic Ad-Aware settings in log file
Set : Include additional Ad-Aware settings in log file
Set : Include reference summary in log file
Set : Include alternate data stream details in log file
Set : Play sound at scan completion if scan locates critical objects


08-06-2007 09:14:41 a.m. - Scan started. (Full System Scan)

MRU List Object Recognized!
Location: : C:\Documents and Settings\Administrador\recent
Description : list of recently opened documents


MRU List Object Recognized!
Location: : S-1-5-21-2195734031-1358503957-4140643920-500\software\microsoft\direct3d\mostrecentapplicat ion
Description : most recent application to use microsoft direct3d


MRU List Object Recognized!
Location: : software\microsoft\direct3d\mostrecentapplication
Description : most recent application to use microsoft direct3d


MRU List Object Recognized!
Location: : S-1-5-21-2195734031-1358503957-4140643920-500\software\microsoft\direct3d\mostrecentapplicat ion
Description : most recent application to use microsoft direct X


MRU List Object Recognized!
Location: : software\microsoft\direct3d\mostrecentapplication
Description : most recent application to use microsoft direct X


MRU List Object Recognized!
Location: : software\microsoft\directdraw\mostrecentapplicatio n
Description : most recent application to use microsoft directdraw


MRU List Object Recognized!
Location: : S-1-5-21-2195734031-1358503957-4140643920-500\software\microsoft\directinput\mostrecentappli cation
Description : most recent application to use microsoft directinput


MRU List Object Recognized!
Location: : S-1-5-21-2195734031-1358503957-4140643920-500\software\microsoft\directinput\mostrecentappli cation
Description : most recent application to use microsoft directinput


MRU List Object Recognized!
Location: : S-1-5-21-2195734031-1358503957-4140643920-500\software\microsoft\internet explorer
Description : last download directory used in microsoft internet explorer


MRU List Object Recognized!
Location: : S-1-5-21-2195734031-1358503957-4140643920-500\software\microsoft\internet explorer\typedurls
Description : list of recently entered addresses in microsoft internet explorer


MRU List Object Recognized!
Location: : S-1-5-21-2195734031-1358503957-4140643920-500\software\microsoft\mediaplayer\player\recentfi lelist
Description : list of recently used files in microsoft windows media player


MRU List Object Recognized!
Location: : S-1-5-21-2195734031-1358503957-4140643920-500\software\microsoft\mediaplayer\preferences
Description : last playlist index loaded in microsoft windows media player


MRU List Object Recognized!
Location: : S-1-5-21-2195734031-1358503957-4140643920-500\software\microsoft\mediaplayer\preferences
Description : last playlist loaded in microsoft windows media player


MRU List Object Recognized!
Location: : S-1-5-21-2195734031-1358503957-4140643920-500\software\microsoft\windows\currentversion\expl orer\comdlg32\lastvisitedmru
Description : list of recent programs opened


MRU List Object Recognized!
Location: : S-1-5-21-2195734031-1358503957-4140643920-500\software\microsoft\windows\currentversion\expl orer\comdlg32\opensavemru
Description : list of recently saved files, stored according to file extension


MRU List Object Recognized!
Location: : S-1-5-21-2195734031-1358503957-4140643920-500\software\microsoft\windows\currentversion\expl orer\recentdocs
Description : list of recent documents opened


MRU List Object Recognized!
Location: : S-1-5-21-2195734031-1358503957-4140643920-500\software\microsoft\windows media\wmsdk\general
Description : windows media sdk


Listing running processes
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»

#:1 [smss.exe]
FilePath : \SystemRoot\System32\
ProcessID : 448
ThreadCreationTime : 08-06-2007 01:38:37 p.m.
BasePriority : Normal


#:2 [csrss.exe]
FilePath : \??\C:\WINDOWS\system32\
ProcessID : 644
ThreadCreationTime : 08-06-2007 01:38:39 p.m.
BasePriority : Normal


#:3 [winlogon.exe]
FilePath : \??\C:\WINDOWS\system32\
ProcessID : 668
ThreadCreationTime : 08-06-2007 01:38:39 p.m.
BasePriority : High


