Foro de InfoSpyware - Foro de Hijackthis - Foro de Virus

hola, creo q estoy infectado x algun malware q no se q es.os paso mi log a ver si veis algo raro.En el messenger hay alguien q escribe cosas en mi nombre q yo no hago.Gracias

Logfile of HijackThis v1.99.1
Scan saved at 1:13:39, on 03/11/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\SYSTEM32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\ARCHIV~1\Softwin\BITDEF~1\bdmcon.exe
C:\Archivos de programa\Softwin\BitDefender Professional Edition\bdswitch.exe
C:\Archivos de programa\Intuwave\Shared\mRouterRunTime\mRouterCon fig.exe
C:\Archivos de programa\Java\jre1.5.0_04\bin\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
D:\NICO\sx1 data suite\SDS\SDSScheduler.exe
C:\Archivos de programa\Intuwave\Shared\mRouterRunTime\mRouterRun time.exe
D:\NICO\sx1 data suite\SDS\SPhoneObserver.exe
C:\ARCHIV~1\Symbian\Shared\SYMBIA~1\SYMBIA~1.EXE
C:\ARCHIV~1\Symbian\Shared\SYMBIA~1\SCBAL.exe
C:\Archivos de programa\Archivos comunes\Softwin\BitDefender Communicator\xcommsvr.exe
C:\Archivos de programa\Archivos comunes\Softwin\BitDefender Scan Server\bdss.exe
C:\Archivos de programa\Softwin\BitDefender Professional Edition\vsserv.exe
C:\Documents and Settings\Niklas\Escritorio\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Vínculos
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Archivos de programa\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O4 - HKLM\..\Run: [Kaspersky] C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\KAV Personal Pro\5.0\Save Kaspersky.bat
O4 - HKLM\..\Run: [BDMCon] C:\ARCHIV~1\Softwin\BITDEF~1\bdmcon.exe
O4 - HKLM\..\Run: [BDNewsAgent] C:\Archivos de programa\Softwin\BitDefender Professional Edition\bdnagent.exe
O4 - HKLM\..\Run: [BDSwitchAgent] C:\Archivos de programa\Softwin\BitDefender Professional Edition\bdswitch.exe
O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [mRouterConfig for Siemens Data Suite SX1] C:\Archivos de programa\Intuwave\Shared\mRouterRunTime\mRouterCon fig.exe
O4 - HKLM\..\Run: [UserFaultCheck] %systemroot%\system32\dumprep 0 -u
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Archivos de programa\Java\jre1.5.0_04\bin\jusched.exe
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - Global Startup: Inicio rápido de Adobe Reader.lnk = C:\Archivos de programa\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Archivos de programa\Microsoft Office\Office\OSA9.EXE
O4 - Global Startup: NewShortcut35.lnk = D:\NICO\sx1 data suite\SDS\SDSScheduler.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Archivos de programa\Java\jre1.5.0_04\bin\npjpi150_04.dll
O9 - Extra 'Tools' menuitem: Consola de Sun Java - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Archivos de programa\Java\jre1.5.0_04\bin\npjpi150_04.dll
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://spaces.msn.com//PhotoUpload/MsnPUpld.cab
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\ARCHIV~1\MSNMES~1\msgrapp.dll" (file missing)
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: BitDefender Scan Server (bdss) - Unknown owner - C:\Archivos de programa\Archivos comunes\Softwin\BitDefender Scan Server\bdss.exe
O23 - Service: BitDefender Virus Shield (VSSERV) - Unknown owner - C:\Archivos de programa\Softwin\BitDefender Professional Edition\vsserv.exe
O23 - Service: BitDefender Communicator (XCOMM) - Softwin - C:\Archivos de programa\Archivos comunes\Softwin\BitDefender Communicator\xcommsvr.exe

os paso tambien el log del bitdefender.Veo q me ha detectado posibles troyanos
q no puede desinfectar.He probado de hacerlo en modo seguro pero no me deja ni abrir el antivirus.Ayuda por favor..


