Foro de InfoSpyware - Foro de Hijackthis - Foro de Virus

Hola...

Lamento dar molestia con este tema, pero apenas se me acaba de presentar esto del título y siempre que tengo duda chequeo el foro hallar respuestas que afortunadamente en otros casos ya han sido consultadas.
Justo cuando estaba pasando datos entre mi pc y un Nokia3500 me apareció el aviso de Kasper antivirus (trial) de Worm.win32.AutoRun.cea en la unidad E: que es la que autoasigna para dispositivos externos.

Le di Delete y aún así no lo eliminó y desconecté el teléfono para probar con otro dispositivo sin que me vuelva a reportar el Worm.

Me preocupa porque no sé qué efectos tiene. Coincide con un problema con mi línea de telefono ordinaria que no me permite realizar llamadas o recibirlas pues se reporta como ocupado.

Aún no termina el scaneo pero tengo el reporte de eventos:

Protection : running
--------------------
Total scanned: 74009
Detected: 7
Untreated: 0
Start time: 09/02/2008 16:39:36
Duration: 01:38:22


Detected
--------
Status Object
------ ------
deleted: Trojan program Trojan-Downloader.Win32.Firu.aa File: c:\winnat\system32\6q4cna2x.exe
detected: Trojan program Trojan-Downloader.Win32.Firu.ab URL: http://199.202.248.50/ial/1200940282/f0daf361dfcfbd3933c3ad24dc67b640.exe?affid=5121
deleted: Trojan program Trojan-Downloader.Win32.Firu.ab File: C:\jfidoj.exe
deleted: Trojan program Trojan-Downloader.Win32.Firu.ab File: C:\Documents and Settings\Administrador\Configuración local\Archivos temporales de Internet\Content.IE5\MWRGZISH\f0daf361dfcfbd3933c3 ad24dc67b640[1]
detected: Trojan program Trojan-Downloader.Win32.Firu.ab URL: http://199.202.248.50/ial/1201011292/87652222183c3967ecf38375a3d7d56f.exe?affid=5121
deleted: Trojan program Trojan-Downloader.Win32.Firu.ab File: C:\Documents and Settings\Administrador\Configuración local\Archivos temporales de Internet\Content.IE5\KHSTIVCT\87652222183c3967ecf3 8375a3d7d56f[1]
not found: virus Worm.Win32.AutoRun.cea File: E:\Autorun.inf


