Foro de InfoSpyware - Foro de Hijackthis - Foro de Virus

hey!

amigos de forospyware!

tengo problemas con la pc!

hoy note que en cualquier carpeta que ingrese,

dentro encuentro dos carpetas:

"New Folder" y "PC"

al abrirlas, me envia al escritorio o sino a mis documentos

las borro y no hay problema!

pero al rato que vuelvo a entrar otra vez, ya estan alli de nuevo

no se que puedo hacer!

ademas de esto

en muchas carpetas encuentro ejecutables del mismo nombre!

por ejemplo:

si entro a la carpeta : "mi musica"

dentro de ella hay un ejecutable llamado: "mi musica.exe"

que me abre una ventana como si huviese abierto el explorador

de windows...


por favor agradeceria mucho su ayuda!


PD: el spybot tmb me manda msjs a cada rato!

les copio el log:

19/01/2008 12:26:45 a.m. Permitido value "First Home Page" (new data: "http://go.microsoft.com/fwlink/?LinkId=54843") agregado in Browser page!
19/01/2008 01:26:36 a.m. Permitido value "First Home Page" (new data: "") eliminado in Browser page!
01/02/2008 02:08:38 p.m. Denegado value "{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}" (new data: "") eliminado in Browser Helper Object!
01/02/2008 02:08:45 p.m. Permitido value "{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}" (new data: "") eliminado in Browser Helper Object!
01/02/2008 02:09:30 p.m. Denegado value "Adobe Reader Speed Launcher" (new data: ""C:\Archivos de programa\Adobe\Reader 8.0\Reader\Reader_sl.exe"") agregado in System Startup global entry!
01/02/2008 02:09:35 p.m. Denegado value "{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}" (new data: "") agregado in Browser Helper Object!
23/02/2008 12:35:34 a.m. Denegado (based on user decision) value "First Home Page" (new data: "http://go.microsoft.com/fwlink/?LinkId=54843") agregado in Browser page!
27/02/2008 01:06:58 p.m. Permitido (based on user decision) value "{9030D464-4C02-4ABF-8ECC-5164760863C6}" (new data: "") agregado in Browser Helper Object!
27/02/2008 01:07:41 p.m. Permitido (based on user decision) value "MsnMsgr" (new data: ""C:\Archivos de programa\Windows Live\Messenger\MsnMsgr.Exe" /background") agregado in System Startup user entry!
27/02/2008 08:25:18 p.m. Permitido (based on user decision) value "load" (new data: "C:\WINDOWS/system/wincirl.com") agregado in NT startup!
27/02/2008 08:25:20 p.m. Permitido (based on user decision) value "Shell" (new data: "Explorer.exe C:\WINDOWS/system32/SVCH0ST.EXE") cambiado in Winlogon!
27/02/2008 08:25:24 p.m. Permitido (based on user decision) value "Microsoft Agent" (new data: "C:\WINDOWS\system32\SVCH0ST.exe") agregado in System Startup global entry!
27/02/2008 08:56:48 p.m. Denegado (based on user decision) value "MSPCLOCK" (new data: "rundll32.exe streamci,StreamingDeviceSetup {97ebaacc-95bd-11d0-a3ea-00a0c9223196},{53172480-4791-11D0-A5D6-28DB04C10000},{53172480-4791-11D0-A5D6-28DB04C10000}") agregado in System Startup global entry!
27/02/2008 0934 p.m. Permitido (based on user decision) value "MsnMsgr" (new data: "") eliminado in System Startup user entry!
27/02/2008 0936 p.m. Permitido (based on user decision) value "Microsoft Agent" (new data: "") eliminado in System Startup global entry!
27/02/2008 0949 p.m. Permitido (based on user decision) value "load" (new data: "") eliminado in NT startup!
27/02/2008 0955 p.m. Denegado (based on user decision) value "Shell" (new data: "Explorer.exe") cambiado in Winlogon!
27/02/2008 09:19:10 p.m. Denegado (based on user decision) value "Microsoft Agent" (new data: "C:\WINDOWS\system32\SVCH0ST.exe") agregado in System Startup global entry!
27/02/2008 09:19:12 p.m. Denegado (based on user decision) value "load" (new data: "C:\WINDOWS/system/wincirl.com") agregado in NT startup!
27/02/2008 09:20:30 p.m. Denegado (based on user decision) value "Microsoft Agent" (new data: "C:\WINDOWS\system32\SVCH0ST.exe") agregado in System Startup global entry!
27/02/2008 09:21:50 p.m. Denegado (based on user decision) value "Microsoft Agent" (new data: "C:\WINDOWS\system32\SVCH0ST.exe") agregado in System Startup global entry!
27/02/2008 09:25:22 p.m. Denegado (based on user blacklist) value "Microsoft Agent" (new data: "C:\WINDOWS\system32\SVCH0ST.exe") agregado in System Startup global entry!
27/02/2008 09:25:29 p.m. Denegado (based on user decision) value "load" (new data: "C:\WINDOWS/system/wincirl.com") agregado in NT startup!
27/02/2008 09:32:34 p.m. Denegado (based on user blacklist) value "load" (new data: "C:\WINDOWS/system/wincirl.com") agregado in NT startup!
27/02/2008 09:32:35 p.m. Denegado (based on user blacklist) value "Microsoft Agent" (new data: "C:\WINDOWS\system32\SVCH0ST.exe") agregado in System Startup global entry!
27/02/2008 09:33:53 p.m. Denegado (based on user blacklist) value "Microsoft Agent" (new data: "C:\WINDOWS\system32\SVCH0ST.exe") agregado in System Startup global entry!
27/02/2008 09:37:04 p.m. Denegado (based on user blacklist) value "Microsoft Agent" (new data: "C:\WINDOWS\system32\SVCH0ST.exe") agregado in System Startup global entry!
27/02/2008 09:37:04 p.m. Denegado (based on user blacklist) value "load" (new data: "C:\WINDOWS/system/wincirl.com") agregado in NT startup!
27/02/2008 09:37:52 p.m. Denegado (based on user blacklist) value "load" (new data: "C:\WINDOWS/system/wincirl.com") agregado in NT startup!
27/02/2008 09:37:53 p.m. Denegado (based on user blacklist) value "Microsoft Agent" (new data: "C:\WINDOWS\system32\SVCH0ST.exe") agregado in System Startup global entry!
27/02/2008 09:38:22 p.m. Denegado (based on user blacklist) value "Microsoft Agent" (new data: "C:\WINDOWS\system32\SVCH0ST.exe") agregado in System Startup global entry!
27/02/2008 09:44:19 p.m. Denegado (based on user blacklist) value "load" (new data: "C:\WINDOWS/system/wincirl.com") agregado in NT startup!
27/02/2008 09:44:21 p.m. Denegado (based on user blacklist) value "Microsoft Agent" (new data: "C:\WINDOWS\system32\SVCH0ST.exe") agregado in System Startup global entry!
27/02/2008 09:45:47 p.m. Denegado (based on user blacklist) value "Microsoft Agent" (new data: "C:\WINDOWS\system32\SVCH0ST.exe") agregado in System Startup global entry!
27/02/2008 09:47:05 p.m. Denegado (based on user blacklist) value "Microsoft Agent" (new data: "C:\WINDOWS\system32\SVCH0ST.exe") agregado in System Startup global entry!
27/02/2008 09:48:22 p.m. Denegado (based on user blacklist) value "Microsoft Agent" (new data: "C:\WINDOWS\system32\SVCH0ST.exe") agregado in System Startup global entry!
27/02/2008 09:49:41 p.m. Denegado (based on user blacklist) value "Microsoft Agent" (new data: "C:\WINDOWS\system32\SVCH0ST.exe") agregado in System Startup global entry!
27/02/2008 09:51:00 p.m. Denegado (based on user blacklist) value "Microsoft Agent" (new data: "C:\WINDOWS\system32\SVCH0ST.exe") agregado in System Startup global entry!
27/02/2008 09:52:18 p.m. Denegado (based on user blacklist) value "Microsoft Agent" (new data: "C:\WINDOWS\system32\SVCH0ST.exe") agregado in System Startup global entry!
27/02/2008 09:52:27 p.m. Denegado (based on user blacklist) value "load" (new data: "C:\WINDOWS/system/wincirl.com") agregado in NT startup!
27/02/2008 09:52:28 p.m. Denegado (based on user blacklist) value "Microsoft Agent" (new data: "C:\WINDOWS\system32\SVCH0ST.exe") agregado in System Startup global entry!
27/02/2008 09:52:33 p.m. Denegado (based on user blacklist) value "load" (new data: "C:\WINDOWS/system/wincirl.com") agregado in NT startup!
27/02/2008 09:52:34 p.m. Denegado (based on user blacklist) value "Microsoft Agent" (new data: "C:\WINDOWS\system32\SVCH0ST.exe") agregado in System Startup global entry!
27/02/2008 09:52:38 p.m. Denegado (based on user blacklist) value "load" (new data: "C:\WINDOWS/system/wincirl.com") agregado in NT startup!
27/02/2008 09:52:39 p.m. Denegado (based on user blacklist) value "Microsoft Agent" (new data: "C:\WINDOWS\system32\SVCH0ST.exe") agregado in System Startup global entry!
27/02/2008 09:53:38 p.m. Denegado (based on user blacklist) value "Microsoft Agent" (new data: "C:\WINDOWS\system32\SVCH0ST.exe") agregado in System Startup global entry!
27/02/2008 09:53:48 p.m. Denegado (based on user blacklist) value "Microsoft Agent" (new data: "C:\WINDOWS\system32\SVCH0ST.exe") agregado in System Startup global entry!
27/02/2008 09:53:54 p.m. Denegado (based on user blacklist) value "Microsoft Agent" (new data: "C:\WINDOWS\system32\SVCH0ST.exe") agregado in System Startup global entry!
27/02/2008 09:53:58 p.m. Denegado (based on user blacklist) value "Microsoft Agent" (new data: "C:\WINDOWS\system32\SVCH0ST.exe") agregado in System Startup global entry!
27/02/2008 09:54:56 p.m. Denegado (based on user blacklist) value "Microsoft Agent" (new data: "C:\WINDOWS\system32\SVCH0ST.exe") agregado in System Startup global entry!
27/02/2008 09:55:09 p.m. Denegado (based on user blacklist) value "Microsoft Agent" (new data: "C:\WINDOWS\system32\SVCH0ST.exe") agregado in System Startup global entry!