/-----------------------------------------------------------------
//
// Product: BitDefender Professional Edition v7.2
// Version: (no ver)
//
// Created on: 03/11/2005 15:09:00
//
//-----------------------------------------------------------------


Statistics

Scan path : C:\
D:\
Folders : 2344
Files : 171246
Archives : 1272
Packed files : 14505
Identified viruses : 3
Infected files : 3
Warnings : 0
Suspect files : 0
Disinfected files : 0
Deleted files : 0
Copied files : 0
Moved files : 0
Renamed files : 0
I/O errors : 26
Scan time : 00:59:23
Scan speed (files/sec) : 48

Virus definitions : 232377
Scan plugins : 13
Archive plugins : 39
Unpack plugins : 4
Mail plugins : 6
System plugins : 1

Scan options

Detection
[X] Scan boot sectors
[X] Scan archives
[X] Scan packed files
[X] Scan email

File mask
[ ] Programs
[X] All files
[ ] User defined extensions:
[ ] Exclude extensions: ;

Action

Infected objects
[ ] Ignore
[X] Disinfect
[ ] Delete
[ ] Copy to quarantine
[ ] Move to quarantine
[ ] Rename
[ ] Prompt user

Second action
[ ] Ignore
[ ] Delete
[ ] Copy to quarantine
[X] Move to quarantine
[ ] Rename
[ ] Prompt user

Scan options
[X] Enable warnings
[X] Enable heuristics
[ ] Show all files in log
[X] Report file: vscan.log
[ ] Append to existing report

Summary:

C:\Archivos de programa\Softwin\BitDefender Professional Edition\Infected\amsnmsgrs.exe Infected Backdoor.Poebot.B
C:\Archivos de programa\Softwin\BitDefender Professional Edition\Infected\amsnmsgrs.exe Disinfection failed
C:\Archivos de programa\Softwin\BitDefender Professional Edition\Infected\amsnmsgrs.exe Move failed
C:\Archivos de programa\Softwin\BitDefender Professional Edition\Infected\classload.jar-29893042-5cae8005.zip=>InsecureClassLoader.class Infected Java.Trojan.Exploit.Bytverify
C:\Archivos de programa\Softwin\BitDefender Professional Edition\Infected\classload.jar-29893042-5cae8005.zip=>InsecureClassLoader.class Disinfection failed
C:\Archivos de programa\Softwin\BitDefender Professional Edition\Infected\classload.jar-29893042-5cae8005.zip=>Dummy.class Infected Trojan.Java.Classloader.Dummy.A

Scanned files

Hola couprinz, el log de HJT esta limpio y el reporte del BitDefender no nos sirve de mucho ya que este no muestra el lugar exacto donde esta la infección.

Proba mejora haciéndole un escaneo online con Kaspersky, Ewido y Panda que están en "Antivirus Online"

Y si alguno te encuentra algo nos pegas su reporte.

Salu2

estos son los reports q he conseguido hasta el momento de kasprerky y ewido

-------------------------------------------------------------------------------
KASPERSKY ON-LINE SCANNER REPORT
Friday, November 04, 2005 00:20:47
Operating System: Microsoft Windows XP Professional, Service Pack 2 (Build 2600)
Kaspersky On-line Scanner version: 5.0.67.0
Kaspersky Anti-Virus database last update: 3/11/2005
Kaspersky Anti-Virus database records: 148436
-------------------------------------------------------------------------------

Scan Settings:
Scan using the following antivirus database: standard
Scan Archives: true
Scan Mail Bases: true

Scan Target - My Computer:
A:\
C:\
D:\
E:\

Scan Statistics:
Total number of scanned objects: 31806
Number of viruses found: 1
Number of infected objects: 0
Number of suspicious objects: 2
Duration of the scan process: 5000 sec

Infected Object Name - Virus Name
C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Profiles\default\e64ls23e.slt\Cac he\AB84E41Ed01/Keymaker.exe Suspicious: Type_Win32
C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Profiles\default\e64ls23e.slt\Cac he\AB84E41Ed01 Suspicious: Type_Win32

Scan process completed.




ewido security suite online scanner
http://www.ewido.net
__________________________________________________


Name: Spyware.Cookie.Doubleclick
Path: C:\Documents and Settings\Niklas\Cookies\niklas@doubleclick[1].txt
Risk: Medium

Name: Spyware.Cookie.Hitbox
Path: C:\Documents and Settings\Niklas\Cookies\niklas@ehg-deltatre.hitbox[2].txt
Risk: Medium