#:4 [services.exe]
FilePath : C:\WINDOWS\system32\
ProcessID : 740
ThreadCreationTime : 08-06-2007 01:38:40 p.m.
BasePriority : Normal
FileVersion : 5.1.2600.0 (xpclient.010817-1148)
ProductVersion : 5.1.2600.0
ProductName : Sistema operativo Microsoft® Windows®
CompanyName : Microsoft Corporation
FileDescription : Aplicación de servicios y controlador
InternalName : services.exe
LegalCopyright : Copyright (C) Microsoft Corporation. Reservados todos los derechos.
OriginalFilename : services.exe

#:5 [lsass.exe]
FilePath : C:\WINDOWS\system32\
ProcessID : 752
ThreadCreationTime : 08-06-2007 01:38:40 p.m.
BasePriority : Normal
FileVersion : 5.1.2600.1106 (xpsp1.020828-1920)
ProductVersion : 5.1.2600.1106
ProductName : Microsoft® Windows® Operating System
CompanyName : Microsoft Corporation
FileDescription : LSA Shell (Export Version)
InternalName : lsass.exe
LegalCopyright : © Microsoft Corporation. All rights reserved.
OriginalFilename : lsass.exe

#:6 [svchost.exe]
FilePath : C:\WINDOWS\system32\
ProcessID : 920
ThreadCreationTime : 08-06-2007 01:38:41 p.m.
BasePriority : Normal
FileVersion : 5.1.2600.0 (xpclient.010817-1148)
ProductVersion : 5.1.2600.0
ProductName : Microsoft® Windows® Operating System
CompanyName : Microsoft Corporation
FileDescription : Generic Host Process for Win32 Services
InternalName : svchost.exe
LegalCopyright : © Microsoft Corporation. All rights reserved.
OriginalFilename : svchost.exe

#:7 [svchost.exe]
FilePath : C:\WINDOWS\System32\
ProcessID : 1036
ThreadCreationTime : 08-06-2007 01:38:41 p.m.
BasePriority : Normal
FileVersion : 5.1.2600.0 (xpclient.010817-1148)
ProductVersion : 5.1.2600.0
ProductName : Microsoft® Windows® Operating System
CompanyName : Microsoft Corporation
FileDescription : Generic Host Process for Win32 Services
InternalName : svchost.exe
LegalCopyright : © Microsoft Corporation. All rights reserved.
OriginalFilename : svchost.exe

#:8 [svchost.exe]
FilePath : C:\WINDOWS\System32\
ProcessID : 1336
ThreadCreationTime : 08-06-2007 01:38:43 p.m.
BasePriority : Normal
FileVersion : 5.1.2600.0 (xpclient.010817-1148)
ProductVersion : 5.1.2600.0
ProductName : Microsoft® Windows® Operating System
CompanyName : Microsoft Corporation
FileDescription : Generic Host Process for Win32 Services
InternalName : svchost.exe
LegalCopyright : © Microsoft Corporation. All rights reserved.
OriginalFilename : svchost.exe

#:9 [svchost.exe]
FilePath : C:\WINDOWS\System32\
ProcessID : 1368
ThreadCreationTime : 08-06-2007 01:38:43 p.m.
BasePriority : Normal
FileVersion : 5.1.2600.0 (xpclient.010817-1148)
ProductVersion : 5.1.2600.0
ProductName : Microsoft® Windows® Operating System
CompanyName : Microsoft Corporation
FileDescription : Generic Host Process for Win32 Services
InternalName : svchost.exe
LegalCopyright : © Microsoft Corporation. All rights reserved.
OriginalFilename : svchost.exe

#:10 [spoolsv.exe]
FilePath : C:\WINDOWS\system32\
ProcessID : 1516
ThreadCreationTime : 08-06-2007 01:38:44 p.m.
BasePriority : Normal
FileVersion : 5.1.2600.0 (XPClient.010817-1148)
ProductVersion : 5.1.2600.0
ProductName : Microsoft® Windows® Operating System
CompanyName : Microsoft Corporation
FileDescription : Spooler SubSystem App
InternalName : spoolsv.exe
LegalCopyright : © Microsoft Corporation. All rights reserved.
OriginalFilename : spoolsv.exe

#:11 [avgamsvr.exe]
FilePath : C:\ARCHIV~1\Grisoft\AVGFRE~1\
ProcessID : 1704
ThreadCreationTime : 08-06-2007 01:38:51 p.m.
BasePriority : Normal
FileVersion : 7.5.0.453
ProductVersion : 7.5.0.453
ProductName : AVG Anti-Virus system
CompanyName : GRISOFT, s.r.o.
FileDescription : AVG Alert Manager
InternalName : avgamsvr
LegalCopyright : Copyright © 2007 GRISOFT, s.r.o.
OriginalFilename : avgamsvr.EXE

