Foro de InfoSpyware - Foro de Hijackthis - Foro de Virus

Hola, muy bien, recuerda comentarnos como sigue tu PC, y si tienes alguna duda.

Saludos!

Hola de nuevo. Os cuento:

-Pase el Navilog y no encontro nada os dejo el reporte:

Search Navipromo version 3.5.2 began on 03/04/2008 at 23:09:52,14

!!! Warning, this report may include legitimate files/programs !!!
!!! Post this report on the forum you are being helped !!!
!!! Don't continue with removal unless instructed by an authorized helper !!!
Fix running from C:\Program Files\navilog1
Actual User Account : "Hari"

Updated on 29.03.2008 at 22h00 by IL-MAFIOSO

Microsoft Windows Vista 6.0.6000
Version Internet Explorer : 7.0.6000.16609
Filesystem type : NTFS

Done in safe mode

*** Searching for installed Software ***




*** Search folders in C:\Windows ***



*** Search folders in C:\Program Files ***


*** Search folders in C:\ProgramData ***


*** Search folders in C:\ProgramData\Microsoft\Windows\Start Menu\Programs ***


*** Search folders in c:\users\hari\appdata\roaming\microsoft\windows\st art menu\programs ***


*** Search folders in C:\Users\Hari\AppData\Local\virtualstore\Program Files ***

...\InternetGameBox found !


*** Search folders in C:\Users\Hari\AppData\Roaming ***


*** Search with Catchme-rootkit/stealth malware detector by gmer ***
for more info : http://www.gmer.net

No file found



*** Search with GenericNaviSearch ***
!!! Possibility of legitimate files in the result !!!
!!! Must always be checked before manually deleting !!!

* Scan in C:\Windows\system32 *

* Scan in C:\Users\Hari\AppData\Local\Microsoft *

* Scan in C:\Users\Hari\AppData\Local\virtualstore\windows\s ystem32 *

* Scan in C:\Users\Hari\AppData\Local *

Suspicious Files :

qmlrvfa.exe found !
qmlrvfa.dat found !
qmlrvfa_nav.dat found !
qmlrvfa_navps.dat found !



*** Search files ***




*** Search specific Registry keys ***


*** Complementary Search ***
(Search specific files)

1)Search new Instant Access files :


2)Heuristic Search :

* In C:\Windows\system32 :


* In C:\Users\Hari\AppData\Local\Microsoft :


* In C:\Users\Hari\AppData\Local\virtualstore\windows\s ystem32 :


* In C:\Users\Hari\AppData\Local :

qmlrvfa.dat found !
qmlrvfa_nav.dat found !
qmlrvfa_navps.dat found !

3)Certificates Search :

Egroup certificate found !
Electronic-Group certificate found !
OOO-Favorit certificate found !
Sunny-Day-Design-Ltd certificate not found !

4)Search known files :



*** Search completed on 03/04/2008 at 23:18:12,04 ***

- Despues pase el DelPSGuard y tampoco encontro nada, os dejo el reporte:

DelPSGuard v 4.9.6
by www.ForoSpyware.com
Reporte Creado: 23:48:38,86, 03/04/2008
SO: Microsoft Windows [Versi¢n 6.0.6000]
Backup generado en C:\DPSG_Backup
Modo de Inicio: Seguro
_________________________________________


»»»»»»»»»»»» Carpetas y Archivos infectados »»»»»»»»»»»»


»»»»»»»»»»»»»»»»»»» Programas Malwares »»»»»»»»»»»»»»»»»



»»»»»»»»»»»»»»»»»»» FIN »»»»»»»»»»»»»»»»»»»


-Despues pase el SuperAntispyware y tampoco encontro nada, pero al pasar el Ad-Aware si que ha encontrado unas 26 amenazas que he eliminado y dede entonces no se me ha abierto ninguna pestaña, asi que doy por solucionado el problema. Os mando el reporte que me dio, como es muy largo os mando solo un fragmento:

Ad-Aware 2007 Build
Log File Created on: 2008-04-05 10:55:46
Using Definitions File: C:\ProgramData\Lavasoft\Ad-Aware 2007\core.aawdef
Computer name: HARI1
Name of user performing scan: SYSTEM

System information
===========================
Number of processors: 2
Processor type: Intel(R) Core(TM)2 CPU T5500 @ 1.66GHz
Memory Available: 51%
Total Physical Memory: 2144862208 Bytes
Available Physical Memory: 1080856576 Bytes
Total Page File Size: 4517797888 Bytes
Available On Page File: 3278180352 Bytes
Total Virtual Memory: 2147352576 Bytes
Available Virtual Memory: 1941155840 Bytes
OS: Microsoft Windows Vista (Build 6000)

Ad-Aware 2007 Settings
===========================
Skipping files larger than 1048576 kB
Ignoring infections with lower TAI than: 3


Extended Ad-Aware 2007 Settings
===========================
Unloading known modules during scan
Ignoring spanned files when scanning cab archives
Reanalyzing results after scanning before displaying results
Trying to unload modules prior to removal
Let Windows remove files currently in use at next reboot
Removing quarantined objects after restore
Deactivating Ad-Watch during scans
Writeprotecting system files after repairs
Include info about ignored objects in log file
Including basic settings in log file
Including advanced settings in log file
Including user and computer name in log file
Create and save WebUpdate log file

Databaseinfo
===========================
Version number: 67
Build Number: 0
Build Date and Time: 2008/04/02 10:08:44

Scan Statistics
===========================
Method: Smart
Scan tracking cookies.............................: On
Scan ADS filestreams..............................: On

Item Scanned: 171612
Infections Detected: 38
Infections Ignored: 0

Scan detailed statistics
===========================
Type Critical Total
Process Scan....: 0 0
Registry Scan...: 0 0
Registry PE Scan: 0 0
Hosts File Scan.: 0 0
File Scan.......: 0 0
Folder Scan.....: 0 0
LSP Scan........: 0 0
ADS Scan........: 0 0
Cookie Scan.....: 38 38
File Hash Scan..: 0 0

