Foro de InfoSpyware - Foro de Hijackthis - Foro de Virus

PRIMERO QUIERO DAR LAS GRACIAS POR AYUDARME CON MI PC PERO AHORA EL PROBLEMA ES EN EL PC DE MI NOVIA ESCANEE CON KASPERSKY ONLINE Y ENCONTRO 18 VIRUS Y 40 CARPETAS INFECTADAS QUE HACER?

-------------------------------------------------------------------------------
KASPERSKY ONLINE SCANNER REPORT
Wednesday, October 03, 2007 9:19:21 PM
Operating System: Microsoft Windows XP Professional, Service Pack 1 (Build 2600)
Kaspersky Online Scanner version: 5.0.93.1
Kaspersky Anti-Virus database last update: 4/10/2007
Kaspersky Anti-Virus database records: 426939
-------------------------------------------------------------------------------

Scan Settings:
Scan using the following antivirus database: extended
Scan Archives: true
Scan Mail Bases: true

Scan Target - My Computer:
A:\
C:\
D:\
E:\
F:\

Scan Statistics:
Total number of scanned objects: 71886
Number of viruses found: 18
Number of infected objects: 40
Number of suspicious objects: 0
Duration of the scan process: 0129

Infected Object Name / Virus Name / Last Action
C:\Archivos de programa\Alwil Software\Avast4\DATA\aswResp.dat Object is locked skipped
C:\Archivos de programa\Alwil Software\Avast4\DATA\Avast4.db Object is locked skipped
C:\Archivos de programa\Alwil Software\Avast4\DATA\integ\avast.int Object is locked skipped
C:\Archivos de programa\Alwil Software\Avast4\DATA\log\AshWebSv.ws Object is locked skipped
C:\Archivos de programa\Alwil Software\Avast4\DATA\log\aswMaiSv.log Object is locked skipped
C:\Archivos de programa\Alwil Software\Avast4\DATA\log\nshield.log Object is locked skipped
C:\Archivos de programa\Alwil Software\Avast4\DATA\report\Protección residente.txt Object is locked skipped
C:\Documents and Settings\Home\Configuración local\Archivos temporales de Internet\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\Home\Configuración local\Archivos temporales de Internet\Content.IE5\ZO1TXCOT\mymsn[1] Object is locked skipped
C:\Documents and Settings\Home\Configuración local\Datos de programa\Ahead\Nero Home\bl.db Object is locked skipped
C:\Documents and Settings\Home\Configuración local\Datos de programa\Ahead\Nero Home\bl.db-journal Object is locked skipped
C:\Documents and Settings\Home\Configuración local\Datos de programa\Ahead\Nero Home\is2.db Object is locked skipped
C:\Documents and Settings\Home\Configuración local\Datos de programa\Ahead\Nero Home\is2.db-journal Object is locked skipped
C:\Documents and Settings\Home\Configuración local\Datos de programa\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\Home\Configuración local\Datos de programa\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\Home\Configuración local\Historial\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\Home\Configuración local\Historial\History.IE5\MSHist0120071003200710 04\index.dat Object is locked skipped
C:\Documents and Settings\Home\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\Home\Datos de programa\Slide\log\Slide.log Object is locked skipped
C:\Documents and Settings\Home\Datos de programa\Slide\log\SlideSS-3852.log Object is locked skipped
C:\Documents and Settings\Home\Datos de programa\Slide\log\SlideSS.log Object is locked skipped
C:\Documents and Settings\Home\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\Home\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\LocalService\Configuración local\Archivos temporales de Internet\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Configuración local\Datos de programa\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\LocalService\Configuración local\Datos de programa\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\LocalService\Configuración local\Historial\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\Configuración local\Datos de programa\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\NetworkService\Configuración local\Datos de programa\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked skipped
C:\System Volume Information\_restore{A4F1A874-4F1A-4B50-96D0-E1BFBF7FAFCE}\RP109\A0059431.DLL Infected: not-a-virus:AdTool.Win32.MyWebSearch.as skipped