#:12 [avgupsvc.exe]
FilePath : C:\ARCHIV~1\Grisoft\AVGFRE~1\
ProcessID : 1724
ThreadCreationTime : 08-06-2007 01:38:51 p.m.
BasePriority : Normal
FileVersion : 7.5.0.420
ProductVersion : 7.5.0.420
ProductName : AVG 7.5 Anti-Virus System
CompanyName : GRISOFT, s.r.o.
FileDescription : AVG Update Service
InternalName : avgupsvc
LegalCopyright : Copyright © 2006 GRISOFT, s.r.o.
OriginalFilename : avgupdsvc.EXE

#:13 [avgemc.exe]
FilePath : C:\ARCHIV~1\Grisoft\AVGFRE~1\
ProcessID : 1736
ThreadCreationTime : 08-06-2007 01:38:51 p.m.
BasePriority : Normal
FileVersion : 7.5.0.460
ProductVersion : 7.5.0.460
ProductName : AVG Anti-Virus system
CompanyName : GRISOFT, s.r.o.
FileDescription : AVG E-Mail Scanner
InternalName : avgemc
LegalCopyright : Copyright © 2007 GRISOFT, s.r.o.
OriginalFilename : avgemc.exe

#:14 [svchost.exe]
FilePath : C:\WINDOWS\System32\
ProcessID : 1828
ThreadCreationTime : 08-06-2007 01:38:51 p.m.
BasePriority : Normal
FileVersion : 5.1.2600.0 (xpclient.010817-1148)
ProductVersion : 5.1.2600.0
ProductName : Microsoft® Windows® Operating System
CompanyName : Microsoft Corporation
FileDescription : Generic Host Process for Win32 Services
InternalName : svchost.exe
LegalCopyright : © Microsoft Corporation. All rights reserved.
OriginalFilename : svchost.exe

#:15 [wdfmgr.exe]
FilePath : C:\WINDOWS\System32\
ProcessID : 1872
ThreadCreationTime : 08-06-2007 01:38:51 p.m.
BasePriority : Normal
FileVersion : 5.2.3790.1230 built by: DNSRV(bld4act)
ProductVersion : 5.2.3790.1230
ProductName : Microsoft® Windows® Operating System
CompanyName : Microsoft Corporation
FileDescription : Windows User Mode Driver Manager
InternalName : WdfMgr
LegalCopyright : © Microsoft Corporation. All rights reserved.
OriginalFilename : WdfMgr.exe

#:16 [ustorsrv.exe]
FilePath : C:\WINDOWS\system32\
ProcessID : 1968
ThreadCreationTime : 08-06-2007 01:38:52 p.m.
BasePriority : Normal
FileVersion : 1, 1, 1, 10
ProductVersion : 1, 1, 1, 10
ProductName : OTi Content Service
CompanyName : OTi
FileDescription : OTi Content Service
InternalName : UniCntSrvSvc
LegalCopyright : Copyright (C) 2004
OriginalFilename : UniCntSrvSvc.EXE
Comments : Build on 6/10/2003

#:17 [explorer.exe]
FilePath : C:\WINDOWS\
ProcessID : 1024
ThreadCreationTime : 08-06-2007 01:40:06 p.m.
BasePriority : Normal
FileVersion : 6.00.2800.1106 (xpsp1.020828-1920)
ProductVersion : 6.00.2800.1106
ProductName : Sistema operativo Microsoft® Windows®
CompanyName : Microsoft Corporation
FileDescription : Explorador de Windows
InternalName : explorer
LegalCopyright : © Microsoft Corporation. Reservados todos los derechos.
OriginalFilename : EXPLORER.EXE

#:18 [udcsdr.exe]
FilePath : C:\Archivos de programa\Archivos comunes\DriveCleaner Free\
ProcessID : 1184
ThreadCreationTime : 08-06-2007 01:40:07 p.m.
BasePriority : Normal


#:19 [udcwap.exe]
FilePath : C:\Archivos de programa\Archivos comunes\DriveCleaner Free\
ProcessID : 1204
ThreadCreationTime : 08-06-2007 01:40:07 p.m.
BasePriority : Normal