Infections Found
===========================
Family Id: 725 Name: Tracking Cookie Category: DataMiner TAI:3
Item Id: 600000234 Value: Browser: Internet Explorer Cookie: C:\Users\Hari\AppData\Roaming\Microsoft\Windows\Co okies\index.dat tradedoubler.com TD_UNIQUE_IMP /
Item Id: 600000212 Value: Browser: Internet Explorer Cookie: C:\Users\Hari\AppData\Roaming\Microsoft\Windows\Co okies\index.dat prisacom.112.2o7.net s_vi /
Item Id: 600000282 Value: Browser: Internet Explorer Cookie: C:\Users\Hari\AppData\Roaming\Microsoft\Windows\Co okies\index.dat data.coremetrics.com CoreID6 /
Item Id: 600000144 Value: Browser: Internet Explorer Cookie: C:\Users\Hari\AppData\Roaming\Microsoft\Windows\Co okies\index.dat doubleclick.net id /
Item Id: 600000225 Value: Browser: Internet Explorer Cookie: C:\Users\Hari\AppData\Roaming\Microsoft\Windows\Co okies\index.dat weborama.fr AFFICHE_W /
Item Id: 600000001 Value: Browser: Internet Explorer Cookie: C:\Users\Hari\AppData\Roaming\Microsoft\Windows\Co okies\index.dat adserver.hispavista.com NGUserID /
Item Id: 600000001 Value: Browser: Internet Explorer Cookie: C:\Users\Hari\AppData\Roaming\Microsoft\Windows\Co okies\index.dat adserver.terra.es UNIQE_COOKIE_4967 /
Item Id: 600000001 Value: Browser: Internet Explorer Cookie: C:\Users\Hari\AppData\Roaming\Microsoft\Windows\Co okies\index.dat adserver.terra.es dt /
Item Id: 600000001 Value: Browser: Internet Explorer Cookie: C:\Users\Hari\AppData\Roaming\Microsoft\Windows\Co okies\index.dat adserver.terra.es bw /
Item Id: 600000225 Value: Browser: Internet Explorer Cookie: C:\Users\Hari\AppData\Roaming\Microsoft\Windows\Co okies\index.dat yoigo.solution.weborama.fr _adpe /
Item Id: 600000225 Value: Browser: Internet Explorer Cookie: C:\Users\Hari\AppData\Roaming\Microsoft\Windows\Co okies\index.dat yoigo.solution.weborama.fr _adpp /
Item Id: 600000225 Value: Browser: Internet Explorer Cookie: C:\Users\Hari\AppData\Roaming\Microsoft\Windows\Co okies\index.dat yoigo.solution.weborama.fr _adpcr /
Item Id: 600000225 Value: Browser: Internet Explorer Cookie: C:\Users\Hari\AppData\Roaming\Microsoft\Windows\Co okies\index.dat yoigo.solution.weborama.fr _adpc /
Item Id: 600000144 Value: Browser: Internet Explorer Cookie: C:\Users\Hari\AppData\Roaming\Microsoft\Windows\Co okies\Low\\index.dat doubleclick.net id /
Item Id: 600000234 Value: Browser: Internet Explorer Cookie: C:\Users\Hari\AppData\Roaming\Microsoft\Windows\Co okies\Low\\index.dat tradedoubler.com TradeDoublerGUID /
Item Id: 600000234 Value: Browser: Internet Explorer Cookie: C:\Users\Hari\AppData\Roaming\Microsoft\Windows\Co okies\Low\\index.dat tradedoubler.com TD_EH_0 /
Item Id: 600000234 Value: Browser: Internet Explorer Cookie: C:\Users\Hari\AppData\Roaming\Microsoft\Windows\Co okies\Low\\index.dat tradedoubler.com TD_UNIQUE_IMP /
Item Id: 600000234 Value: Browser: Internet Explorer Cookie: C:\Users\Hari\AppData\Roaming\Microsoft\Windows\Co okies\Low\\index.dat tradedoubler.com TD_PIC /
Item Id: 600000212 Value: Browser: Internet Explorer Cookie: C:\Users\Hari\AppData\Roaming\Microsoft\Windows\Co okies\Low\\index.dat wolverineworldwide.112.2o7.net s_vi /
Item Id: 600000068 Value: Browser: Internet Explorer Cookie: C:\Users\Hari\AppData\Roaming\Microsoft\Windows\Co okies\Low\\index.dat statse.webtrendslive.com ACOOKIE /
Item Id: 600000190 Value: Browser: Internet Explorer Cookie: C:\Users\Hari\AppData\Roaming\Microsoft\Windows\Co okies\Low\\index.dat www.googleadservices.com Conversion /pagead/conversion/1069468441/
Item Id: 600000190 Value: Browser: Internet Explorer Cookie: C:\Users\Hari\AppData\Roaming\Microsoft\Windows\Co okies\Low\\index.dat www.googleadservices.com Conversion /pagead/conversion/1065645885/
Item Id: 600000190 Value: Browser: Internet Explorer Cookie: C:\Users\Hari\AppData\Roaming\Microsoft\Windows\Co okies\Low\\index.dat www.googleadservices.com Conversion /pagead/conversion/1055026071/
Item Id: 600000190 Value: Browser: Internet Explorer Cookie: C:\Users\Hari\AppData\Roaming\Microsoft\Windows\Co okies\Low\\index.dat oas.adservingml.com RMID /
Item Id: 600000190 Value: Browser: Internet Explorer Cookie: C:\Users\Hari\AppData\Roaming\Microsoft\Windows\Co okies\Low\\index.dat adservingml.com RMFD /
Item Id: 600000234 Value: Browser: Internet Explorer Cookie: C:\Users\Hari\Cookies\index.dat tradedoubler.com TD_UNIQUE_IMP /
Item Id: 600000212 Value: Browser: Internet Explorer Cookie: C:\Users\Hari\Cookies\index.dat prisacom.112.2o7.net s_vi /
Item Id: 600000282 Value: Browser: Internet Explorer Cookie: C:\Users\Hari\Cookies\index.dat data.coremetrics.com CoreID6 /
Item Id: 600000144 Value: Browser: Internet Explorer Cookie: C:\Users\Hari\Cookies\index.dat doubleclick.net id /
Item Id: 600000225 Value: Browser: Internet Explorer Cookie: C:\Users\Hari\Cookies\index.dat weborama.fr AFFICHE_W /
Item Id: 600000001 Value: Browser: Internet Explorer Cookie: C:\Users\Hari\Cookies\index.dat adserver.hispavista.com NGUserID /
Item Id: 600000001 Value: Browser: Internet Explorer Cookie: C:\Users\Hari\Cookies\index.dat adserver.terra.es UNIQE_COOKIE_4967 /
Item Id: 600000001 Value: Browser: Internet Explorer Cookie: C:\Users\Hari\Cookies\index.dat adserver.terra.es dt /
Item Id: 600000001 Value: Browser: Internet Explorer Cookie: C:\Users\Hari\Cookies\index.dat adserver.terra.es bw /
Item Id: 600000225 Value: Browser: Internet Explorer Cookie: C:\Users\Hari\Cookies\index.dat yoigo.solution.weborama.fr _adpe /
Item Id: 600000225 Value: Browser: Internet Explorer Cookie: C:\Users\Hari\Cookies\index.dat yoigo.solution.weborama.fr _adpp /
Item Id: 600000225 Value: Browser: Internet Explorer Cookie: C:\Users\Hari\Cookies\index.dat yoigo.solution.weborama.fr _adpcr /
Item Id: 600000225 Value: Browser: Internet Explorer Cookie: C:\Users\Hari\Cookies\index.dat yoigo.solution.weborama.fr _adpc /

Items Ignored During Scan
===========================


===========================

Cleaned Infections
===========================
Browser: Internet Explorer Cookie: C:\Users\Hari\AppData\Roaming\Microsoft\Windows\Co okies\index.dat tradedoubler.com TD_UNIQUE_IMP /, Belonging to Tracking Cookie
Browser: Internet Explorer Cookie: C:\Users\Hari\AppData\Roaming\Microsoft\Windows\Co okies\index.dat prisacom.112.2o7.net s_vi /, Belonging to Tracking Cookie
Browser: Internet Explorer Cookie: C:\Users\Hari\AppData\Roaming\Microsoft\Windows\Co okies\index.dat data.coremetrics.com CoreID6 /, Belonging to Tracking Cookie
Browser: Internet Explorer Cookie: C:\Users\Hari\AppData\Roaming\Microsoft\Windows\Co okies\index.dat doubleclick.net id /, Belonging to Tracking Cookie
Browser: Internet Explorer Cookie: C:\Users\Hari\AppData\Roaming\Microsoft\Windows\Co okies\index.dat weborama.fr AFFICHE_W /, Belonging to Tracking Cookie
Browser: Internet Explorer Cookie: C:\Users\Hari\AppData\Roaming\Microsoft\Windows\Co okies\index.dat adserver.hispavista.com NGUserID /, Belonging to Tracking Cookie
Browser: Internet Explorer Cookie: C:\Users\Hari\AppData\Roaming\Microsoft\Windows\Co okies\index.dat adserver.terra.es UNIQE_COOKIE_4967 /, Belonging to Tracking Cookie
Browser: Internet Explorer Cookie: C:\Users\Hari\AppData\Roaming\Microsoft\Windows\Co okies\index.dat adserver.terra.es dt /, Belonging to Tracking Cookie
Browser: Internet Explorer Cookie: C:\Users\Hari\AppData\Roaming\Microsoft\Windows\Co okies\index.dat adserver.terra.es bw /, Belonging to Tracking Cookie
Browser: Internet Explorer Cookie: C:\Users\Hari\AppData\Roaming\Microsoft\Windows\Co okies\index.dat yoigo.solution.weborama.fr _adpe /, Belonging to Tracking Cookie
Browser: Internet Explorer Cookie: C:\Users\Hari\AppData\Roaming\Microsoft\Windows\Co okies\index.dat yoigo.solution.weborama.fr _adpp /, Belonging to Tracking Cookie
Browser: Internet Explorer Cookie: C:\Users\Hari\AppData\Roaming\Microsoft\Windows\Co okies\index.dat yoigo.solution.weborama.fr _adpcr /, Belonging to Tracking Cookie
Browser: Internet Explorer Cookie: C:\Users\Hari\AppData\Roaming\Microsoft\Windows\Co okies\index.dat yoigo.solution.weborama.fr _adpc /, Belonging to Tracking Cookie
Browser: Internet Explorer Cookie: C:\Users\Hari\AppData\Roaming\Microsoft\Windows\Co okies\Low\\index.dat doubleclick.net id /, Belonging to Tracking Cookie
Browser: Internet Explorer Cookie: C:\Users\Hari\AppData\Roaming\Microsoft\Windows\Co okies\Low\\index.dat tradedoubler.com TradeDoublerGUID /, Belonging to Tracking Cookie
Browser: Internet Explorer Cookie: C:\Users\Hari\AppData\Roaming\Microsoft\Windows\Co okies\Low\\index.dat tradedoubler.com TD_EH_0 /, Belonging to Tracking Cookie
Browser: Internet Explorer Cookie: C:\Users\Hari\AppData\Roaming\Microsoft\Windows\Co okies\Low\\index.dat tradedoubler.com TD_UNIQUE_IMP /, Belonging to Tracking Cookie
Browser: Internet Explorer Cookie: C:\Users\Hari\AppData\Roaming\Microsoft\Windows\Co okies\Low\\index.dat tradedoubler.com TD_PIC /, Belonging to Tracking Cookie
Browser: Internet Explorer Cookie: C:\Users\Hari\AppData\Roaming\Microsoft\Windows\Co okies\Low\\index.dat wolverineworldwide.112.2o7.net s_vi /, Belonging to Tracking Cookie
Browser: Internet Explorer Cookie: C:\Users\Hari\AppData\Roaming\Microsoft\Windows\Co okies\Low\\index.dat statse.webtrendslive.com ACOOKIE /, Belonging to Tracking Cookie
Browser: Internet Explorer Cookie: C:\Users\Hari\AppData\Roaming\Microsoft\Windows\Co okies\Low\\index.dat www.googleadservices.com Conversion /pagead/conversion/1069468441/, Belonging to Tracking Cookie
Browser: Internet Explorer Cookie: C:\Users\Hari\AppData\Roaming\Microsoft\Windows\Co okies\Low\\index.dat www.googleadservices.com Conversion /pagead/conversion/1065645885/, Belonging to Tracking Cookie
Browser: Internet Explorer Cookie: C:\Users\Hari\AppData\Roaming\Microsoft\Windows\Co okies\Low\\index.dat oas.adservingml.com RMID /, Belonging to Tracking Cookie
Browser: Internet Explorer Cookie: C:\Users\Hari\AppData\Roaming\Microsoft\Windows\Co okies\Low\\index.dat adservingml.com RMFD /, Belonging to Tracking Cookie

End of Cleaned Infections
===========================


Un Saludo y muchas gracias de verdad por todo.

Hola, si no tienes ninguna otra duda damos el tema por solucionado, cualquier problema con este mismo tema,enviás un MP a cualquier miembro del staff para que se te reabra y puedas continuarlo o das las razones de reapertura por medio de este botón: arriba a la derecha de tu post...

Cualquier cosa que necesites ya sabes donde encontrarnos


Saludos!

**SOLUCIONADO**