C:\System Volume Information\_restore{A4F1A874-4F1A-4B50-96D0-E1BFBF7FAFCE}\RP109\A0059432.dll Infected: not-a-virus:AdTool.Win32.MyWebSearch skipped
C:\System Volume Information\_restore{A4F1A874-4F1A-4B50-96D0-E1BFBF7FAFCE}\RP109\A0059433.dll Infected: not-a-virus:AdTool.Win32.MyWebSearch.au skipped
C:\System Volume Information\_restore{A4F1A874-4F1A-4B50-96D0-E1BFBF7FAFCE}\RP109\A0059434.scr Infected: not-a-virus:AdTool.Win32.MyWebSearch skipped
C:\System Volume Information\_restore{A4F1A874-4F1A-4B50-96D0-E1BFBF7FAFCE}\RP109\A0059441.ex_ Infected: not-a-virus:AdTool.Win32.MyWebSearch skipped
C:\System Volume Information\_restore{A4F1A874-4F1A-4B50-96D0-E1BFBF7FAFCE}\RP109\A0059442.DLL Infected: not-a-virus:AdTool.Win32.MyWebSearch.at skipped
C:\System Volume Information\_restore{A4F1A874-4F1A-4B50-96D0-E1BFBF7FAFCE}\RP109\A0059444.DLL Infected: not-a-virus:AdTool.Win32.MyWebSearch.bc skipped
C:\System Volume Information\_restore{A4F1A874-4F1A-4B50-96D0-E1BFBF7FAFCE}\RP109\A0059445.DLL Infected: not-a-virus:AdTool.Win32.MyWebSearch skipped
C:\System Volume Information\_restore{A4F1A874-4F1A-4B50-96D0-E1BFBF7FAFCE}\RP109\A0059446.DLL Infected: not-a-virus:AdTool.Win32.MyWebSearch.af skipped
C:\System Volume Information\_restore{A4F1A874-4F1A-4B50-96D0-E1BFBF7FAFCE}\RP109\A0059447.DLL Infected: not-a-virus:AdTool.Win32.MyWebSearch.au skipped
C:\System Volume Information\_restore{A4F1A874-4F1A-4B50-96D0-E1BFBF7FAFCE}\RP109\A0059448.DLL Infected: not-a-virus:AdTool.Win32.MyWebSearch.au skipped
C:\System Volume Information\_restore{A4F1A874-4F1A-4B50-96D0-E1BFBF7FAFCE}\RP109\A0059449.SCR Infected: not-a-virus:AdTool.Win32.MyWebSearch skipped
C:\System Volume Information\_restore{A4F1A874-4F1A-4B50-96D0-E1BFBF7FAFCE}\RP109\A0059450.DLL Infected: not-a-virus:AdTool.Win32.MyWebSearch skipped
C:\System Volume Information\_restore{A4F1A874-4F1A-4B50-96D0-E1BFBF7FAFCE}\RP109\A0059451.EXE Infected: not-a-virus:AdTool.Win32.MyWebSearch.a skipped
C:\System Volume Information\_restore{A4F1A874-4F1A-4B50-96D0-E1BFBF7FAFCE}\RP109\A0059452.DLL Infected: not-a-virus:AdTool.Win32.MyWebSearch.an skipped
C:\System Volume Information\_restore{A4F1A874-4F1A-4B50-96D0-E1BFBF7FAFCE}\RP109\A0059453.DLL Infected: not-a-virus:AdTool.Win32.MyWebSearch.aq skipped
C:\System Volume Information\_restore{A4F1A874-4F1A-4B50-96D0-E1BFBF7FAFCE}\RP109\A0059454.DLL Infected: not-a-virus:AdTool.Win32.MyWebSearch.bh skipped
C:\System Volume Information\_restore{A4F1A874-4F1A-4B50-96D0-E1BFBF7FAFCE}\RP109\A0059456.DLL Infected: not-a-virus:AdTool.Win32.MyWebSearch.bc skipped
C:\System Volume Information\_restore{A4F1A874-4F1A-4B50-96D0-E1BFBF7FAFCE}\RP109\A0059457.DLL Infected: not-a-virus:AdTool.Win32.MyWebSearch.ax skipped
C:\System Volume Information\_restore{A4F1A874-4F1A-4B50-96D0-E1BFBF7FAFCE}\RP109\A0059459.DLL Infected: not-a-virus:AdTool.Win32.MyWebSearch.bc skipped
C:\System Volume Information\_restore{A4F1A874-4F1A-4B50-96D0-E1BFBF7FAFCE}\RP109\A0059461.DLL Infected: not-a-virus:AdTool.Win32.MyWebSearch skipped
C:\System Volume Information\_restore{A4F1A874-4F1A-4B50-96D0-E1BFBF7FAFCE}\RP109\A0059462.DLL Infected: not-a-virus:AdTool.Win32.MyWebSearch.as skipped
C:\System Volume Information\_restore{A4F1A874-4F1A-4B50-96D0-E1BFBF7FAFCE}\RP109\A0059463.DLL Infected: not-a-virus:AdTool.Win32.MyWebSearch.ad skipped
C:\System Volume Information\_restore{A4F1A874-4F1A-4B50-96D0-E1BFBF7FAFCE}\RP109\A0059465.EXE Infected: not-a-virus:AdTool.Win32.MyWebSearch.au skipped
C:\System Volume Information\_restore{A4F1A874-4F1A-4B50-96D0-E1BFBF7FAFCE}\RP109\A0059466.EXE Infected: not-a-virus:AdTool.Win32.MyWebSearch.au skipped
C:\System Volume Information\_restore{A4F1A874-4F1A-4B50-96D0-E1BFBF7FAFCE}\RP109\A0059467.DLL Infected: not-a-virus:AdTool.Win32.MyWebSearch.i skipped
C:\System Volume Information\_restore{A4F1A874-4F1A-4B50-96D0-E1BFBF7FAFCE}\RP109\A0059469.DLL Infected: not-a-virus:AdWare.Win32.FunWeb.e skipped
C:\System Volume Information\_restore{A4F1A874-4F1A-4B50-96D0-E1BFBF7FAFCE}\RP109\A0059565.DLL Infected: not-a-virus:AdTool.Win32.MyWebSearch.as skipped