#:20 [msmsgs.exe]
FilePath : C:\Archivos de programa\Messenger\
ProcessID : 1268
ThreadCreationTime : 08-06-2007 01:40:08 p.m.
BasePriority : Normal
FileVersion : 4.7.0041
ProductVersion : Version 4.7
ProductName : Messenger
CompanyName : Microsoft Corporation
FileDescription : Messenger
InternalName : msmsgs
LegalCopyright : Copyright (c) Microsoft Corporation 1997-2001
LegalTrademarks : Microsoft(R) is a registered trademark of Microsoft Corporation in the U.S. and/or other countries.
OriginalFilename : msmsgs.exe

#:21 [hotsync.exe]
FilePath : C:\Palm\
ProcessID : 1436
ThreadCreationTime : 08-06-2007 01:40:09 p.m.
BasePriority : Normal
FileVersion : 4.0
ProductVersion : 4.0
ProductName : HotSync® Manager, Palm Desktop
CompanyName : Palm, Inc.
FileDescription : HotSync® Manager Application
InternalName : HotSync®
LegalCopyright : Copyright © 1995-2001 Palm, Inc.
LegalTrademarks : HotSync® is a registered trademark of Palm, Inc.
OriginalFilename : Hotsync.exe

#:22 [iexplore.exe]
FilePath : C:\Archivos de programa\Internet Explorer\
ProcessID : 236
ThreadCreationTime : 08-06-2007 01:43:11 p.m.
BasePriority : Normal
FileVersion : 6.00.2800.1106 (xpsp1.020828-1920)
ProductVersion : 6.00.2800.1106
ProductName : Sistema operativo Microsoft® Windows®
CompanyName : Microsoft Corporation
FileDescription : Internet Explorer
InternalName : iexplore
LegalCopyright : © Microsoft Corporation. Reservados todos los derechos.
OriginalFilename : IEXPLORE.EXE

#:23 [winword.exe]
FilePath : C:\Archivos de programa\Microsoft Office\OFFICE11\
ProcessID : 324
ThreadCreationTime : 08-06-2007 01:57:08 p.m.
BasePriority : Normal


#:24 [acrobat.exe]
FilePath : C:\Archivos de programa\Adobe\Acrobat 7.0\Acrobat\
ProcessID : 972
ThreadCreationTime : 08-06-2007 02:08:00 p.m.
BasePriority : Normal
FileVersion : 7.0.0.2004121400
ProductVersion : 7.0.0.2004121400
ProductName : Adobe Acrobat
CompanyName : Adobe Systems Incorporated
FileDescription : Adobe Acrobat 7.0
LegalCopyright : Copyright 1984-2004 Adobe Systems Incorporated and its licensors. All rights reserved.
OriginalFilename : Acrobat.exe

#:25 [adobelm_cleanup.0001]
FilePath : C:\DOCUME~1\ADMINI~1\CONFIG~1\Temp\
ProcessID : 1364
ThreadCreationTime : 08-06-2007 02:09:09 p.m.
BasePriority : Normal
FileVersion : 1, 0, 0, 1
ProductVersion : 1, 0, 0, 1
ProductName : Macrovision Europe Ltd. Cleanup
CompanyName : Macrovision Europe Ltd.
FileDescription : Cleanup
InternalName : Cleanup
LegalCopyright : Copyright © 2002
OriginalFilename : Cleanup.exe

#:26 [adobelmsvc.exe]
FilePath : C:\Archivos de programa\Archivos comunes\Adobe Systems Shared\Service\
ProcessID : 1264
ThreadCreationTime : 08-06-2007 02:09:09 p.m.
BasePriority : Normal
FileVersion : 2.65.010
ProductName : Adobe LM Service
CompanyName : Adobe Systems
FileDescription : System Level Service Utility

#:27 [adobelm_cleanup.0001]
FilePath : C:\DOCUME~1\ADMINI~1\CONFIG~1\Temp\
ProcessID : 1148
ThreadCreationTime : 08-06-2007 02:09:17 p.m.
BasePriority : Normal
FileVersion : 1, 0, 0, 1
ProductVersion : 1, 0, 0, 1
ProductName : Macrovision Europe Ltd. Cleanup
CompanyName : Macrovision Europe Ltd.
FileDescription : Cleanup
InternalName : Cleanup
LegalCopyright : Copyright © 2002
OriginalFilename : Cleanup.exe