Events
------
Time Event
---- -----
21/01/2008 12:06:15 Database is out of date, leaving your computer at risk of infection. Please update your database.
21/01/2008 12:06:15 Protection of your computer is enabled.
21/01/2008 12:16:15 File black.lst is missing or corrupted. Please run Updater to fix this problem.
21/01/2008 12:16:26 Please restart your computer to complete the installation of new or updated protection components.
21/01/2008 12:16:30 Update completed successfully
21/01/2008 12:16:42 File c:\winnat\system32\6q4cna2x.exe: detected: Trojan program 'Trojan-Downloader.Win32.Firu.aa'.
21/01/2008 12:16:42 Security threats have been detected. You are advised to neutralize them immediately.
21/01/2008 12:16:42 File c:\winnat\system32\6q4cna2x.exe: is still infected, postponed.
21/01/2008 12:16:45 File c:\winnat\system32\6q4cna2x.exe: detected: Trojan program 'Trojan-Downloader.Win32.Firu.aa'.
21/01/2008 12:17:08 File c:\winnat\system32\6q4cna2x.exe: deleted.
21/01/2008 12:32:42 Process (PID 1648) tried to access Kaspersky Anti-Virus process (PID 1996), but the action has been blocked by the Self-Defense component. No action on your part is required.
21/01/2008 12:32:42 Process (PID 1648) tried to access Kaspersky Anti-Virus process (PID 492), but the action has been blocked by the Self-Defense component. No action on your part is required.
21/01/2008 14:20:56 Update completed successfully
21/01/2008 14:41:24 Protection of your computer is not running. You are advised to resume protection.
21/01/2008 14:43:07 Process (PID 528) tried to access Kaspersky Anti-Virus process (PID 548), but the action has been blocked by the Self-Defense component. No action on your part is required.
21/01/2008 14:43:30 You are advised to perform a full computer scan as soon as possible.
21/01/2008 14:43:31 Protection of your computer is enabled.
21/01/2008 16:25:04 Update completed successfully
21/01/2008 16:31:30 Malicious HTTP object <http://199.202.248.50/ial/1200940282/f0daf361dfcfbd3933c3ad24dc67b640.exe?affid=5121>: detected: Trojan program 'Trojan-Downloader.Win32.Firu.ab'.
21/01/2008 16:31:30 !NOLOC! StatusId(0) EventID(7)
21/01/2008 16:31:32 File C:\jfidoj.exe: detected: Trojan program 'Trojan-Downloader.Win32.Firu.ab'.
21/01/2008 16:31:32 Security threats have been detected. You are advised to neutralize them immediately.
21/01/2008 16:31:42 File C:\jfidoj.exe: deleted.
21/01/2008 16:31:45 File C:\Documents and Settings\Administrador\Configuración local\Archivos temporales de Internet\Content.IE5\MWRGZISH\f0daf361dfcfbd3933c3 ad24dc67b640[1]: detected: Trojan program 'Trojan-Downloader.Win32.Firu.ab'.
21/01/2008 16:31:45 Security threats have been detected. You are advised to neutralize them immediately.
21/01/2008 16:31:48 File C:\Documents and Settings\Administrador\Configuración local\Archivos temporales de Internet\Content.IE5\MWRGZISH\f0daf361dfcfbd3933c3 ad24dc67b640[1]: deleted.
21/01/2008 16:38:21 Process (PID 536) tried to access Kaspersky Anti-Virus process (PID 556), but the action has been blocked by the Self-Defense component. No action on your part is required.
21/01/2008 16:38:38 You are advised to perform a full computer scan as soon as possible.
21/01/2008 16:38:39 Protection of your computer is enabled.
21/01/2008 18:03:38 Your evaluation period will end in 29 days. To ensure uninterrupted protection, please <a v(buy)>click here to purchase</a>.
21/01/2008 18:45:59 Update completed successfully
21/01/2008 19:13:23 Protection of your computer is not running. You are advised to resume protection.
22/01/2008 8:23:44 Your evaluation period will end in 29 days. To ensure uninterrupted protection, please <a v(buy)>click here to purchase</a>.
22/01/2008 8:23:45 You are advised to perform a full computer scan as soon as possible.
22/01/2008 8:23:46 Protection of your computer is enabled.
22/01/2008 8:24:08 Process (PID 1948) tried to access Kaspersky Anti-Virus process (PID 1968), but the action has been blocked by the Self-Defense component. No action on your part is required.
22/01/2008 8:24:08 Process (PID 1948) tried to access Kaspersky Anti-Virus process (PID 588), but the action has been blocked by the Self-Defense component. No action on your part is required.
22/01/2008 8:24:08 Process (PID 1948) tried to access Kaspersky Anti-Virus process (PID 1340), but the action has been blocked by the Self-Defense component. No action on your part is required.
22/01/2008 8:25:37 Update completed successfully
22/01/2008 10:50:03 Update completed successfully
22/01/2008 12:14:44 Malicious HTTP object <http://199.202.248.50/ial/1201011292/87652222183c3967ecf38375a3d7d56f.exe?affid=5121>: detected: Trojan program 'Trojan-Downloader.Win32.Firu.ab'.
22/01/2008 12:14:44 !NOLOC! StatusId(0) EventID(7)
22/01/2008 12:14:48 File C:\jfidoj.exe: detected: Trojan program 'Trojan-Downloader.Win32.Firu.ab'.
22/01/2008 12:14:48 Security threats have been detected. You are advised to neutralize them immediately.
22/01/2008 12:14:56 File C:\jfidoj.exe: deleted.
22/01/2008 12:15:03 File C:\Documents and Settings\Administrador\Configuración local\Archivos temporales de Internet\Content.IE5\KHSTIVCT\87652222183c3967ecf3 8375a3d7d56f[1]: detected: Trojan program 'Trojan-Downloader.Win32.Firu.ab'.
22/01/2008 12:15:03 Security threats have been detected. You are advised to neutralize them immediately.
22/01/2008 12:15:08 File C:\Documents and Settings\Administrador\Configuración local\Archivos temporales de Internet\Content.IE5\KHSTIVCT\87652222183c3967ecf3 8375a3d7d56f[1]: deleted.
22/01/2008 13:05:59 Update completed successfully
22/01/2008 13:20:15 Protection of your computer is not running. You are advised to resume protection.