27/02/2008 09:55:13 p.m. Denegado (based on user blacklist) value "Microsoft Agent" (new data: "C:\WINDOWS\system32\SVCH0ST.exe") agregado in System Startup global entry!
27/02/2008 09:55:16 p.m. Denegado (based on user blacklist) value "Microsoft Agent" (new data: "C:\WINDOWS\system32\SVCH0ST.exe") agregado in System Startup global entry!
27/02/2008 09:56:17 p.m. Denegado (based on user blacklist) value "Microsoft Agent" (new data: "C:\WINDOWS\system32\SVCH0ST.exe") agregado in System Startup global entry!
27/02/2008 09:56:26 p.m. Denegado (based on user blacklist) value "Microsoft Agent" (new data: "C:\WINDOWS\system32\SVCH0ST.exe") agregado in System Startup global entry!
27/02/2008 09:56:30 p.m. Denegado (based on user blacklist) value "Microsoft Agent" (new data: "C:\WINDOWS\system32\SVCH0ST.exe") agregado in System Startup global entry!
27/02/2008 09:56:34 p.m. Denegado (based on user blacklist) value "Microsoft Agent" (new data: "C:\WINDOWS\system32\SVCH0ST.exe") agregado in System Startup global entry!
27/02/2008 09:57:36 p.m. Denegado (based on user blacklist) value "Microsoft Agent" (new data: "C:\WINDOWS\system32\SVCH0ST.exe") agregado in System Startup global entry!
27/02/2008 09:57:45 p.m. Denegado (based on user blacklist) value "Microsoft Agent" (new data: "C:\WINDOWS\system32\SVCH0ST.exe") agregado in System Startup global entry!
27/02/2008 09:57:49 p.m. Denegado (based on user blacklist) value "Microsoft Agent" (new data: "C:\WINDOWS\system32\SVCH0ST.exe") agregado in System Startup global entry!
27/02/2008 09:57:53 p.m. Denegado (based on user blacklist) value "Microsoft Agent" (new data: "C:\WINDOWS\system32\SVCH0ST.exe") agregado in System Startup global entry!
27/02/2008 09:58:55 p.m. Denegado (based on user blacklist) value "Microsoft Agent" (new data: "C:\WINDOWS\system32\SVCH0ST.exe") agregado in System Startup global entry!
27/02/2008 09:59:04 p.m. Denegado (based on user blacklist) value "Microsoft Agent" (new data: "C:\WINDOWS\system32\SVCH0ST.exe") agregado in System Startup global entry!
27/02/2008 09:59:08 p.m. Denegado (based on user blacklist) value "Microsoft Agent" (new data: "C:\WINDOWS\system32\SVCH0ST.exe") agregado in System Startup global entry!
27/02/2008 09:59:12 p.m. Denegado (based on user blacklist) value "Microsoft Agent" (new data: "C:\WINDOWS\system32\SVCH0ST.exe") agregado in System Startup global entry!
27/02/2008 10:00:13 p.m. Denegado (based on user blacklist) value "Microsoft Agent" (new data: "C:\WINDOWS\system32\SVCH0ST.exe") agregado in System Startup global entry!
27/02/2008 10:00:23 p.m. Denegado (based on user blacklist) value "Microsoft Agent" (new data: "C:\WINDOWS\system32\SVCH0ST.exe") agregado in System Startup global entry!
27/02/2008 10:00:27 p.m. Denegado (based on user blacklist) value "Microsoft Agent" (new data: "C:\WINDOWS\system32\SVCH0ST.exe") agregado in System Startup global entry!
27/02/2008 10:00:31 p.m. Denegado (based on user blacklist) value "Microsoft Agent" (new data: "C:\WINDOWS\system32\SVCH0ST.exe") agregado in System Startup global entry!
27/02/2008 10:01:31 p.m. Denegado (based on user blacklist) value "Microsoft Agent" (new data: "C:\WINDOWS\system32\SVCH0ST.exe") agregado in System Startup global entry!
27/02/2008 10:01:41 p.m. Denegado (based on user blacklist) value "Microsoft Agent" (new data: "C:\WINDOWS\system32\SVCH0ST.exe") agregado in System Startup global entry!
27/02/2008 10:01:45 p.m. Denegado (based on user blacklist) value "Microsoft Agent" (new data: "C:\WINDOWS\system32\SVCH0ST.exe") agregado in System Startup global entry!
27/02/2008 10:01:49 p.m. Denegado (based on user blacklist) value "Microsoft Agent" (new data: "C:\WINDOWS\system32\SVCH0ST.exe") agregado in System Startup global entry!
27/02/2008 10:02:50 p.m. Denegado (based on user blacklist) value "Microsoft Agent" (new data: "C:\WINDOWS\system32\SVCH0ST.exe") agregado in System Startup global entry!
27/02/2008 10:02:59 p.m. Denegado (based on user blacklist) value "Microsoft Agent" (new data: "C:\WINDOWS\system32\SVCH0ST.exe") agregado in System Startup global entry!
27/02/2008 10:03:03 p.m. Denegado (based on user blacklist) value "Microsoft Agent" (new data: "C:\WINDOWS\system32\SVCH0ST.exe") agregado in System Startup global entry!
27/02/2008 10:03:07 p.m. Denegado (based on user blacklist) value "Microsoft Agent" (new data: "C:\WINDOWS\system32\SVCH0ST.exe") agregado in System Startup global entry!

hola hola...
yo tambn tenia ese problema, creo que es un gusano...
lo elimine con el antivirus NOD3 y ahora nada de nada...xD

prueba a analizar tu maquina con NOD32 scaner..

me cuentas como te fue xD

atte: Frankoyahu

uh.. gracias lo intetare!

lo ejecuto en modo a prueba de fallos o asi nomas! =D

y donde consigo el nod32 scaner? *.*!

mira esta es una version de prueba de NOD32 pero igual te sirve.. si quieres para mañana te puedo conseguir la licencia para activarlo gratis.. pero eso si, para mañana por que le preste el CD a un amigo.. xD


ah ejecutalo como quieras, da igual...

no se si sirve bien el enlace, pero busca en google... cualquier version te sirve... da igual si es la scaner o la normal... solo le pones buscar virus...

eii..

antes de que me mandes el msj

me puse a buscar por mi cuenta el tal nod32

y lo descargue normal

pero me pedia que antes de instalarlo borre el antivirus anterior

y eso iba a hacer

cuando quize abrir el per-antivirus

no abria

al contrario se cerro

no ejecutaba para nada

y asi todos mis intentos or borrarlo se me hacian inutiles

se me reinicio mas d 4 veces

despues de encenderlo por ultima vez

quize conectarme a internet

pero tambien estaba bloqueada la conexion

estaba totalmente aislado

baje el nod32 de esta pc

lo parti en hacha.exe

i logre instalarlo en la pc infectada

sin haber borrado el per

a los 2 segundos de ejecutar el scanner

empezo a encontrar mas virus

toos eran el mismo, se habia copiado por toda la pc

en toos dice:

win32/VB.NGO (gusano de internet)

weno..

espero con esto se arregle

te avizo que sucede luego..

aun esta eliminando los gusanos..


aiii...

suerte