#:28 [iexplore.exe]
FilePath : C:\Archivos de programa\Internet Explorer\
ProcessID : 1180
ThreadCreationTime : 08-06-2007 02:10:46 p.m.
BasePriority : Normal
FileVersion : 6.00.2800.1106 (xpsp1.020828-1920)
ProductVersion : 6.00.2800.1106
ProductName : Sistema operativo Microsoft® Windows®
CompanyName : Microsoft Corporation
FileDescription : Internet Explorer
InternalName : iexplore
LegalCopyright : © Microsoft Corporation. Reservados todos los derechos.
OriginalFilename : IEXPLORE.EXE

#:29 [ad-aware.exe]
FilePath : C:\Archivos de programa\Lavasoft\Ad-Aware SE Personal\
ProcessID : 2296
ThreadCreationTime : 08-06-2007 02:14:29 p.m.
BasePriority : Normal
FileVersion : 6.2.0.236
ProductVersion : SE 106
ProductName : Lavasoft Ad-Aware SE
CompanyName : Lavasoft Sweden
FileDescription : Ad-Aware SE Core application
InternalName : Ad-Aware.exe
LegalCopyright : Copyright © Lavasoft AB Sweden
OriginalFilename : Ad-Aware.exe
Comments : All Rights Reserved

Memory scan result:
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
New critical objects: 0
Objects found so far: 17


Started registry scan
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»

Registry Scan result:
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
New critical objects: 0
Objects found so far: 17


Started deep registry scan
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»

Deep registry scan result:
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
New critical objects: 0
Objects found so far: 17


Started Tracking Cookie scan
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»


Tracking Cookie Object Recognized!
Type : IECache Entry
Data : administrador@ad.yieldmanager[2].txt
TAC Rating : 3
Category : Data Miner
Comment : Hits:119
Value : Cookie:administrador@ad.yieldmanager.com/
Expires : 07-06-2009 09:03:46 a.m.
LastSync : Hits:119
UseCount : 0
Hits : 119

Tracking Cookie Object Recognized!
Type : IECache Entry
Data : administrador@fastclick[1].txt
TAC Rating : 3
Category : Data Miner
Comment : Hits:12
Value : Cookie:administrador@fastclick.net/
Expires : 06-06-2009 02:45:46 p.m.
LastSync : Hits:12
UseCount : 0
Hits : 12

Tracking Cookie Object Recognized!
Type : IECache Entry
Data : administrador@atdmt[2].txt
TAC Rating : 3
Category : Data Miner
Comment : Hits:7
Value : Cookie:administrador@atdmt.com/
Expires : 04-06-2012 07:00:00 p.m.
LastSync : Hits:7
UseCount : 0
Hits : 7

Tracking Cookie Object Recognized!
Type : IECache Entry
Data : administrador@c5.zedo[2].txt
TAC Rating : 3
Category : Data Miner
Comment : Hits:4
Value : Cookie:administrador@c5.zedo.com/
Expires : 21-06-2007 09:30:18 a.m.
LastSync : Hits:4
UseCount : 0
Hits : 4

Tracking Cookie Object Recognized!
Type : IECache Entry
Data : administrador@doubleclick[1].txt
TAC Rating : 3
Category : Data Miner
Comment : Hits:12
Value : Cookie:administrador@doubleclick.net/
Expires : 06-06-2010 09:52:00 a.m.
LastSync : Hits:12
UseCount : 0
Hits : 12

Tracking Cookie Object Recognized!
Type : IECache Entry
Data : administrador@msnportal.112.2o7[1].txt
TAC Rating : 3
Category : Data Miner
Comment : Hits:3
Value : Cookie:administrador@msnportal.112.2o7.net/
Expires : 05-06-2012 09:51:28 a.m.
LastSync : Hits:3
UseCount : 0
Hits : 3

Tracking Cookie Object Recognized!
Type : IECache Entry
Data : administrador@bs.serving-sys[1].txt
TAC Rating : 3
Category : Data Miner
Comment : Hits:1
Value : Cookie:administrador@bs.serving-sys.com/
Expires : 31-12-2037 05:00:00 p.m.
LastSync : Hits:1
UseCount : 0
Hits : 1

Tracking Cookie Object Recognized!
Type : IECache Entry
Data : administrador@zedo[2].txt
TAC Rating : 3
Category : Data Miner
Comment : Hits:64
Value : Cookie:administrador@zedo.com/
Expires : 04-06-2017 09:30:32 a.m.
LastSync : Hits:64
UseCount : 0
Hits : 64