22/01/2008 14:43:16 Your evaluation period will end in 29 days. To ensure uninterrupted protection, please <a v(buy)>click here to purchase</a>.
22/01/2008 14:43:16 You are advised to perform a full computer scan as soon as possible.
22/01/2008 14:43:18 Protection of your computer is enabled.
22/01/2008 14:43:37 Process (PID 1952) tried to access Kaspersky Anti-Virus process (PID 1972), but the action has been blocked by the Self-Defense component. No action on your part is required.
22/01/2008 14:43:37 Process (PID 1952) tried to access Kaspersky Anti-Virus process (PID 700), but the action has been blocked by the Self-Defense component. No action on your part is required.
22/01/2008 15:24:53 Update completed successfully
22/01/2008 15:59:00 Protection of your computer is not running. You are advised to resume protection.
22/01/2008 18:50:49 Process (PID 564) tried to access Kaspersky Anti-Virus process (PID 584), but the action has been blocked by the Self-Defense component. No action on your part is required.
22/01/2008 18:50:56 You are advised to perform a full computer scan as soon as possible.
22/01/2008 18:50:57 Protection of your computer is enabled.
22/01/2008 18:52:27 Update completed successfully
22/01/2008 21:12:21 Update completed successfully
22/01/2008 21:32:18 Protection of your computer is not running. You are advised to resume protection.
23/01/2008 8:36:39 Process (PID 1780) tried to access Kaspersky Anti-Virus process (PID 1804), but the action has been blocked by the Self-Defense component. No action on your part is required.
23/01/2008 8:36:48 You are advised to perform a full computer scan as soon as possible.
23/01/2008 8:36:48 Protection of your computer is enabled.
23/01/2008 8:43:52 Update completed successfully
23/01/2008 10:58:37 Update completed successfully
23/01/2008 13:18:36 Update completed successfully
23/01/2008 17:33:41 Process (PID 540) tried to access Kaspersky Anti-Virus process (PID 560), but the action has been blocked by the Self-Defense component. No action on your part is required.
23/01/2008 17:33:46 You are advised to perform a full computer scan as soon as possible.
23/01/2008 17:33:47 Protection of your computer is enabled.
23/01/2008 17:35:15 Update completed successfully
24/01/2008 10:53:05 You are advised to perform a full computer scan as soon as possible.
24/01/2008 10:53:06 Protection of your computer is enabled.
24/01/2008 10:53:30 Process (PID 1952) tried to access Kaspersky Anti-Virus process (PID 1972), but the action has been blocked by the Self-Defense component. No action on your part is required.
24/01/2008 10:53:30 Process (PID 1952) tried to access Kaspersky Anti-Virus process (PID 416), but the action has been blocked by the Self-Defense component. No action on your part is required.
24/01/2008 10:53:30 Process (PID 1952) tried to access Kaspersky Anti-Virus process (PID 2268), but the action has been blocked by the Self-Defense component. No action on your part is required.
24/01/2008 10:54:47 Update completed successfully
24/01/2008 14:40:38 Process (PID 536) tried to access Kaspersky Anti-Virus process (PID 556), but the action has been blocked by the Self-Defense component. No action on your part is required.
24/01/2008 14:40:44 You are advised to perform a full computer scan as soon as possible.
24/01/2008 14:40:44 Protection of your computer is enabled.
24/01/2008 14:42:08 Update completed successfully
24/01/2008 18:48:22 Process (PID 520) tried to access Kaspersky Anti-Virus process (PID 540), but the action has been blocked by the Self-Defense component. No action on your part is required.
24/01/2008 18:48:30 Your evaluation period will end in 26 days. To ensure uninterrupted protection, please <a v(buy)>click here to purchase</a>.
24/01/2008 18:48:30 You are advised to perform a full computer scan as soon as possible.
24/01/2008 18:48:30 Protection of your computer is enabled.
24/01/2008 18:50:13 Update completed successfully
24/01/2008 2124 Update completed successfully
24/01/2008 23:38:40 Update completed successfully
25/01/2008 0:28:57 Protection of your computer is not running. You are advised to resume protection.
25/01/2008 9:21:26 Process (PID 536) tried to access Kaspersky Anti-Virus process (PID 556), but the action has been blocked by the Self-Defense component. No action on your part is required.
25/01/2008 9:21:33 Your evaluation period will end in 26 days. To ensure uninterrupted protection, please <a v(buy)>click here to purchase</a>.
25/01/2008 9:21:33 You are advised to perform a full computer scan as soon as possible.
25/01/2008 9:21:34 Protection of your computer is enabled.
25/01/2008 9:22:58 Update completed successfully
25/01/2008 9:45:11 Process (PID 2576) tried to access Kaspersky Anti-Virus process (PID 1944), but the action has been blocked by the Self-Defense component. No action on your part is required.
25/01/2008 9:45:11 Process (PID 2576) tried to access Kaspersky Anti-Virus process (PID 556), but the action has been blocked by the Self-Defense component. No action on your part is required.
25/01/2008 12:54:40 Process (PID 420) tried to access Kaspersky Anti-Virus process (PID 504), but the action has been blocked by the Self-Defense component. No action on your part is required.
25/01/2008 12:54:47 Your evaluation period will end in 26 days. To ensure uninterrupted protection, please <a v(buy)>click here to purchase</a>.
25/01/2008 12:54:47 You are advised to perform a full computer scan as soon as possible.
25/01/2008 12:54:47 Protection of your computer is enabled.
25/01/2008 12:56:09 Update completed successfully
25/01/2008 15:16:33 Update completed successfully
25/01/2008 17:36:32 Update completed successfully
25/01/2008 19:55:57 Update completed successfully
25/01/2008 22:16:21 Update completed successfully