C:\System Volume Information\_restore{A4F1A874-4F1A-4B50-96D0-E1BFBF7FAFCE}\RP109\A0059566.dll Infected: not-a-virus:AdTool.Win32.MyWebSearch.au skipped
C:\System Volume Information\_restore{A4F1A874-4F1A-4B50-96D0-E1BFBF7FAFCE}\RP109\A0059567.DLL Infected: not-a-virus:AdTool.Win32.MyWebSearch.l skipped
C:\System Volume Information\_restore{A4F1A874-4F1A-4B50-96D0-E1BFBF7FAFCE}\RP109\A0059568.DLL Infected: not-a-virus:AdTool.Win32.MyWebSearch.au skipped
C:\System Volume Information\_restore{A4F1A874-4F1A-4B50-96D0-E1BFBF7FAFCE}\RP109\A0059569.DLL Infected: not-a-virus:AdTool.Win32.MyWebSearch.bc skipped
C:\System Volume Information\_restore{A4F1A874-4F1A-4B50-96D0-E1BFBF7FAFCE}\RP109\A0059570.EXE Infected: not-a-virus:AdTool.Win32.MyWebSearch skipped
C:\System Volume Information\_restore{A4F1A874-4F1A-4B50-96D0-E1BFBF7FAFCE}\RP109\A0059571.DLL Infected: not-a-virus:AdTool.Win32.MyWebSearch.au skipped
C:\System Volume Information\_restore{A4F1A874-4F1A-4B50-96D0-E1BFBF7FAFCE}\RP109\A0059572.DLL Infected: not-a-virus:AdTool.Win32.MyWebSearch skipped
C:\System Volume Information\_restore{A4F1A874-4F1A-4B50-96D0-E1BFBF7FAFCE}\RP109\A0059607.dll Infected: not-a-virus:AdTool.Win32.MyWebSearch.bc skipped
C:\System Volume Information\_restore{A4F1A874-4F1A-4B50-96D0-E1BFBF7FAFCE}\RP109\change.log Object is locked skipped
C:\WINDOWS\Debug\oakley.log Object is locked skipped
C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped
C:\WINDOWS\SchedLgU.Txt Object is locked skipped
C:\WINDOWS\SoftwareDistribution\ReportingEvents.lo g Object is locked skipped
C:\WINDOWS\Sti_Trace.log Object is locked skipped
C:\WINDOWS\system32\config\Antiviru.evt Object is locked skipped
C:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\default Object is locked skipped
C:\WINDOWS\system32\config\default.LOG Object is locked skipped
C:\WINDOWS\system32\config\SAM Object is locked skipped
C:\WINDOWS\system32\config\SAM.LOG Object is locked skipped
C:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\SECURITY Object is locked skipped
C:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped
C:\WINDOWS\system32\config\software Object is locked skipped
C:\WINDOWS\system32\config\software.LOG Object is locked skipped
C:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\system Object is locked skipped
C:\WINDOWS\system32\config\system.LOG Object is locked skipped
C:\WINDOWS\system32\config\systemprofile\Configura ción local\Archivos temporales de Internet\Content.IE5\index.dat Object is locked skipped
C:\WINDOWS\system32\config\systemprofile\Configura ción local\Historial\History.IE5\index.dat Object is locked skipped
C:\WINDOWS\system32\config\systemprofile\Cookies\i ndex.dat Object is locked skipped
C:\WINDOWS\system32\h323log.txt Object is locked skipped
C:\WINDOWS\system32\slidess.scr.log Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DAT A Object is locked skipped
C:\WINDOWS\Temp\Perflib_Perfdata_568.dat Object is locked skipped
C:\WINDOWS\Temp\_avast4_\unp172374370.tmp Infected: not-a-virus:AdWare.Win32.BHO.cz skipped
C:\WINDOWS\Temp\_avast4_\Webshlock.txt Object is locked skipped
C:\WINDOWS\vsnpstd.exe Infected: Trojan.Win32.Patched.af skipped
C:\WINDOWS\wiadebug.log Object is locked skipped
C:\WINDOWS\wiaservc.log Object is locked skipped
C:\WINDOWS\WindowsUpdate.log Object is locked skipped
D:\Christian\Programas\Bsplayer\bsplayer211[1].940_clip.exe/data0011 Infected: not-a-virus:AdTool.Win32.WhenU.a skipped
D:\Christian\Programas\Bsplayer\bsplayer211[1].940_clip.exe NSIS: infected - 1 skipped

Scan process completed.

Hola tekilazo

Has los siguientes pasos:

• "Apaga Restaurar Sistema"
• Reinicias el sistema
• Activas de nuevo la restauración
• Reinicias nuevamente

Descarga el FileASSASSIN, busca y elimina los siguientes archivos:

C:\WINDOWS\Temp\_avast4_\unp172374370.tmp
D:\Christian\Programas\Bsplayer\bsplayer211[1].940_clip.exe

Sube el siguiente archivo a Virus Total y me pegas el reporte que te genere

C:\WINDOWS\vsnpstd.exe

Pasale el Panda ActiveScan Online - [Manual] y me pegas el reporte que te genere.

Salu2