Tracking Cookie Object Recognized!
Type : IECache Entry
Data : administrador@112.2o7[1].txt
TAC Rating : 3
Category : Data Miner
Comment : Hits:4
Value : Cookie:administrador@112.2o7.net/
Expires : 05-06-2012 06:57:30 p.m.
LastSync : Hits:4
UseCount : 0
Hits : 4

Tracking Cookie Object Recognized!
Type : IECache Entry
Data : administrador@hitbox[1].txt
TAC Rating : 3
Category : Data Miner
Comment : Hits:19
Value : Cookie:administrador@hitbox.com/
Expires : 07-06-2008 09:12:26 a.m.
LastSync : Hits:19
UseCount : 0
Hits : 19

Tracking Cookie Object Recognized!
Type : IECache Entry
Data : administrador@ehg-youtube.hitbox[1].txt
TAC Rating : 3
Category : Data Miner
Comment : Hits:9
Value : Cookie:administrador@ehg-youtube.hitbox.com/
Expires : 07-06-2008 09:12:26 a.m.
LastSync : Hits:9
UseCount : 0
Hits : 9

Tracking Cookie Object Recognized!
Type : IECache Entry
Data : administrador@casalemedia[2].txt
TAC Rating : 3
Category : Data Miner
Comment : Hits:16
Value : Cookie:administrador@casalemedia.com/
Expires : 28-05-2008 01:36:12 p.m.
LastSync : Hits:16
UseCount : 0
Hits : 16

Tracking Cookie Object Recognized!
Type : IECache Entry
Data : administrador@serving-sys[2].txt
TAC Rating : 3
Category : Data Miner
Comment : Hits:10
Value : Cookie:administrador@serving-sys.com/
Expires : 31-12-2037 05:00:00 p.m.
LastSync : Hits:10
UseCount : 0
Hits : 10

Tracking cookie scan result:
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
New critical objects: 13
Objects found so far: 30



Deep scanning and examining files (C:)
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»

Disk Scan Result for C:\
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
New critical objects: 0
Objects found so far: 30


Deep scanning and examining files (G:)
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»

Disk Scan Result for G:\
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
New critical objects: 0
Objects found so far: 30


Scanning Hosts file......
Hosts file location:"C:\WINDOWS\system32\drivers\etc\hosts".
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»» »»»»»»»»»»»»»»»»»»»»»»»»»»

Hosts file scan result:
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
2 entries scanned.
New critical objects:0
Objects found so far: 30




Performing conditional scans...
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»

Conditional scan result:
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
New critical objects: 0
Objects found so far: 30

09:24:42 a.m. Scan Complete

Summary Of This Scan
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
Total scanning time:00:10:01.62
Objects scanned:161569
Objects identified:13
Objects ignored:0
New critical objects:13


GRACIAS POR LA AYUDA QUE PUEDAN PRESTARME

Hola Silvio Zambrano Bienvenid@ a Infospyware (http://www.infospyware.com/)

- Antes de proceder con los pasos para eliminar spyware, desinstale programas como: MSN Plus, KaZaA, Imesh, o cualquier otro que se encuentre en estas listas:Lista 1 (http://www.forospyware.com/t5.html)-Lista 2 (http://www.forospyware.com/t7.html)-Lista 3 (http://www.forospyware.com/t61051.html)

- Visita Windows Update (http://update.microsoft.com/windowsupdate/v6/default.aspx?ln=es) para que descargues las últimas actualizaciones criticas de seguridad, y Aquí (http://www.microsoft.com/windows/ie_intl/es/download/default.mspx) para el internet explorer,si tu sistema no es original desde aquí (http://www.wilkinsonpc.com.co/free/actualizaciones-parches-para-windows.html)

- Descargate las siguientes herramientas, pero no la ejecutes aún


SuperAntiSpyware (http://www.infospyware.com/Anti-Spywares.htm) (actualizalo)
Ccleaner(Manual) (http://www.forospyware.com/t39511.html)


- "Apaga Restaurar Sistema" (http://www.forospyware.com/292280-post2.html)

- Activa la opción "Ver archivos ocultos" (http://www.forospyware.com/292282-post3.html)

- "Reinicia a prueba de fallos" (http://www.forospyware.com/292284-post4.html)

- Usa el Ccleaner para limpiar el sistema,primero utilizá la opción de "Limpiador" para borrar cookies, temporales de Internet y todos los archivos que este te muestre como obsoletos.y luego usa su opción de "Registro" para limpiar todo el registro de Windows (haciendo copia de seguridad).