25/01/2008 23:05:22 Protection of your computer is not running. You are advised to resume protection.
26/01/2008 11:29:56 Process (PID 540) tried to access Kaspersky Anti-Virus process (PID 560), but the action has been blocked by the Self-Defense component. No action on your part is required.
26/01/2008 11:30:00 You are advised to perform a full computer scan as soon as possible.
26/01/2008 11:30:01 Protection of your computer is enabled.
26/01/2008 11:31:28 Update completed successfully
26/01/2008 13:52:23 Update completed successfully
26/01/2008 16:01:00 Protection of your computer is not running. You are advised to resume protection.
26/01/2008 18:48:08 Process (PID 532) tried to access Kaspersky Anti-Virus process (PID 552), but the action has been blocked by the Self-Defense component. No action on your part is required.
26/01/2008 18:48:15 You are advised to perform a full computer scan as soon as possible.
26/01/2008 18:48:15 Protection of your computer is enabled.
26/01/2008 18:50:06 Update completed successfully
26/01/2008 2101 Update completed successfully
26/01/2008 21:32:14 Update completed successfully
26/01/2008 23:49:57 Update completed successfully
26/01/2008 23:50:21 Protection of your computer is not running. You are advised to resume protection.
27/01/2008 12:39:34 Process (PID 540) tried to access Kaspersky Anti-Virus process (PID 560), but the action has been blocked by the Self-Defense component. No action on your part is required.
27/01/2008 12:39:42 You are advised to perform a full computer scan as soon as possible.
27/01/2008 12:39:42 Protection of your computer is enabled.
27/01/2008 12:41:10 Update completed successfully
27/01/2008 15:01:35 Update completed successfully
27/01/2008 16:07:15 Protection of your computer is not running. You are advised to resume protection.
27/01/2008 18:50:46 Process (PID 528) tried to access Kaspersky Anti-Virus process (PID 548), but the action has been blocked by the Self-Defense component. No action on your part is required.
27/01/2008 18:50:52 Your evaluation period will end in 23 days. To ensure uninterrupted protection, please <a v(buy)>click here to purchase</a>.
27/01/2008 18:50:52 You are advised to perform a full computer scan as soon as possible.
27/01/2008 18:50:53 Protection of your computer is enabled.
27/01/2008 18:52:20 Update completed successfully
27/01/2008 21:12:16 Update completed successfully
27/01/2008 23:32:26 Update completed successfully
28/01/2008 0:14:32 Protection of your computer is not running. You are advised to resume protection.
28/01/2008 11:16:58 Process (PID 536) tried to access Kaspersky Anti-Virus process (PID 556), but the action has been blocked by the Self-Defense component. No action on your part is required.
28/01/2008 11:17:05 Your evaluation period will end in 23 days. To ensure uninterrupted protection, please <a v(buy)>click here to purchase</a>.
28/01/2008 11:17:05 You are advised to perform a full computer scan as soon as possible.
28/01/2008 11:17:06 Protection of your computer is enabled.
28/01/2008 11:18:35 Update completed successfully
28/01/2008 12:48:58 Protection of your computer is not running. You are advised to resume protection.
28/01/2008 14:50:13 Process (PID 528) tried to access Kaspersky Anti-Virus process (PID 548), but the action has been blocked by the Self-Defense component. No action on your part is required.
28/01/2008 14:50:19 Your evaluation period will end in 23 days. To ensure uninterrupted protection, please <a v(buy)>click here to purchase</a>.
28/01/2008 14:50:19 You are advised to perform a full computer scan as soon as possible.
28/01/2008 14:50:19 Protection of your computer is enabled.
28/01/2008 14:52:23 Update completed successfully
28/01/2008 16:11:21 Protection of your computer is not running. You are advised to resume protection.
28/01/2008 18:04:11 Process (PID 548) tried to access Kaspersky Anti-Virus process (PID 568), but the action has been blocked by the Self-Defense component. No action on your part is required.
28/01/2008 18:04:20 You are advised to perform a full computer scan as soon as possible.
28/01/2008 18:04:20 Protection of your computer is enabled.
28/01/2008 18:05:46 Update completed successfully
28/01/2008 20:26:04 Update completed successfully
28/01/2008 22:46:55 Update completed successfully
29/01/2008 0:26:25 Protection of your computer is not running. You are advised to resume protection.
29/01/2008 9:52:03 Process (PID 1788) tried to access Kaspersky Anti-Virus process (PID 1800), but the action has been blocked by the Self-Defense component. No action on your part is required.
29/01/2008 9:52:09 You are advised to perform a full computer scan as soon as possible.
29/01/2008 9:52:10 Protection of your computer is enabled.
29/01/2008 9:56:15 Update completed successfully
29/01/2008 10:03:10 The application C:\Archivos de programa\Internet Explorer\iexplore.exe cannot establish connection with server 208.53.190.146. Please check your internet connection settings. If you have a firewall installed, check that the application avp.exe is allowed internet access.
29/01/2008 12:13:38 Update completed successfully
29/01/2008 13:15:04 Protection of your computer is not running. You are advised to resume protection.
29/01/2008 14:51:54 Process (PID 508) tried to access Kaspersky Anti-Virus process (PID 528), but the action has been blocked by the Self-Defense component. No action on your part is required.
29/01/2008 14:52:00 You are advised to perform a full computer scan as soon as possible.
29/01/2008 14:52:01 Protection of your computer is enabled.
29/01/2008 14:53:23 Update completed successfully
29/01/2008 18:46:54 Process (PID 532) tried to access Kaspersky Anti-Virus process (PID 552), but the action has been blocked by the Self-Defense component. No action on your part is required.