Name: Spyware.Cookie.Hitbox
Path: C:\Documents and Settings\Niklas\Cookies\niklas@hitbox[1].txt
Risk: Medium

Name: Spyware.Cookie.Doubleclick
Path: :mozilla.12:C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Firefox\Profiles\default.lj6\cook ies.txt
Risk: Medium

Name: Spyware.Cookie.Serving-sys
Path: :mozilla.44:C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Firefox\Profiles\default.lj6\cook ies.txt
Risk: Medium

Name: Spyware.Cookie.Serving-sys
Path: :mozilla.45:C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Firefox\Profiles\default.lj6\cook ies.txt
Risk: Medium

Name: Spyware.Cookie.Serving-sys
Path: :mozilla.46:C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Firefox\Profiles\default.lj6\cook ies.txt
Risk: Medium

Name: Spyware.Cookie.Serving-sys
Path: :mozilla.47:C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Firefox\Profiles\default.lj6\cook ies.txt
Risk: Medium

Name: Spyware.Cookie.Fastclick
Path: :mozilla.52:C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Firefox\Profiles\default.lj6\cook ies.txt
Risk: Medium

Name: Spyware.Cookie.Fastclick
Path: :mozilla.53:C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Firefox\Profiles\default.lj6\cook ies.txt
Risk: Medium

Name: Spyware.Cookie.Falkag
Path: :mozilla.63:C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Firefox\Profiles\default.lj6\cook ies.txt
Risk: Medium

Name: Spyware.Cookie.Hitbox
Path: :mozilla.70:C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Firefox\Profiles\default.lj6\cook ies.txt
Risk: Medium

Name: Spyware.Cookie.Hitbox
Path: :mozilla.71:C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Firefox\Profiles\default.lj6\cook ies.txt
Risk: Medium

Name: Spyware.Cookie.Hitbox
Path: :mozilla.72:C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Firefox\Profiles\default.lj6\cook ies.txt
Risk: Medium

Name: Spyware.Cookie.Webtrendslive
Path: :mozilla.77:C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Firefox\Profiles\default.lj6\cook ies.txt
Risk: Medium

Name: Spyware.Cookie.Webtrendslive
Path: :mozilla.78:C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Firefox\Profiles\default.lj6\cook ies.txt
Risk: Medium

Name: Spyware.Cookie.Atdmt
Path: :mozilla.84:C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Firefox\Profiles\default.lj6\cook ies.txt
Risk: Medium

Name: Spyware.Cookie.Mediaplex
Path: :mozilla.102:C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Firefox\Profiles\default.lj6\cook ies.txt
Risk: Medium

Name: Spyware.Cookie.2o7
Path: :mozilla.103:C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Firefox\Profiles\default.lj6\cook ies.txt
Risk: Medium

Name: Spyware.Cookie.2o7
Path: :mozilla.104:C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Firefox\Profiles\default.lj6\cook ies.txt
Risk: Medium

Name: Spyware.Cookie.2o7
Path: :mozilla.105:C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Firefox\Profiles\default.lj6\cook ies.txt
Risk: Medium

Name: Spyware.Cookie.2o7
Path: :mozilla.106:C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Firefox\Profiles\default.lj6\cook ies.txt
Risk: Medium

Name: Spyware.Cookie.2o7
Path: :mozilla.107:C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Firefox\Profiles\default.lj6\cook ies.txt
Risk: Medium

Name: Spyware.Cookie.2o7
Path: :mozilla.108:C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Firefox\Profiles\default.lj6\cook ies.txt
Risk: Medium

Name: Spyware.Cookie.2o7
Path: :mozilla.109:C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Firefox\Profiles\default.lj6\cook ies.txt
Risk: Medium

Name: Spyware.Cookie.2o7
Path: :mozilla.110:C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Firefox\Profiles\default.lj6\cook ies.txt
Risk: Medium

Name: Spyware.Cookie.2o7
Path: :mozilla.112:C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Firefox\Profiles\default.lj6\cook ies.txt
Risk: Medium

Name: Spyware.Cookie.2o7
Path: :mozilla.113:C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Firefox\Profiles\default.lj6\cook ies.txt
Risk: Medium

Name: Spyware.Cookie.2o7
Path: :mozilla.114:C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Firefox\Profiles\default.lj6\cook ies.txt
Risk: Medium

Name: Spyware.Cookie.Tribalfusion
Path: :mozilla.120:C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Firefox\Profiles\default.lj6\cook ies.txt
Risk: Medium

Name: Spyware.Cookie.Itrack
Path: :mozilla.126:C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Firefox\Profiles\default.lj6\cook ies.txt
Risk: Medium

Name: Spyware.Cookie.Itrack
Path: :mozilla.127:C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Firefox\Profiles\default.lj6\cook ies.txt
Risk: Medium

Name: Spyware.Cookie.Burstnet
Path: :mozilla.128:C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Firefox\Profiles\default.lj6\cook ies.txt
Risk: Medium

Name: Spyware.Cookie.Burstnet
Path: :mozilla.129:C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Firefox\Profiles\default.lj6\cook ies.txt
Risk: Medium

Name: Spyware.Cookie.Euroclick
Path: :mozilla.130:C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Firefox\Profiles\default.lj6\cook ies.txt
Risk: Medium

Name: Spyware.Cookie.Euroclick
Path: :mozilla.131:C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Firefox\Profiles\default.lj6\cook ies.txt
Risk: Medium

Name: Spyware.Cookie.Euroclick
Path: :mozilla.132:C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Firefox\Profiles\default.lj6\cook ies.txt
Risk: Medium

Name: Spyware.Cookie.Casalemedia
Path: :mozilla.138:C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Firefox\Profiles\default.lj6\cook ies.txt
Risk: Medium

Name: Spyware.Cookie.Casalemedia
Path: :mozilla.139:C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Firefox\Profiles\default.lj6\cook ies.txt
Risk: Medium

Name: Spyware.Cookie.Casalemedia
Path: :mozilla.140:C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Firefox\Profiles\default.lj6\cook ies.txt
Risk: Medium

Name: Spyware.Cookie.Casalemedia
Path: :mozilla.141:C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Firefox\Profiles\default.lj6\cook ies.txt
Risk: Medium

Name: Spyware.Cookie.Casalemedia
Path: :mozilla.142:C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Firefox\Profiles\default.lj6\cook ies.txt
Risk: Medium

Name: Spyware.Cookie.Casalemedia
Path: :mozilla.143:C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Firefox\Profiles\default.lj6\cook ies.txt
Risk: Medium

Name: Spyware.Cookie.Tradedoubler
Path: :mozilla.144:C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Firefox\Profiles\default.lj6\cook ies.txt
Risk: Medium

Name: Spyware.Cookie.Tradedoubler
Path: :mozilla.145:C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Firefox\Profiles\default.lj6\cook ies.txt
Risk: Medium

Name: Spyware.Cookie.Tradedoubler
Path: :mozilla.146:C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Firefox\Profiles\default.lj6\cook ies.txt
Risk: Medium

Name: Spyware.Cookie.Yieldmanager
Path: :mozilla.147:C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Firefox\Profiles\default.lj6\cook ies.txt
Risk: Medium

Name: Spyware.Cookie.Yieldmanager
Path: :mozilla.148:C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Firefox\Profiles\default.lj6\cook ies.txt
Risk: Medium

Name: Spyware.Cookie.Yieldmanager
Path: :mozilla.149:C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Firefox\Profiles\default.lj6\cook ies.txt
Risk: Medium

Name: Spyware.Cookie.Yieldmanager
Path: :mozilla.150:C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Firefox\Profiles\default.lj6\cook ies.txt
Risk: Medium

Name: Spyware.Cookie.Yieldmanager
Path: :mozilla.151:C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Firefox\Profiles\default.lj6\cook ies.txt
Risk: Medium

Name: Spyware.Cookie.Yieldmanager
Path: :mozilla.152:C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Firefox\Profiles\default.lj6\cook ies.txt
Risk: Medium

Name: Spyware.Cookie.Yieldmanager
Path: :mozilla.153:C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Firefox\Profiles\default.lj6\cook ies.txt
Risk: Medium

Name: Spyware.Cookie.Targetnet
Path: :mozilla.154:C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Firefox\Profiles\default.lj6\cook ies.txt
Risk: Medium

Name: Spyware.Cookie.Valueclick
Path: :mozilla.155:C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Firefox\Profiles\default.lj6\cook ies.txt
Risk: Medium

Name: Spyware.Cookie.Questionmarket
Path: :mozilla.157:C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Firefox\Profiles\default.lj6\cook ies.txt
Risk: Medium

Name: Spyware.Cookie.247realmedia
Path: :mozilla.158:C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Firefox\Profiles\default.lj6\cook ies.txt
Risk: Medium

Name: Spyware.Cookie.Advertising
Path: :mozilla.177:C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Firefox\Profiles\default.lj6\cook ies.txt
Risk: Medium

Name: Spyware.Cookie.Advertising
Path: :mozilla.178:C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Firefox\Profiles\default.lj6\cook ies.txt
Risk: Medium

Name: Spyware.Cookie.Advertising
Path: :mozilla.179:C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Firefox\Profiles\default.lj6\cook ies.txt
Risk: Medium

Name: Spyware.Cookie.Advertising
Path: :mozilla.180:C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Firefox\Profiles\default.lj6\cook ies.txt
Risk: Medium

Name: Spyware.Cookie.Advertising
Path: :mozilla.181:C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Firefox\Profiles\default.lj6\cook ies.txt
Risk: Medium

Name: Spyware.Cookie.Advertising
Path: :mozilla.182:C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Firefox\Profiles\default.lj6\cook ies.txt
Risk: Medium

Name: Spyware.Cookie.Advertising
Path: :mozilla.183:C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Firefox\Profiles\default.lj6\cook ies.txt
Risk: Medium

Name: Spyware.Cookie.Advertising
Path: :mozilla.184:C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Firefox\Profiles\default.lj6\cook ies.txt
Risk: Medium

Name: Spyware.Cookie.Advertising
Path: :mozilla.185:C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Firefox\Profiles\default.lj6\cook ies.txt
Risk: Medium

Name: Spyware.Cookie.Advertising
Path: :mozilla.186:C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Firefox\Profiles\default.lj6\cook ies.txt
Risk: Medium

Name: Spyware.Cookie.Advertising
Path: :mozilla.187:C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Firefox\Profiles\default.lj6\cook ies.txt
Risk: Medium

Name: Spyware.Cookie.Advertising
Path: :mozilla.188:C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Firefox\Profiles\default.lj6\cook ies.txt
Risk: Medium

Name: Spyware.Cookie.Advertising
Path: :mozilla.189:C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Firefox\Profiles\default.lj6\cook ies.txt
Risk: Medium

Name: Spyware.Cookie.Falkag
Path: :mozilla.192:C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Firefox\Profiles\default.lj6\cook ies.txt
Risk: Medium

Name: Spyware.Cookie.Falkag
Path: :mozilla.194:C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Firefox\Profiles\default.lj6\cook ies.txt
Risk: Medium

Name: Spyware.Cookie.Falkag
Path: :mozilla.195:C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Firefox\Profiles\default.lj6\cook ies.txt
Risk: Medium

Name: Spyware.Cookie.Adtech
Path: :mozilla.197:C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Firefox\Profiles\default.lj6\cook ies.txt
Risk: Medium

Name: Spyware.Cookie.Adtech
Path: :mozilla.198:C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Firefox\Profiles\default.lj6\cook ies.txt
Risk: Medium

Name: Spyware.Cookie.Hitbox
Path: :mozilla.199:C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Firefox\Profiles\default.lj6\cook ies.txt
Risk: Medium

Name: Spyware.Cookie.Valueclick
Path: :mozilla.210:C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Firefox\Profiles\default.lj6\cook ies.txt
Risk: Medium

Name: Spyware.Cookie.Sexcounter
Path: :mozilla.211:C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Firefox\Profiles\default.lj6\cook ies.txt
Risk: Medium

Name: Spyware.Cookie.Sexcounter
Path: :mozilla.212:C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Firefox\Profiles\default.lj6\cook ies.txt
Risk: Medium

Name: Spyware.Cookie.Sexcounter
Path: :mozilla.213:C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Firefox\Profiles\default.lj6\cook ies.txt
Risk: Medium

Name: Spyware.Cookie.Sexcounter
Path: :mozilla.214:C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Firefox\Profiles\default.lj6\cook ies.txt
Risk: Medium

Name: Spyware.Cookie.Sexcounter
Path: :mozilla.215:C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Firefox\Profiles\default.lj6\cook ies.txt
Risk: Medium

Name: Spyware.Cookie.Sexcounter
Path: :mozilla.216:C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Firefox\Profiles\default.lj6\cook ies.txt
Risk: Medium

Name: Spyware.Cookie.Sexcounter
Path: :mozilla.217:C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Firefox\Profiles\default.lj6\cook ies.txt
Risk: Medium

Name: Spyware.Cookie.Sexcounter
Path: :mozilla.218:C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Firefox\Profiles\default.lj6\cook ies.txt
Risk: Medium

Name: Spyware.Cookie.Sexlist
Path: :mozilla.219:C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Firefox\Profiles\default.lj6\cook ies.txt
Risk: Medium

Name: Spyware.Cookie.Sexlist
Path: :mozilla.220:C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Firefox\Profiles\default.lj6\cook ies.txt
Risk: Medium

Name: Spyware.Cookie.Paycounter
Path: :mozilla.223:C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Firefox\Profiles\default.lj6\cook ies.txt
Risk: Medium

Name: Spyware.Cookie.Masterstats
Path: :mozilla.224:C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Firefox\Profiles\default.lj6\cook ies.txt
Risk: Medium

Name: Spyware.Cookie.Overture
Path: :mozilla.238:C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Firefox\Profiles\default.lj6\cook ies.txt
Risk: Medium

Name: Spyware.Cookie.Overture
Path: :mozilla.239:C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Firefox\Profiles\default.lj6\cook ies.txt
Risk: Medium

Name: Spyware.Cookie.Ru4
Path: :mozilla.240:C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Firefox\Profiles\default.lj6\cook ies.txt
Risk: Medium

Name: Spyware.Cookie.Ru4
Path: :mozilla.241:C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Firefox\Profiles\default.lj6\cook ies.txt
Risk: Medium

Name: Spyware.Cookie.Hitbox
Path: :mozilla.242:C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Firefox\Profiles\default.lj6\cook ies.txt
Risk: Medium

Name: Spyware.Cookie.Estat
Path: :mozilla.257:C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Firefox\Profiles\default.lj6\cook ies.txt
Risk: Medium

Name: Spyware.Cookie.Bfast
Path: :mozilla.271:C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Firefox\Profiles\default.lj6\cook ies.txt
Risk: Medium

Name: Spyware.Cookie.Doubleclick
Path: :mozilla.14:C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Profiles\default\e64ls23e.slt\coo kies.txt
Risk: Medium

Name: Spyware.Cookie.Serving-sys
Path: :mozilla.53:C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Profiles\default\e64ls23e.slt\coo kies.txt
Risk: Medium

Name: Spyware.Cookie.Serving-sys
Path: :mozilla.54:C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Profiles\default\e64ls23e.slt\coo kies.txt
Risk: Medium

Name: Spyware.Cookie.Serving-sys
Path: :mozilla.55:C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Profiles\default\e64ls23e.slt\coo kies.txt
Risk: Medium

Name: Spyware.Cookie.Serving-sys
Path: :mozilla.56:C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Profiles\default\e64ls23e.slt\coo kies.txt
Risk: Medium

Name: Spyware.Cookie.Falkag
Path: :mozilla.61:C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Profiles\default\e64ls23e.slt\coo kies.txt
Risk: Medium

Name: Spyware.Cookie.Falkag
Path: :mozilla.64:C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Profiles\default\e64ls23e.slt\coo kies.txt
Risk: Medium

Name: Spyware.Cookie.Falkag
Path: :mozilla.65:C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Profiles\default\e64ls23e.slt\coo kies.txt
Risk: Medium

Name: Spyware.Cookie.Falkag
Path: :mozilla.66:C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Profiles\default\e64ls23e.slt\coo kies.txt
Risk: Medium

Name: Spyware.Cookie.Adtech
Path: :mozilla.81:C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Profiles\default\e64ls23e.slt\coo kies.txt
Risk: Medium

Name: Spyware.Cookie.Adtech
Path: :mozilla.82:C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Profiles\default\e64ls23e.slt\coo kies.txt
Risk: Medium

Name: Spyware.Cookie.Tradedoubler
Path: :mozilla.83:C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Profiles\default\e64ls23e.slt\coo kies.txt
Risk: Medium

Name: Spyware.Cookie.Advertising
Path: :mozilla.84:C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Profiles\default\e64ls23e.slt\coo kies.txt
Risk: Medium

Name: Spyware.Cookie.Advertising
Path: :mozilla.85:C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Profiles\default\e64ls23e.slt\coo kies.txt
Risk: Medium

Name: Spyware.Cookie.Advertising
Path: :mozilla.86:C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Profiles\default\e64ls23e.slt\coo kies.txt
Risk: Medium

Name: Spyware.Cookie.Advertising
Path: :mozilla.87:C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Profiles\default\e64ls23e.slt\coo kies.txt
Risk: Medium

Name: Spyware.Cookie.Advertising
Path: :mozilla.88:C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Profiles\default\e64ls23e.slt\coo kies.txt
Risk: Medium

Name: Spyware.Cookie.Advertising
Path: :mozilla.89:C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Profiles\default\e64ls23e.slt\coo kies.txt
Risk: Medium

Name: Spyware.Cookie.Tradedoubler
Path: :mozilla.90:C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Profiles\default\e64ls23e.slt\coo kies.txt
Risk: Medium

Name: Spyware.Cookie.Advertising
Path: :mozilla.91:C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Profiles\default\e64ls23e.slt\coo kies.txt
Risk: Medium

Name: Spyware.Cookie.Advertising
Path: :mozilla.92:C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Profiles\default\e64ls23e.slt\coo kies.txt
Risk: Medium

Name: Spyware.Cookie.Mediaplex
Path: :mozilla.99:C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Profiles\default\e64ls23e.slt\coo kies.txt
Risk: Medium

Name: Spyware.Cookie.Clickzs
Path: :mozilla.121:C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Profiles\default\e64ls23e.slt\coo kies.txt
Risk: Medium

Name: Spyware.Cookie.Clickzs
Path: :mozilla.123:C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Profiles\default\e64ls23e.slt\coo kies.txt
Risk: Medium

Name: Spyware.Cookie.Clickzs
Path: :mozilla.137:C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Profiles\default\e64ls23e.slt\coo kies.txt
Risk: Medium

Name: Spyware.Cookie.Casalemedia
Path: :mozilla.143:C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Profiles\default\e64ls23e.slt\coo kies.txt
Risk: Medium

Name: Spyware.Cookie.Casalemedia
Path: :mozilla.144:C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Profiles\default\e64ls23e.slt\coo kies.txt
Risk: Medium

Name: Spyware.Cookie.Casalemedia
Path: :mozilla.145:C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Profiles\default\e64ls23e.slt\coo kies.txt
Risk: Medium

Name: Spyware.Cookie.Tribalfusion
Path: :mozilla.146:C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Profiles\default\e64ls23e.slt\coo kies.txt
Risk: Medium

Name: Spyware.Cookie.Trafficmp
Path: :mozilla.147:C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Profiles\default\e64ls23e.slt\coo kies.txt
Risk: Medium

Name: Spyware.Cookie.Trafficmp
Path: :mozilla.148:C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Profiles\default\e64ls23e.slt\coo kies.txt
Risk: Medium

Name: Spyware.Cookie.Trafficmp
Path: :mozilla.149:C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Profiles\default\e64ls23e.slt\coo kies.txt
Risk: Medium

Name: Spyware.Cookie.Trafficmp
Path: :mozilla.151:C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Profiles\default\e64ls23e.slt\coo kies.txt
Risk: Medium

Name: Spyware.Cookie.Trafficmp
Path: :mozilla.152:C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Profiles\default\e64ls23e.slt\coo kies.txt
Risk: Medium

Name: Spyware.Cookie.Yieldmanager
Path: :mozilla.159:C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Profiles\default\e64ls23e.slt\coo kies.txt
Risk: Medium

Name: Spyware.Cookie.Yieldmanager
Path: :mozilla.160:C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Profiles\default\e64ls23e.slt\coo kies.txt
Risk: Medium

Name: Spyware.Cookie.Yieldmanager
Path: :mozilla.161:C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Profiles\default\e64ls23e.slt\coo kies.txt
Risk: Medium

Name: Spyware.Cookie.Yieldmanager
Path: :mozilla.162:C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Profiles\default\e64ls23e.slt\coo kies.txt
Risk: Medium

Name: Spyware.Cookie.Yieldmanager
Path: :mozilla.163:C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Profiles\default\e64ls23e.slt\coo kies.txt
Risk: Medium

Name: Spyware.Cookie.Fastclick
Path: :mozilla.165:C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Profiles\default\e64ls23e.slt\coo kies.txt
Risk: Medium

Name: Spyware.Cookie.Fastclick
Path: :mozilla.166:C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Profiles\default\e64ls23e.slt\coo kies.txt
Risk: Medium

Name: Spyware.Cookie.Questionmarket
Path: :mozilla.172:C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Profiles\default\e64ls23e.slt\coo kies.txt
Risk: Medium

Name: Spyware.Cookie.Ru4
Path: :mozilla.174:C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Profiles\default\e64ls23e.slt\coo kies.txt
Risk: Medium

Name: Spyware.Cookie.Ru4
Path: :mozilla.176:C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Profiles\default\e64ls23e.slt\coo kies.txt
Risk: Medium

Name: Spyware.Cookie.Pointroll
Path: :mozilla.182:C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Profiles\default\e64ls23e.slt\coo kies.txt
Risk: Medium

Name: Spyware.Cookie.Pointroll
Path: :mozilla.183:C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Profiles\default\e64ls23e.slt\coo kies.txt
Risk: Medium

Name: Spyware.Cookie.Pointroll
Path: :mozilla.184:C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Profiles\default\e64ls23e.slt\coo kies.txt
Risk: Medium

Name: Spyware.Cookie.Falkag
Path: :mozilla.185:C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Profiles\default\e64ls23e.slt\coo kies.txt
Risk: Medium

Name: Spyware.Cookie.Falkag
Path: :mozilla.186:C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Profiles\default\e64ls23e.slt\coo kies.txt
Risk: Medium

Name: Spyware.Cookie.Falkag
Path: :mozilla.187:C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Profiles\default\e64ls23e.slt\coo kies.txt
Risk: Medium

Name: Dialer.Generic
Path: D:\NICO\Nuevas2\Video\MonicaHoyos.zip/Zona_privada.exe
Risk: High

Holo, son todos temporales de Firefox y cookies que te recomiendo usar Disk Cleaner para limpiar cookies y temporales y RegSeeker para limpiar el registro de Win.

Hay un dialer pero seguramente el Ewido ya lo tiene que haber eliminado.

Realiza un escaneo con Panda Online despues de usar los programas de arriba y repetis los anteriores escaneos a ver si hay algo que no se puedo eliminar.

Salu2

Pase el disk cleaner y el reg seeker. También he hecho un scaneo en modo seguro con los tres antivirus online.Solo el kaspersky detecto algo:

------------------------------------------------------------------------------
KASPERSKY ON-LINE SCANNER REPORT
Friday, November 04, 2005 16:44:16
Operating System: Microsoft Windows XP Professional, Service Pack 2 (Build 2600)
Kaspersky On-line Scanner version: 5.0.67.0
Kaspersky Anti-Virus database last update: 4/11/2005
Kaspersky Anti-Virus database records: 148536
-------------------------------------------------------------------------------

Scan Settings:
Scan using the following antivirus database: standard
Scan Archives: true
Scan Mail Bases: true

Scan Target - My Computer:
A:\
C:\
D:\
E:\

Scan Statistics:
Total number of scanned objects: 30240
Number of viruses found: 1
Number of infected objects: 0
Number of suspicious objects: 2
Duration of the scan process: 3800 sec

Infected Object Name - Virus Name
C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Profiles\default\e64ls23e.slt\Cac he\AB84E41Ed01/Keymaker.exe Suspicious: Type_Win32
C:\Documents and Settings\Niklas\Datos de programa\Mozilla\Profiles\default\e64ls23e.slt\Cac he\AB84E41Ed01 Suspicious: Type_Win32

Scan process completed.

Hola, lo que esta encontrando Kaspersky esta dentro del Cache de Firefox, por lo que si el no lo borro podes hacer una limpieza del Firefox de temporales, historial y cache. borralo y nos contas como sigue la cosa.

SAlu2