- Ejecuta SuperAntiSpyware y tú antivirus (previamente actualizado)

- Reinicia el PC a "Modo normal"

- Instálate el SpywareBlaster 3.4 (http://www.infospyware.com/Anti-Spywares.htm) Manual (http://www.infospyware.com/Manual%20de%20SpywareBlaster.htm)

- Elimina todas las cuarentenas que tengas y vacia la papelera tambien.

- Ejecuta solamente y nuevamente SuperAntiSpyware

- Pasa 2 antivirus online el Ewido Scanner Online (http://www.forospyware.com/t42048.html) y Kaspersky Online Scanner (http://www.forospyware.com/t55793.html).si hay algo que no te eliminen lo pones aquí con su ruta completa.

Cuando termines los pasos Activa restaurar sistema y esconde los archivos ocultos...

De preferencia, imprime las indicaciones para que se te haga más fácil seguirlas.

salu2 http://img455.imageshack.us/img455/7932/icontwistedrp4.gif
Recuerda volver y contarnos los resultados

Gracias **Devil May Cry** por tu ayuda, segui los pasos indicados, elimine todos los virus, pero el kaspersky me detecta unos virus, a continuación esta el reporte, ¿qué opina ud al respecto?


-------------------------------------------------------------------------------
KASPERSKY ONLINE SCANNER REPORT
Friday, June 08, 2007 5:56:23 PM
Operating System: Microsoft Windows XP Professional, Service Pack 1 (Build 2600)
Kaspersky Online Scanner version: 5.0.93.0
Kaspersky Anti-Virus database last update: 9/06/2007
Kaspersky Anti-Virus database records: 341441
-------------------------------------------------------------------------------

Scan Settings:
Scan using the following antivirus database: extended
Scan Archives: true
Scan Mail Bases: true

Scan Target - My Computer:
C:\
D:\
G:\

Scan Statistics:
Total number of scanned objects: 45285
Number of viruses found: 4
Number of infected objects: 4
Number of suspicious objects: 0
Duration of the scan process: 00:49:27

Infected Object Name / Virus Name / Last Action
C:\Archivos de programa\Archivos comunes\DriveCleaner Free\__delete_on_reboot__u_d_c_w_a_p_._e_x_e_ Infected: not-a-virus:Downloader.Win32.WinFixer.l skipped
C:\Documents and Settings\Administrador\Configuración local\Archivos temporales de Internet\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\Administrador\Configuración local\Datos de programa\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\Administrador\Configuración local\Datos de programa\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\Administrador\Configuración local\Historial\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\Administrador\Configuración local\Historial\History.IE5\MSHist0120070608200706 09\index.dat Object is locked skipped
C:\Documents and Settings\Administrador\Configuración local\Temp\Perflib_Perfdata_120.dat Object is locked skipped
C:\Documents and Settings\Administrador\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\Administrador\Datos de programa\SUPERAntiSpyware.com\SUPERAntiSpyware\SUP ERANTISPYWARE.LOG Object is locked skipped
C:\Documents and Settings\Administrador\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\Administrador\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\All Users\Datos de programa\avg7\Log\emc.log Object is locked skipped
C:\Documents and Settings\All Users\Datos de programa\Grisoft\Avg7Data\avg7log.log Object is locked skipped
C:\Documents and Settings\All Users\Datos de programa\Grisoft\Avg7Data\avg7log.log.lck Object is locked skipped
C:\Documents and Settings\LocalService\Configuración local\Archivos temporales de Internet\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Configuración local\Datos de programa\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\LocalService\Configuración local\Datos de programa\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\LocalService\Configuración local\Historial\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\Configuración local\Datos de programa\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\NetworkService\Configuración local\Datos de programa\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked skipped
C:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped
C:\System Volume Information\tracking.log Object is locked skipped
C:\WINDOWS\CSC\00000001 Object is locked skipped
C:\WINDOWS\Debug\oakley.log Object is locked skipped
C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped
C:\WINDOWS\SchedLgU.Txt Object is locked skipped
C:\WINDOWS\Sti_Trace.log Object is locked skipped
C:\WINDOWS\system32\alt.exe.exe Infected: Packed.Win32.Tibs.y skipped
C:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\default Object is locked skipped
C:\WINDOWS\system32\config\default.LOG Object is locked skipped
C:\WINDOWS\system32\config\SAM Object is locked skipped
C:\WINDOWS\system32\config\SAM.LOG Object is locked skipped
C:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\SECURITY Object is locked skipped
C:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped
C:\WINDOWS\system32\config\software Object is locked skipped
C:\WINDOWS\system32\config\software.LOG Object is locked skipped
C:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\system Object is locked skipped
C:\WINDOWS\system32\config\system.LOG Object is locked skipped
C:\WINDOWS\system32\config\systemprofile\Configura ción local\Archivos temporales de Internet\Content.IE5\index.dat Object is locked skipped
C:\WINDOWS\system32\config\systemprofile\Configura ción local\Historial\History.IE5\index.dat Object is locked skipped
C:\WINDOWS\system32\config\systemprofile\Cookies\i ndex.dat Object is locked skipped
C:\WINDOWS\system32\h323log.txt Object is locked skipped
C:\WINDOWS\system32\ipv6monk.dll Infected: Trojan-Spy.Win32.BZub.ee skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DAT A Object is locked skipped
C:\WINDOWS\v030999.exe Infected: Trojan-Spy.Win32.BZub.if skipped
C:\WINDOWS\wiadebug.log Object is locked skipped
C:\WINDOWS\wiaservc.log Object is locked skipped

