![]() |
| |||||||
| Temas Solucionados Casos de HijackThis y Malwares resueltos. (Solo lectura) |
![]() |
| | Herramientas |
![]() | ![]() |
| |||
| Es la primera vez que escribo al foro, la verdad es que he solucionado muchos problemas leyendo los distintos foros... Mi problema ahora es que al escanear mi maquina con el SUPERAntiSpyware siempre me sale un trojan Net AWUS/Fake. C:\WINDOWS\SYSTEM32\MMMLCHLC.DLL el cual no puedo sacar de ninguna forma, con panda online no sale infeccion y con Mcafee tampoco. Agradecere ayuda. Por otro lado me gusta mucho saber que hay gente tan capaz como mucho de ustedes, yo soy muy novato en esto, la realidad es que me gusta la compu. y cada vez que pasa esto(una infeccion y mal funcionamiento de la maquina) mi tecnico "amigo" la unica solucion que me da es la de ¡¡formatear!!! esta es la primera vez que no le hago caso y leyendo en el foro he logrado poner en funcionamiento varias cosas que no estaban andando(internet expl. firewall ect.) y sacar varios virus... xtodo esto gracias lo unico que me queda en el tintero es este trojan Net AWUS/Fake |
![]() | ![]() |
| ||||
| Re: no puedo sacar un troyano hola si tienes razon eso es tipico la mayoria de los tecnicos por no decir todos, siempre queiren formatear asi se ahorran problemas . Descarga Superantispyware Apaga restaurar sistema Inicia a modo prueba de fallos Ejecuta superantispyware (elimina lo que encuentre) Inicia en modo normal Utiliza el programa ccleaner. pasando por su opcion limpiador para eliminar archivos obsoletos.pasa luego por su opcion del registro (haciendo copia de seguridad) Haz un scan con kaspersky para detectar infecciones y pegas el log aqui.salu2. |
![]() | ![]() |
| |||
| gracias residentevil por la rapidez de tu contestacion. hice todo tal cual el SUPERAntiSpyware en modo seguro no encontro nada! luego pase Kaspersky online (el cual se demoro mucho quizas por ser la primera vez) y me tiro esta reporte en critical areas. ------------------------------------------------------------------------------- KASPERSKY ONLINE SCANNER REPORT Monday, February 25, 2008 8:52:18 AM Operating System: Microsoft Windows XP Professional, Service Pack 2 (Build 2600) Kaspersky Online Scanner version: 5.0.98.0 Kaspersky Anti-Virus database last update: 25/02/2008 Kaspersky Anti-Virus database records: 579441 ------------------------------------------------------------------------------- Scan Settings: Scan using the following antivirus database: extended Scan Archives: true Scan Mail Bases: true Scan Target - Critical Areas: C:\WINDOWS C:\DOCUME~1\Tere&Edu\CONFIG~1\Temp\ Scan Statistics: Total number of scanned objects: 16657 Number of viruses found: 0 Number of infected objects: 0 Number of suspicious objects: 0 Duration of the scan process: 00 51Infected Object Name / Virus Name / Last Action C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped C:\WINDOWS\SchedLgU.Txt Object is locked skipped C:\WINDOWS\Sti_Trace.log Object is locked skipped C:\WINDOWS\system32\CatRoot2\edb.log Object is locked skipped C:\WINDOWS\system32\CatRoot2\tmp.edb Object is locked skipped C:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped C:\WINDOWS\system32\config\default Object is locked skipped C:\WINDOWS\system32\config\default.LOG Object is locked skipped C:\WINDOWS\system32\config\Internet.evt Object is locked skipped C:\WINDOWS\system32\config\SAM Object is locked skipped C:\WINDOWS\system32\config\SAM.LOG Object is locked skipped C:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped C:\WINDOWS\system32\config\SECURITY Object is locked skipped C:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped C:\WINDOWS\system32\config\software Object is locked skipped C:\WINDOWS\system32\config\software.LOG Object is locked skipped C:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped C:\WINDOWS\system32\config\system Object is locked skipped C:\WINDOWS\system32\config\system.LOG Object is locked skipped C:\WINDOWS\system32\h323log.txt Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MA P Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MA P Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DAT A Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP Object is locked skipped C:\WINDOWS\Temp\mcafee_PdRYLUq44uHfFiH Object is locked skipped C:\WINDOWS\Temp\mcmsc_8ghEFLUvwKmK4y4 Object is locked skipped C:\WINDOWS\Temp\mcmsc_d8hN4nqee5aOL0v Object is locked skipped C:\WINDOWS\Temp\mcmsc_eSgUaFvG0ulZEP9 Object is locked skipped C:\WINDOWS\Temp\mcmsc_inwFi3geywsZov4 Object is locked skipped C:\WINDOWS\wiadebug.log Object is locked skipped C:\WINDOWS\wiaservc.log Object is locked skipped Scan process completed. Es la primera vez que uso este antivirus online te comento que al escanear "my computer" me dice: Number of viruses found=2. Number of infected objects=5. anoche lo hice 2 veces pero no me genero un log, no se si esto es asi. y en ------------------------------------------------------------------------------- KASPERSKY ONLINE SCANNER REPORT Monday, February 25, 2008 9:49:57 AM Operating System: Microsoft Windows XP Professional, Service Pack 2 (Build 2600) Kaspersky Online Scanner version: 5.0.98.0 Kaspersky Anti-Virus database last update: 25/02/2008 Kaspersky Anti-Virus database records: 579441 ------------------------------------------------------------------------------- Scan Settings: Scan using the following antivirus database: extended Scan Archives: true Scan Mail Bases: true Scan Target - Folders: C:\ Scan Statistics: Total number of scanned objects: 48444 Number of viruses found: 2 Number of infected objects: 2 Number of suspicious objects: 0 Duration of the scan process: 00:53:10 Infected Object Name / Virus Name / Last Action C:\Documents and Settings\All Users\Datos de programa\McAfee\MNA\NAData Object is locked skipped C:\Documents and Settings\All Users\Datos de programa\McAfee\MPF\data\log.edb Object is locked skipped C:\Documents and Settings\All Users\Datos de programa\McAfee\MSC\Logs\Events.dat Object is locked skipped C:\Documents and Settings\All Users\Datos de programa\McAfee\MSC\Logs\{56F146E2-88B7-4EF4-B6C1-3C637342853B}.log Object is locked skipped C:\Documents and Settings\All Users\Datos de programa\McAfee\MSC\Logs\{CF69E973-8CCE-43DE-9605-796AB1CA8366}.log Object is locked skipped C:\Documents and Settings\All Users\Datos de programa\McAfee\MSC\McUsers.dat Object is locked skipped C:\Documents and Settings\All Users\Datos de programa\McAfee\VirusScan\Data\TFR1.tmp Object is locked skipped C:\Documents and Settings\All Users\Datos de programa\McAfee\VirusScan\Logs\OAS.Log Object is locked skipped C:\Documents and Settings\All Users\Datos de programa\Microsoft\Network\Downloader\qmgr0.dat Object is locked skipped C:\Documents and Settings\All Users\Datos de programa\Microsoft\Network\Downloader\qmgr1.dat Object is locked skipped C:\Documents and Settings\LocalService\Configuración local\Archivos temporales de Internet\Content.IE5\0N6J3RL7\s32[1].exe Infected: Trojan-Downloader.Win32.Agent.bnm skipped C:\Documents and Settings\LocalService\Configuración local\Archivos temporales de Internet\Content.IE5\index.dat Object is locked skipped C:\Documents and Settings\LocalService\Configuración local\Archivos temporales de Internet\Content.IE5\S5R8YBPU\u_f1_v34_77[1].exe Infected: Trojan-Proxy.Win32.Saturn.ar skipped C:\Documents and Settings\LocalService\Configuración local\Datos de programa\Microsoft\Windows\UsrClass.dat Object is locked skipped C:\Documents and Settings\LocalService\Configuración local\Datos de programa\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped C:\Documents and Settings\LocalService\Configuración local\Historial\History.IE5\index.dat Object is locked skipped C:\Documents and Settings\LocalService\Cookies\index.dat Object is locked skipped C:\Documents and Settings\LocalService\NTUSER.DAT Object is locked skipped C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked skipped C:\Documents and Settings\NetworkService\Configuración local\Datos de programa\Microsoft\Windows\UsrClass.dat Object is locked skipped C:\Documents and Settings\NetworkService\Configuración local\Datos de programa\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped C:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked skipped C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked skipped C:\Documents and Settings\Tere&Edu\Configuración local\Archivos temporales de Internet\AntiPhishing\B3BB5BBA-E7D5-40AB-A041-A5B1C0B26C8F.dat Object is locked skipped C:\Documents and Settings\Tere&Edu\Configuración local\Archivos temporales de Internet\Content.IE5\index.dat Object is locked skipped C:\Documents and Settings\Tere&Edu\Configuración local\Datos de programa\Microsoft\Feeds Cache\index.dat Object is locked skipped C:\Documents and Settings\Tere&Edu\Configuración local\Datos de programa\Microsoft\Windows\UsrClass.dat Object is locked skipped C:\Documents and Settings\Tere&Edu\Configuración local\Datos de programa\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped C:\Documents and Settings\Tere&Edu\Configuración local\Historial\History.IE5\index.dat Object is locked skipped C:\Documents and Settings\Tere&Edu\Configuración local\Historial\History.IE5\MSHist0120080225200802 26\index.dat Object is locked skipped C:\Documents and Settings\Tere&Edu\Cookies\index.dat Object is locked skipped C:\Documents and Settings\Tere&Edu\Datos de programa\SiteAdvisor\SiteAdv.csh Object is locked skipped C:\Documents and Settings\Tere&Edu\Datos de programa\SUPERAntiSpyware.com\SUPERAntiSpyware\SUP ERANTISPYWARE.LOG Object is locked skipped C:\Documents and Settings\Tere&Edu\NTUSER.DAT Object is locked skipped C:\Documents and Settings\Tere&Edu\NTUSER.DAT.LOG Object is locked skipped C:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped C:\WINDOWS\SchedLgU.Txt Object is locked skipped C:\WINDOWS\Sti_Trace.log Object is locked skipped C:\WINDOWS\system32\CatRoot2\edb.log Object is locked skipped C:\WINDOWS\system32\CatRoot2\tmp.edb Object is locked skipped C:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped C:\WINDOWS\system32\config\default Object is locked skipped C:\WINDOWS\system32\config\default.LOG Object is locked skipped C:\WINDOWS\system32\config\Internet.evt Object is locked skipped C:\WINDOWS\system32\config\SAM Object is locked skipped C:\WINDOWS\system32\config\SAM.LOG Object is locked skipped C:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped C:\WINDOWS\system32\config\SECURITY Object is locked skipped C:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped C:\WINDOWS\system32\config\software Object is locked skipped C:\WINDOWS\system32\config\software.LOG Object is locked skipped C:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped C:\WINDOWS\system32\config\system Object is locked skipped C:\WINDOWS\system32\config\system.LOG Object is locked skipped C:\WINDOWS\system32\h323log.txt Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MA P Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MA P Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DAT A Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP Object is locked skipped C:\WINDOWS\Temp\mcafee_PdRYLUq44uHfFiH Object is locked skipped C:\WINDOWS\Temp\mcmsc_8ghEFLUvwKmK4y4 Object is locked skipped C:\WINDOWS\Temp\mcmsc_d8hN4nqee5aOL0v Object is locked skipped C:\WINDOWS\Temp\mcmsc_eSgUaFvG0ulZEP9 Object is locked skipped C:\WINDOWS\Temp\mcmsc_inwFi3geywsZov4 Object is locked skipped C:\WINDOWS\wiadebug.log Object is locked skipped C:\WINDOWS\wiaservc.log Object is locked skipped Scan process completed. Veo que algo hay si me puedes decir los pasos que siguen te lo agradecere. |
![]() | ![]() |
| ||||
| Re: no puedo sacar un troyano hola bueno el scan cuando lo hagas hazlo a toda tu pc aca te dejo el manual de kaspersky. por ahora elimina lo siguiente: C:\Documents and Settings\LocalService\Configuración local\Archivos temporales de Internet\Content.IE5\0N6J3RL7\s32[1].exe C:\Documents and Settings\LocalService\Configuración local\Archivos temporales de Internet\Content.IE5\S5R8YBPU\u_f1_v34_77[1].exe si no puedes por que estan bloqueados usa Fileassassin haz un nuevo scan siguiente el manual indicado y pegas el reporte. ![]() |
![]() | ![]() |
| |||
| hola, te juro que lo hice asi pero en ese momento no funcionaba bien mi maquina o la web. Bueno la cosa es que te agradezco y he echo todo tal cual me dijiste; esta vez Kaspersky se porto!!. este es el log. ------------------------------------------------------------------------------- KASPERSKY ONLINE SCANNER REPORT Tuesday, February 26, 2008 12:05:04 PM Operating System: Microsoft Windows XP Professional, Service Pack 2 (Build 2600) Kaspersky Online Scanner version: 5.0.98.0 Kaspersky Anti-Virus database last update: 26/02/2008 Kaspersky Anti-Virus database records: 581816 ------------------------------------------------------------------------------- Scan Settings: Scan using the following antivirus database: extended Scan Archives: true Scan Mail Bases: true Scan Target - My Computer: C:\ D:\ Scan Statistics: Total number of scanned objects: 48284 Number of viruses found: 0 Number of infected objects: 0 Number of suspicious objects: 0 Duration of the scan process: 00:58:58 Infected Object Name / Virus Name / Last Action C:\Documents and Settings\All Users\Datos de programa\McAfee\MNA\NAData Object is locked skipped C:\Documents and Settings\All Users\Datos de programa\McAfee\MPF\data\log.edb Object is locked skipped C:\Documents and Settings\All Users\Datos de programa\McAfee\MSC\Logs\Events.dat Object is locked skipped C:\Documents and Settings\All Users\Datos de programa\McAfee\MSC\Logs\{56F146E2-88B7-4EF4-B6C1-3C637342853B}.log Object is locked skipped C:\Documents and Settings\All Users\Datos de programa\McAfee\MSC\Logs\{78AB4023-B873-47DC-88C5-4C267280B650}.log Object is locked skipped C:\Documents and Settings\All Users\Datos de programa\McAfee\MSC\Logs\{CF69E973-8CCE-43DE-9605-796AB1CA8366}.log Object is locked skipped C:\Documents and Settings\All Users\Datos de programa\McAfee\MSC\McUsers.dat Object is locked skipped C:\Documents and Settings\All Users\Datos de programa\McAfee\VirusScan\Data\TFR1.tmp Object is locked skipped C:\Documents and Settings\All Users\Datos de programa\McAfee\VirusScan\Logs\OAS.Log Object is locked skipped C:\Documents and Settings\All Users\Datos de programa\Microsoft\Network\Downloader\qmgr0.dat Object is locked skipped C:\Documents and Settings\All Users\Datos de programa\Microsoft\Network\Downloader\qmgr1.dat Object is locked skipped C:\Documents and Settings\LocalService\Configuración local\Archivos temporales de Internet\Content.IE5\index.dat Object is locked skipped C:\Documents and Settings\LocalService\Configuración local\Datos de programa\Microsoft\Windows\UsrClass.dat Object is locked skipped C:\Documents and Settings\LocalService\Configuración local\Datos de programa\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped C:\Documents and Settings\LocalService\Configuración local\Historial\History.IE5\index.dat Object is locked skipped C:\Documents and Settings\LocalService\Cookies\index.dat Object is locked skipped C:\Documents and Settings\LocalService\NTUSER.DAT Object is locked skipped C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked skipped C:\Documents and Settings\NetworkService\Configuración local\Datos de programa\Microsoft\Windows\UsrClass.dat Object is locked skipped C:\Documents and Settings\NetworkService\Configuración local\Datos de programa\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped C:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked skipped C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked skipped C:\Documents and Settings\Tere&Edu\Configuración local\Archivos temporales de Internet\Content.IE5\index.dat Object is locked skipped C:\Documents and Settings\Tere&Edu\Configuración local\Datos de programa\Microsoft\Feeds Cache\index.dat Object is locked skipped C:\Documents and Settings\Tere&Edu\Configuración local\Datos de programa\Microsoft\Windows\UsrClass.dat Object is locked skipped C:\Documents and Settings\Tere&Edu\Configuración local\Datos de programa\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped C:\Documents and Settings\Tere&Edu\Configuración local\Historial\History.IE5\index.dat Object is locked skipped C:\Documents and Settings\Tere&Edu\Configuración local\Historial\History.IE5\MSHist0120080226200802 27\index.dat Object is locked skipped C:\Documents and Settings\Tere&Edu\Cookies\index.dat Object is locked skipped C:\Documents and Settings\Tere&Edu\Datos de programa\SiteAdvisor\SiteAdv.csh Object is locked skipped C:\Documents and Settings\Tere&Edu\Datos de programa\SUPERAntiSpyware.com\SUPERAntiSpyware\SUP ERANTISPYWARE.LOG Object is locked skipped C:\Documents and Settings\Tere&Edu\NTUSER.DAT Object is locked skipped C:\Documents and Settings\Tere&Edu\NTUSER.DAT.LOG Object is locked skipped C:\Documents and Settings\Tere&Edu\UserData\index.dat Object is locked skipped C:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped C:\WINDOWS\SchedLgU.Txt Object is locked skipped C:\WINDOWS\Sti_Trace.log Object is locked skipped C:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped C:\WINDOWS\system32\config\default Object is locked skipped C:\WINDOWS\system32\config\default.LOG Object is locked skipped C:\WINDOWS\system32\config\Internet.evt Object is locked skipped C:\WINDOWS\system32\config\SAM Object is locked skipped C:\WINDOWS\system32\config\SAM.LOG Object is locked skipped C:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped C:\WINDOWS\system32\config\SECURITY Object is locked skipped C:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped C:\WINDOWS\system32\config\software Object is locked skipped C:\WINDOWS\system32\config\software.LOG Object is locked skipped C:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped C:\WINDOWS\system32\config\system Object is locked skipped C:\WINDOWS\system32\config\system.LOG Object is locked skipped C:\WINDOWS\system32\h323log.txt Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MA P Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MA P Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DAT A Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP Object is locked skipped C:\WINDOWS\Temp\mcafee_x4aogkAkipYKWXj Object is locked skipped C:\WINDOWS\Temp\mcmsc_ba2CHu7TOqgDyfS Object is locked skipped C:\WINDOWS\Temp\mcmsc_hRvcEslOL55pv5A Object is locked skipped C:\WINDOWS\Temp\mcmsc_HWapiRLEahf7GXk Object is locked skipped C:\WINDOWS\Temp\mcmsc_iitL00TwpkRbzai Object is locked skipped C:\WINDOWS\Temp\mcmsc_XLHIBUwfyOPbZnl Object is locked skipped C:\WINDOWS\wiadebug.log Object is locked skipped C:\WINDOWS\wiaservc.log Object is locked skipped C:\WINDOWS\WindowsUpdate.log Object is locked skipped Scan process completed. Parece que ya no estan las infecciones... pero quedo atento si tengo tengo que hacer algo mas.. ha otra cosa.. activo restaurar sistema??y puedo hacer ahora que esta limpia un punto de restauracion??. desde ya muchas gracias!!!! ![]() |
![]() |
| Herramientas | |
|
|
![]() |
Temas Similares | ![]() |
| Tema | Autor | Foro | Respuestas | Último mensaje |
| No puedo eliminar un troyano: Crypt.Morphine.Gen (Solucionado) | bohr | Temas Solucionados | 4 | 01/01/08 13:02:27 |
| porfa ayudenme no he no puedo sacar el ultimatedefender de mi PC (solucionado) | XxAmoexX | Temas Solucionados | 4 | 12/11/07 09:08:17 |
| no puedo sacar este spyware =( Video ActiveX Access (Solucionado) | chedu | Temas Solucionados | 3 | 08/08/07 16:57:11 |
| Una maldita cookie que no puedo eliminar, o sera troyano??? (Solucionado) | Rheicoss | Temas Solucionados | 10 | 31/08/06 09:56:44 |
| Tengo este archivo que no lo puedo sacar!!!! (solucionado) | Hellenium | Temas Solucionados | 2 | 07/06/05 01:44:08 |