29/01/2008 18:47:00 You are advised to perform a full computer scan as soon as possible.
29/01/2008 18:47:00 Protection of your computer is enabled.
29/01/2008 18:48:43 Update completed successfully
29/01/2008 21:08:15 Update completed successfully
29/01/2008 21:13:34 Process (PID 3732) tried to access Kaspersky Anti-Virus process (PID 1940), but the action has been blocked by the Self-Defense component. No action on your part is required.
29/01/2008 21:13:35 Process (PID 3732) tried to access Kaspersky Anti-Virus process (PID 552), but the action has been blocked by the Self-Defense component. No action on your part is required.
30/01/2008 0:25:15 Process (PID 532) tried to access Kaspersky Anti-Virus process (PID 552), but the action has been blocked by the Self-Defense component. No action on your part is required.
30/01/2008 0:25:22 You are advised to perform a full computer scan as soon as possible.
30/01/2008 0:25:22 Protection of your computer is enabled.
30/01/2008 0:27:09 Update completed successfully
30/01/2008 0:35:25 Protection of your computer is not running. You are advised to resume protection.
30/01/2008 10:34:11 Process (PID 544) tried to access Kaspersky Anti-Virus process (PID 564), but the action has been blocked by the Self-Defense component. No action on your part is required.
30/01/2008 10:34:19 You are advised to perform a full computer scan as soon as possible.
30/01/2008 10:34:20 Protection of your computer is enabled.
30/01/2008 10:36:08 Update completed successfully
30/01/2008 12:56:16 Update completed successfully
30/01/2008 13:18:57 Protection of your computer is not running. You are advised to resume protection.
30/01/2008 14:56:30 You are advised to perform a full computer scan as soon as possible.
30/01/2008 14:56:31 Protection of your computer is enabled.
30/01/2008 14:56:57 Process (PID 1948) tried to access Kaspersky Anti-Virus process (PID 1968), but the action has been blocked by the Self-Defense component. No action on your part is required.
30/01/2008 14:56:57 Process (PID 1948) tried to access Kaspersky Anti-Virus process (PID 2440), but the action has been blocked by the Self-Defense component. No action on your part is required.
30/01/2008 14:56:57 Process (PID 1948) tried to access Kaspersky Anti-Virus process (PID 400), but the action has been blocked by the Self-Defense component. No action on your part is required.
30/01/2008 14:58:04 Update completed successfully
30/01/2008 17:18:09 Update completed successfully
30/01/2008 17:44:35 The application C:\Archivos de programa\Internet Explorer\iexplore.exe cannot establish connection with server 208.53.190.146. Please check your internet connection settings. If you have a firewall installed, check that the application avp.exe is allowed internet access.
31/01/2008 10:39:33 You are advised to perform a full computer scan as soon as possible.
31/01/2008 10:39:34 Protection of your computer is enabled.
31/01/2008 10:39:56 Process (PID 1944) tried to access Kaspersky Anti-Virus process (PID 1964), but the action has been blocked by the Self-Defense component. No action on your part is required.
31/01/2008 10:39:56 Process (PID 1944) tried to access Kaspersky Anti-Virus process (PID 1996), but the action has been blocked by the Self-Defense component. No action on your part is required.
31/01/2008 10:39:56 Process (PID 1944) tried to access Kaspersky Anti-Virus process (PID 1820), but the action has been blocked by the Self-Defense component. No action on your part is required.
31/01/2008 10:41:10 Update completed successfully
31/01/2008 13:01:21 Please restart your computer to complete the installation of new or updated protection components.
31/01/2008 13:01:26 Update completed successfully
31/01/2008 15:21:33 Update completed successfully
31/01/2008 15:59:20 Protection of your computer is not running. You are advised to resume protection.
31/01/2008 2010 Process (PID 520) tried to access Kaspersky Anti-Virus process (PID 552), but the action has been blocked by the Self-Defense component. No action on your part is required.
31/01/2008 2030 You are advised to perform a full computer scan as soon as possible.
31/01/2008 2031 Protection of your computer is enabled.
31/01/2008 20:11:55 Update completed successfully
31/01/2008 21:48:36 Process (PID 2936) tried to access Kaspersky Anti-Virus process (PID 1952), but the action has been blocked by the Self-Defense component. No action on your part is required.
31/01/2008 21:48:37 Process (PID 2936) tried to access Kaspersky Anti-Virus process (PID 552), but the action has been blocked by the Self-Defense component. No action on your part is required.
31/01/2008 22:32:46 Update completed successfully
01/02/2008 1:41:23 Update completed successfully
01/02/2008 2:13:05 Protection of your computer is not running. You are advised to resume protection.
01/02/2008 15:24:42 Process (PID 552) tried to access Kaspersky Anti-Virus process (PID 572), but the action has been blocked by the Self-Defense component. No action on your part is required.
01/02/2008 15:24:50 You are advised to perform a full computer scan as soon as possible.
01/02/2008 15:24:51 Protection of your computer is enabled.
01/02/2008 15:26:22 Update completed successfully
01/02/2008 17:46:19 Update completed successfully
01/02/2008 19:06:47 Protection of your computer is not running. You are advised to resume protection.
01/02/2008 21:30:16 You are advised to perform a full computer scan as soon as possible.
01/02/2008 21:30:17 Protection of your computer is enabled.
01/02/2008 21:30:40 Process (PID 1948) tried to access Kaspersky Anti-Virus process (PID 1968), but the action has been blocked by the Self-Defense component. No action on your part is required.
01/02/2008 21:30:40 Process (PID 1948) tried to access Kaspersky Anti-Virus process (PID 264), but the action has been blocked by the Self-Defense component. No action on your part is required.
01/02/2008 21:30:40 Process (PID 1948) tried to access Kaspersky Anti-Virus process (PID 2216), but the action has been blocked by the Self-Defense component. No action on your part is required.
01/02/2008 21:31:27 Protection of your computer is not running. You are advised to resume protection.
01/02/2008 21:33:09 Process (PID 548) tried to access Kaspersky Anti-Virus process (PID 568), but the action has been blocked by the Self-Defense component. No action on your part is required.
01/02/2008 21:33:16 You are advised to perform a full computer scan as soon as possible.
01/02/2008 21:33:17 Protection of your computer is enabled.
01/02/2008 21:53:55 Update completed successfully
02/02/2008 0:17:39 Update completed successfully
02/02/2008 0:35:04 Protection of your computer is not running. You are advised to resume protection.
02/02/2008 15:45:34 Process (PID 532) tried to access Kaspersky Anti-Virus process (PID 552), but the action has been blocked by the Self-Defense component. No action on your part is required.
02/02/2008 15:45:41 You are advised to perform a full computer scan as soon as possible.
02/02/2008 15:45:42 Protection of your computer is enabled.
02/02/2008 15:46:14 Protection of your computer is not running. You are advised to resume protection.
02/02/2008 15:47:51 Process (PID 532) tried to access Kaspersky Anti-Virus process (PID 552), but the action has been blocked by the Self-Defense component. No action on your part is required.
02/02/2008 15:47:59 You are advised to perform a full computer scan as soon as possible.
02/02/2008 15:47:59 Protection of your computer is enabled.
02/02/2008 16:07:10 Update completed successfully
02/02/2008 16:14:01 Protection of your computer is not running. You are advised to resume protection.
02/02/2008 18:04:51 Process (PID 536) tried to access Kaspersky Anti-Virus process (PID 556), but the action has been blocked by the Self-Defense component. No action on your part is required.
02/02/2008 18:05:00 You are advised to perform a full computer scan as soon as possible.
02/02/2008 18:05:00 Protection of your computer is enabled.
02/02/2008 18:13:30 Protection of your computer is not running. You are advised to resume protection.
02/02/2008 22:38:12 Process (PID 544) tried to access Kaspersky Anti-Virus process (PID 568), but the action has been blocked by the Self-Defense component. No action on your part is required.
02/02/2008 22:38:19 You are advised to perform a full computer scan as soon as possible.
02/02/2008 22:38:20 Protection of your computer is enabled.
02/02/2008 22:39:40 Update completed successfully
03/02/2008 1:00:53 Update completed successfully
03/02/2008 14:11:31 Process (PID 560) tried to access Kaspersky Anti-Virus process (PID 580), but the action has been blocked by the Self-Defense component. No action on your part is required.
03/02/2008 14:11:39 You are advised to perform a full computer scan as soon as possible.
03/02/2008 14:11:40 Protection of your computer is enabled.
03/02/2008 14:13:04 Update completed successfully
03/02/2008 14:31:13 Protection of your computer is not running. You are advised to resume protection.
03/02/2008 1923 Process (PID 532) tried to access Kaspersky Anti-Virus process (PID 552), but the action has been blocked by the Self-Defense component. No action on your part is required.
03/02/2008 1930 You are advised to perform a full computer scan as soon as possible.
03/02/2008 1931 Protection of your computer is enabled.
03/02/2008 19:11:54 Update completed successfully
03/02/2008 21:17:36 Protection of your computer is not running. You are advised to resume protection.
04/02/2008 17:35:42 Process (PID 536) tried to access Kaspersky Anti-Virus process (PID 556), but the action has been blocked by the Self-Defense component. No action on your part is required.
04/02/2008 17:35:47 You are advised to perform a full computer scan as soon as possible.
04/02/2008 17:35:48 Protection of your computer is enabled.
04/02/2008 17:37:18 Update completed successfully
04/02/2008 19:57:38 Update completed successfully
04/02/2008 20:26:17 The application C:\Archivos de programa\Internet Explorer\iexplore.exe cannot establish connection with server 208.53.190.146. Please check your internet connection settings. If you have a firewall installed, check that the application avp.exe is allowed internet access.
04/02/2008 22:18:05 Update completed successfully
05/02/2008 0:24:26 Protection of your computer is not running. You are advised to resume protection.
05/02/2008 11:51:28 Process (PID 564) tried to access Kaspersky Anti-Virus process (PID 584), but the action has been blocked by the Self-Defense component. No action on your part is required.
05/02/2008 11:51:33 You are advised to perform a full computer scan as soon as possible.
05/02/2008 11:51:34 Protection of your computer is enabled.
05/02/2008 11:52:59 Update completed successfully
05/02/2008 13:32:32 Protection of your computer is not running. You are advised to resume protection.
05/02/2008 14:46:40 Process (PID 528) tried to access Kaspersky Anti-Virus process (PID 556), but the action has been blocked by the Self-Defense component. No action on your part is required.
05/02/2008 14:46:46 You are advised to perform a full computer scan as soon as possible.
05/02/2008 14:46:46 Protection of your computer is enabled.
05/02/2008 14:48:07 Update completed successfully
05/02/2008 15:51:30 Protection of your computer is not running. You are advised to resume protection.
05/02/2008 19:54:01 You are advised to perform a full computer scan as soon as possible.
05/02/2008 19:54:02 Protection of your computer is enabled.
05/02/2008 19:54:29 Process (PID 1944) tried to access Kaspersky Anti-Virus process (PID 1964), but the action has been blocked by the Self-Defense component. No action on your part is required.
05/02/2008 19:54:29 Process (PID 1944) tried to access Kaspersky Anti-Virus process (PID 2012), but the action has been blocked by the Self-Defense component. No action on your part is required.
05/02/2008 19:54:29 Process (PID 1944) tried to access Kaspersky Anti-Virus process (PID 2396), but the action has been blocked by the Self-Defense component. No action on your part is required.
05/02/2008 19:55:39 Update completed successfully
05/02/2008 22:15:45 Update completed successfully
05/02/2008 22:23:38 Protection of your computer is not running. You are advised to resume protection.
06/02/2008 11:01:00 You are advised to perform a full computer scan as soon as possible.
06/02/2008 11:01:01 Protection of your computer is enabled.
06/02/2008 11:01:32 Process (PID 1948) tried to access Kaspersky Anti-Virus process (PID 1968), but the action has been blocked by the Self-Defense component. No action on your part is required.
06/02/2008 11:01:32 Process (PID 1948) tried to access Kaspersky Anti-Virus process (PID 300), but the action has been blocked by the Self-Defense component. No action on your part is required.
06/02/2008 11:01:32 Process (PID 1948) tried to access Kaspersky Anti-Virus process (PID 2364), but the action has been blocked by the Self-Defense component. No action on your part is required.
06/02/2008 11:02:38 Update completed successfully
06/02/2008 13:22:28 Update completed successfully
06/02/2008 15:42:32 Update completed successfully
06/02/2008 18:01:02 Your evaluation period will end in 13 days. To ensure uninterrupted protection, please <a v(buy)>click here to purchase</a>.
06/02/2008 18:07:24 Update completed successfully
06/02/2008 19:21:53 Protection of your computer is not running. You are advised to resume protection.
07/02/2008 10:04:35 Process (PID 544) tried to access Kaspersky Anti-Virus process (PID 564), but the action has been blocked by the Self-Defense component. No action on your part is required.
07/02/2008 10:04:40 Your evaluation period will end in 13 days. To ensure uninterrupted protection, please <a v(buy)>click here to purchase</a>.
07/02/2008 10:04:40 You are advised to perform a full computer scan as soon as possible.
07/02/2008 10:04:40 Protection of your computer is enabled.
07/02/2008 10:06:37 Update completed successfully
07/02/2008 12:26:22 Update completed successfully
07/02/2008 14:47:01 Update completed successfully
07/02/2008 17:06:25 Update completed successfully
07/02/2008 19:26:29 Update completed successfully
07/02/2008 21:46:49 Update completed successfully
07/02/2008 23:59:27 Protection of your computer is not running. You are advised to resume protection.
08/02/2008 9:49:22 Process (PID 1748) tried to access Kaspersky Anti-Virus process (PID 1760), but the action has been blocked by the Self-Defense component. No action on your part is required.
08/02/2008 9:49:24 You are advised to perform a full computer scan as soon as possible.
08/02/2008 9:49:25 Protection of your computer is enabled.
08/02/2008 9:54:22 Update completed successfully
08/02/2008 12:16:56 Update completed successfully
08/02/2008 14:35:46 Update completed successfully
08/02/2008 14:49:20 Protection of your computer is not running. You are advised to resume protection.
08/02/2008 17:13:13 Process (PID 524) tried to access Kaspersky Anti-Virus process (PID 544), but the action has been blocked by the Self-Defense component. No action on your part is required.
08/02/2008 17:13:19 You are advised to perform a full computer scan as soon as possible.
08/02/2008 17:13:19 Protection of your computer is enabled.
08/02/2008 17:14:49 Update completed successfully
08/02/2008 18:03:26 Your evaluation period will end in 11 days. To ensure uninterrupted protection, please <a v(buy)>click here to purchase</a>.
08/02/2008 19:35:15 Update completed successfully
08/02/2008 21:54:45 Update completed successfully
09/02/2008 13:18:56 Process (PID 548) tried to access Kaspersky Anti-Virus process (PID 568), but the action has been blocked by the Self-Defense component. No action on your part is required.
09/02/2008 13:19:00 Your evaluation period will end in 11 days. To ensure uninterrupted protection, please <a v(buy)>click here to purchase</a>.
09/02/2008 13:19:00 You are advised to perform a full computer scan as soon as possible.
09/02/2008 13:19:00 Protection of your computer is enabled.
09/02/2008 13:20:38 Update completed successfully
09/02/2008 15:34:22 File E:\Autorun.inf: detected: virus 'Worm.Win32.AutoRun.cea'. User: CASA\THEBIGPANTHER$, computer: localhost.
09/02/2008 15:34:22 Security threats have been detected. You are advised to neutralize them immediately.
09/02/2008 15:34:37 File E:\autorun.inf: detected: virus 'Worm.Win32.AutoRun.cea'.
09/02/2008 15:34:56 File E:\Autorun.inf: is still infected, skipped by user.
09/02/2008 15:36:37 File E:\Autorun.inf: detected: virus 'Worm.Win32.AutoRun.cea'. User: CASA\THEBIGPANTHER$, computer: localhost.
09/02/2008 15:37:14 File E:\autorun.inf: detected: virus 'Worm.Win32.AutoRun.cea'.
09/02/2008 15:42:59 Databases are up to date
09/02/2008 15:57:27 File E:\autorun.inf: detected: virus 'Worm.Win32.AutoRun.cea'.
09/02/2008 16:25:07 File E:\autorun.inf cannot be deleted.
09/02/2008 16:25:12 File E:\Autorun.inf: is still infected, skipped by user.
09/02/2008 16:25:38 File E:\autorun.inf cannot be deleted.
09/02/2008 16:25:40 File E:\autorun.inf cannot be deleted.
09/02/2008 17:54:53 Update completed successfully

Backup
------
Status Object Size
------ ------ ----
Infected: Trojan program Trojan-Downloader.Win32.Firu.ab C:\Documents and Settings\Administrador\Configuración local\Archivos temporales de Internet\Content.IE5\KHSTIVCT\87652222183c3967ecf3 8375a3d7d56f[1] 27,6 KB
Infected: Trojan program Trojan-Downloader.Win32.Firu.ab C:\Documents and Settings\Administrador\Configuración local\Archivos temporales de Internet\Content.IE5\MWRGZISH\f0daf361dfcfbd3933c3 ad24dc67b640[1] 27,6 KB
Infected: Trojan program Trojan-Downloader.Win32.Firu.ab C:\jfidoj.exe 27,6 KB
Infected: Trojan program Trojan-Downloader.Win32.Firu.aa c:\winnat\system32\6q4cna2x.exe 27,6 KB

Mil gracias de antemano.

Hola Silent_Natasha

Realiza lo siguiente:

Apagar el "Restaurar Sistema"

Descargar estas herramientas. (pero no las ejecutarlas aun)

• Flash_Disinfector.exe
• SUPERAntiSpyware
• CCleaner

Reiniciar eh iniciar en "Modo a prueba de fallos" (modo seguro)

Ejecutar Flash_Disinfector.exe en el PC y luego Colocar el Pendrive (en este caso tu telefono) en el puerto USB y ejecutarlo nuevamente.


Al terminar haga un escaneo general del sistema con SUPERAntiSpware.

Ejecute CCleaner usando primero su opción de "Limpiador" para borrar cookies, temporales de Internet y todos los archivos que este te muestre como obsoletos, y luego usa su opción de "Registro" para limpiar todo el registro de Windows (haciendo copia de seguridad).

Reinicia y comprobar el sistema.

Realiza un escaneo online con:

Panda Active Scan Manual
Kaspersky ---Manual (nos pegas el reporte completo para analizarlo)


Regresa y comentanos como te fue



Andresmix

Hola Andrés...

Muchas gracias por tu ayuda.

Te comento, el telefono normal al parecer fue cosa de un cable de una línea anteriro que estaba haciendo rarezas. Bajé el SUPERA y el Flash y no me reportó nada. Creo según leí en un reporte de no recuerdo donde que el teléfono Nokia 3500 tiene problemas con un virus, pues no me ha vuelto a presentar aviso alguno. El Nokia no es mío es de mi maestra a quién intenté pasarle unos archivos.

Bien, después he tenido problemas independientes de esto con el explorer y me instalé el ie7, teniendo problemas con el adserver.com/feed/... estoy siguiendo las instrucciones de otro post.

Gracias por todo.