Scan process completed.




Gracias por su tiempo y ayuda, espero respuestas, otra cosa, antes (no se ahora) tenía el mismo problema que se plantea en el foro: http://www.forospyware.com/t88279.html, es necesario hacer todos los pasos que indica ese foro o con lo que ya hice es suficiente.

Gracias.

Atte.
Silvio

El problema con la página de Google se arregló, el motor de busqueda funciona bien y no aparece los links antes mencionados encabezando la lista, en este momento estoy corriendo el AD-WARE para confirmar q el problema se solucionó y no detecta más spyware, por otro lado tengo la duda con la página de www.badoo.com que es una pagina para hacer amigos, chat, y esas cosas, ¿debería no visitarla más? que me aconceja
Gracias.

hola..
descargate e instala estos programas..

spyware blaster (http://infospyware.com/Anti-Spywares.htm) este es el manual (http://infospyware.com/Manual%20de%20SpywareBlaster.htm)
SUPERantispyware (http://infospyware.com/Anti-Spywares.htm)
ccleaner (http://ccleaner.softonic.com/) este es el manual (http://www.forospyware.com/t39511.html)

haz lo siguiente..

deshabilita la opcion restaurar sistema (http://www.forospyware.com/292280-post2.html)
habilita ver archivos ocultos (http://www.forospyware.com/292282-post3.html) en el sistema
inicia la pc en modo seguro con funciones a red (http://www.forospyware.com/292284-post4.html) (si no puedes entrar en modo seguro de esa manera descargate esta herramienta bootsafe (http://www.superadblocker.com/downloads/BootSafe.zip))

ahora utiliza el SUPERantispyware y revisa y elimina lo que te salga, luego usa el ccleaner en limpiador y en registro haciendo una copia de registro...

Ahora Elimina los Siguientes Archivos: ( Si no se dejan Eliminar usa Killbox (http://www.forospyware.com/49-post6.html) o FileAssasin (http://www.forospyware.com/t68195.html#post298547)):
C:\Archivos de programa\Archivos comunes\DriveCleaner Free\__delete_on_reboot__u_d_c_w_a_p_._e_x_e_
C:\WINDOWS\system32\C:\WINDOWS\system32\ipv6monk.d ll
C:\WINDOWS\system32\alt.exe.exe
C:\WINDOWS\v030999.exe


ahora has un analisis en panda (http://www.infospyware.com/Anti-Virus/Panda/) este es el manual (http://www.forospyware.com/t75446.html) para revisar si todavia quedo alguna infeccion en la pc y nos pegas su reporte..
Inicia tu pc en Modo Normal y deshabilita ver archivos ocultos y habilita de nuevo restaurar sistema..

axl456:
Los pasos son parecidos a la primera respuesta, cree que sea necesario hacerlo?
q opina a cerca de la pagina de baddo?

si realizalos ya que te estoy mandando a borrar unos archivos que el analisis detecto como infectados, realizalos todos excepto los de descargar las herramientas :rolleyes: