Hola antes que nada un saludo a todos, soy nuevo en el foro y decidí inscribirme porque veo que hay muchos problemas que han resuelto, espero que el mío no sea la excepción.

Yo tenía el McAfee pero ya no podía actualizarlo y un amigo me aconsejo que bajara el ESET NOD32. Y así lo hice. Lo instalé. Todo parecía ir muy bien pero de pronto mi compu se empezo a alentar y al iniciar internet explorer me salían pop-ups de mercado libre y paginas para jugar en internet estilo casino.

Escanee mi laptop y sorpresa: descubri que estaba infectada!!!!

Checando los resultados me di cuenta de que el mismo programa de ESET NOD32 que descargué tenía virus!!!

UN ANTIVIRUS CON VIRUS... que ironia!! jeje

Aquí los resultados del escaneo y AYUDENME POR FAVOR!!!!!!!!!!!!!



ESET NOD32 Antivirus Version 3.0.551.0
ARCHIVOS DE REGISTRO
AMENAZS DETECTADAS


11/04/2008 21:59:37 Real-time file system protection file C:\uisvkqr.exe Win32/PSW.OnLineGames.NLI trojan cleaned by deleting - quarantined NT AUTHORITY\SYSTEM Event occurred during an attempt to access the file by the application: C:\Archivos de programa\ESET\ESET NOD32 Antivirus\egui.exe.
11/04/2008 21:59:37 Real-time file system protection file C:\uisvkqr.exe Win32/PSW.OnLineGames.NLI trojan cleaned by deleting - quarantined NT AUTHORITY\SYSTEM Event occurred during an attempt to access the file by the application: C:\Archivos de programa\ESET\ESET NOD32 Antivirus\egui.exe.
11/04/2008 21:59:37 Real-time file system protection file C:\uisvkqr.exe Win32/PSW.OnLineGames.NLI trojan cleaned by deleting - quarantined NT AUTHORITY\SYSTEM Event occurred during an attempt to access the file by the application: C:\Archivos de programa\ESET\ESET NOD32 Antivirus\egui.exe.
11/04/2008 21:59:37 Real-time file system protection file C:\oufddh.exe Win32/PSW.OnLineGames.NLI trojan cleaned by deleting - quarantined NT AUTHORITY\SYSTEM Event occurred during an attempt to access the file by the application: C:\Archivos de programa\ESET\ESET NOD32 Antivirus\egui.exe.
11/04/2008 21:59:37 Real-time file system protection file C:\uisvkqr.exe Win32/PSW.OnLineGames.NLI trojan cleaned by deleting - quarantined NT AUTHORITY\SYSTEM Event occurred during an attempt to access the file by the application: C:\Archivos de programa\ESET\ESET NOD32 Antivirus\egui.exe.
11/04/2008 21:59:37 Real-time file system protection file C:\oufddh.exe Win32/PSW.OnLineGames.NLI trojan cleaned by deleting - quarantined NT AUTHORITY\SYSTEM Event occurred during an attempt to access the file by the application: C:\Archivos de programa\ESET\ESET NOD32 Antivirus\egui.exe.
11/04/2008 21:59:36 Real-time file system protection file C:\oufddh.exe Win32/PSW.OnLineGames.NLI trojan cleaned by deleting - quarantined NT AUTHORITY\SYSTEM Event occurred during an attempt to access the file by the application: C:\Archivos de programa\ESET\ESET NOD32 Antivirus\egui.exe.
11/04/2008 21:59:36 Real-time file system protection file C:\i.exe Win32/PSW.OnLineGames.NLI trojan cleaned by deleting - quarantined NT AUTHORITY\SYSTEM Event occurred during an attempt to access the file by the application: C:\Archivos de programa\ESET\ESET NOD32 Antivirus\egui.exe.
11/04/2008 21:59:36 Real-time file system protection file C:\oufddh.exe Win32/PSW.OnLineGames.NLI trojan cleaned by deleting - quarantined NT AUTHORITY\SYSTEM Event occurred during an attempt to access the file by the application: C:\Archivos de programa\ESET\ESET NOD32 Antivirus\egui.exe.
11/04/2008 21:59:36 Real-time file system protection file C:\i.exe Win32/PSW.OnLineGames.NLI trojan cleaned by deleting - quarantined NT AUTHORITY\SYSTEM Event occurred during an attempt to access the file by the application: C:\Archivos de programa\ESET\ESET NOD32 Antivirus\egui.exe.
11/04/2008 21:59:35 Real-time file system protection file C:\i.exe Win32/PSW.OnLineGames.NLI trojan cleaned by deleting - quarantined NT AUTHORITY\SYSTEM Event occurred during an attempt to access the file by the application: C:\Archivos de programa\ESET\ESET NOD32 Antivirus\egui.exe.
11/04/2008 21:59:35 Real-time file system protection file C:\i.exe Win32/PSW.OnLineGames.NLI trojan cleaned by deleting - quarantined NT AUTHORITY\SYSTEM Event occurred during an attempt to access the file by the application: C:\Archivos de programa\ESET\ESET NOD32 Antivirus\egui.exe.
11/04/2008 21:59:33 Real-time file system protection file D:\uisvkqr.exe Win32/PSW.OnLineGames.NLI trojan cleaned by deleting - quarantined NT AUTHORITY\SYSTEM Event occurred during an attempt to access the file by the application: C:\Archivos de programa\ESET\ESET NOD32 Antivirus\egui.exe.
11/04/2008 21:59:32 Real-time file system protection file D:\oufddh.exe Win32/PSW.OnLineGames.NLI trojan cleaned by deleting - quarantined NT AUTHORITY\SYSTEM Event occurred during an attempt to access the file by the application: C:\Archivos de programa\ESET\ESET NOD32 Antivirus\egui.exe.
11/04/2008 21:59:29 Real-time file system protection file D:\i.exe Win32/PSW.OnLineGames.NLI trojan cleaned by deleting - quarantined NT AUTHORITY\SYSTEM Event occurred during an attempt to access the file by the application: C:\Archivos de programa\ESET\ESET NOD32 Antivirus\egui.exe.
11/04/2008 21:59:29 Real-time file system protection file D:\i.exe Win32/PSW.OnLineGames.NLI trojan cleaned by deleting - quarantined NT AUTHORITY\SYSTEM Event occurred during an attempt to access the file by the application: C:\Archivos de programa\ESET\ESET NOD32 Antivirus\egui.exe.
11/04/2008 21:59:29 Real-time file system protection file D:\oufddh.exe Win32/PSW.OnLineGames.NLI trojan cleaned by deleting - quarantined NT AUTHORITY\SYSTEM Event occurred during an attempt to access the file by the application: C:\Archivos de programa\ESET\ESET NOD32 Antivirus\egui.exe.
11/04/2008 21:59:29 Real-time file system protection file D:\uisvkqr.exe Win32/PSW.OnLineGames.NLI trojan cleaned by deleting - quarantined NT AUTHORITY\SYSTEM Event occurred during an attempt to access the file by the application: C:\Archivos de programa\ESET\ESET NOD32 Antivirus\egui.exe.
11/04/2008 21:59:29 Real-time file system protection file D:\i.exe Win32/PSW.OnLineGames.NLI trojan cleaned by deleting - quarantined NT AUTHORITY\SYSTEM Event occurred during an attempt to access the file by the application: C:\Archivos de programa\ESET\ESET NOD32 Antivirus\egui.exe.
11/04/2008 21:59:29 Real-time file system protection file D:\oufddh.exe Win32/PSW.OnLineGames.NLI trojan cleaned by deleting - quarantined NT AUTHORITY\SYSTEM Event occurred during an attempt to access the file by the application: C:\Archivos de programa\ESET\ESET NOD32 Antivirus\egui.exe.
11/04/2008 21:59:28 Real-time file system protection file D:\oufddh.exe Win32/PSW.OnLineGames.NLI trojan cleaned by deleting NT AUTHORITY\SYSTEM Event occurred during an attempt to access the file by the application: C:\Archivos de programa\ESET\ESET NOD32 Antivirus\egui.exe.
11/04/2008 21:59:28 Real-time file system protection file D:\i.exe Win32/PSW.OnLineGames.NLI trojan cleaned by deleting - quarantined NT AUTHORITY\SYSTEM Event occurred during an attempt to access the file by the application: C:\Archivos de programa\ESET\ESET NOD32 Antivirus\egui.exe.
11/04/2008 19:57:34 Real-time file system protection file F:\AutoRun.inf INF/Autorun virus deleted NT AUTHORITY\SYSTEM Event occurred during an attempt to access the file by the application: C:\WINDOWS\Explorer.EXE.
11/04/2008 19:57:34 Real-time file system protection file F:\AutoRun.inf INF/Autorun virus deleted NT AUTHORITY\SYSTEM Event occurred during an attempt to access the file by the application: C:\WINDOWS\Explorer.EXE.
11/04/2008 19:57:33 Real-time file system protection file F:\Autorun.inf INF/Autorun virus deleted NT AUTHORITY\SYSTEM Event occurred during an attempt to access the file by the application: C:\WINDOWS\System32\svchost.exe.
11/04/2008 19:57:33 Real-time file system protection file F:\Autorun.inf INF/Autorun virus deleted NT AUTHORITY\SYSTEM Event occurred during an attempt to access the file by the application: C:\WINDOWS\System32\svchost.exe.
11/04/2008 19:57:33 Real-time file system protection file F:\Autorun.inf INF/Autorun virus deleted NT AUTHORITY\SYSTEM Event occurred during an attempt to access the file by the application: C:\WINDOWS\System32\svchost.exe.
11/04/2008 19:57:32 Real-time file system protection file F:\Autorun.inf INF/Autorun virus deleted NT AUTHORITY\SYSTEM Event occurred during an attempt to access the file by the application: C:\WINDOWS\System32\svchost.exe.
11/04/2008 19:57:31 Real-time file system protection file F:\Autorun.inf INF/Autorun virus deleted NT AUTHORITY\SYSTEM Event occurred during an attempt to access the file by the application: C:\WINDOWS\System32\svchost.exe.
11/04/2008 19:57:29 Real-time file system protection file F:\Autorun.inf INF/Autorun virus deleted - quarantined NT AUTHORITY\SYSTEM Event occurred during an attempt to access the file by the application: C:\WINDOWS\System32\svchost.exe.
09/04/2008 23:14:17 Startup scanner file C:\WINDOWS\system32\amvo0.dll Win32/PSW.OnLineGames.NMP trojan cleaned by deleting (after the next restart) - quarantined
09/04/2008 23:13:27 Real-time file system protection file C:\WINDOWS\system32\amvo0.dll Win32/PSW.OnLineGames.NMP trojan cleaned by deleting (after the next restart) - quarantined NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\Archivos de programa\Internet Explorer\IEXPLORE.EXE.
09/04/2008 23:13:27 Real-time file system protection file C:\WINDOWS\system32\amvo0.dll Win32/PSW.OnLineGames.NMP trojan cleaned by deleting (after the next restart) - quarantined NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\Archivos de programa\Internet Explorer\IEXPLORE.EXE.
09/04/2008 23:13:27 Real-time file system protection file C:\WINDOWS\system32\amvo0.dll Win32/PSW.OnLineGames.NMP trojan cleaned by deleting (after the next restart) - quarantined NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\Archivos de programa\Internet Explorer\IEXPLORE.EXE.
09/04/2008 23:13:27 Real-time file system protection file C:\WINDOWS\system32\amvo0.dll Win32/PSW.OnLineGames.NMP trojan cleaned by deleting (after the next restart) - quarantined NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\Archivos de programa\Internet Explorer\IEXPLORE.EXE.
09/04/2008 23:13:26 Real-time file system protection file C:\WINDOWS\system32\amvo0.dll Win32/PSW.OnLineGames.NMP trojan cleaned by deleting (after the next restart) - quarantined NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\Archivos de programa\Internet Explorer\IEXPLORE.EXE.
09/04/2008 23:13:26 Real-time file system protection file C:\WINDOWS\system32\amvo0.dll Win32/PSW.OnLineGames.NMP trojan cleaned by deleting (after the next restart) - quarantined NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\Archivos de programa\Internet Explorer\IEXPLORE.EXE.
09/04/2008 23:13:26 Real-time file system protection file C:\WINDOWS\system32\amvo0.dll Win32/PSW.OnLineGames.NMP trojan cleaned by deleting (after the next restart) - quarantined NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\Archivos de programa\Internet Explorer\IEXPLORE.EXE.
09/04/2008 23:13:25 Real-time file system protection file C:\WINDOWS\system32\amvo0.dll Win32/PSW.OnLineGames.NMP trojan cleaned by deleting (after the next restart) - quarantined NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\Archivos de programa\Internet Explorer\IEXPLORE.EXE.
09/04/2008 23:13:24 Real-time file system protection file C:\WINDOWS\system32\amvo0.dll Win32/PSW.OnLineGames.NMP trojan cleaned by deleting (after the next restart) - quarantined NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\Archivos de programa\Internet Explorer\IEXPLORE.EXE.
09/04/2008 23:13:23 Real-time file system protection file C:\WINDOWS\system32\amvo0.dll Win32/PSW.OnLineGames.NMP trojan cleaned by deleting (after the next restart) - quarantined NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\Archivos de programa\Internet Explorer\IEXPLORE.EXE.
09/04/2008 23:13:21 Real-time file system protection file C:\WINDOWS\system32\amvo0.dll Win32/PSW.OnLineGames.NMP trojan cleaned by deleting (after the next restart) - quarantined NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\Archivos de programa\Internet Explorer\IEXPLORE.EXE.
09/04/2008 23:13:20 Real-time file system protection file C:\WINDOWS\system32\amvo0.dll Win32/PSW.OnLineGames.NMP trojan cleaned by deleting (after the next restart) - quarantined NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\Archivos de programa\Internet Explorer\IEXPLORE.EXE.
09/04/2008 23:13:18 Real-time file system protection file C:\WINDOWS\system32\amvo0.dll Win32/PSW.OnLineGames.NMP trojan cleaned by deleting (after the next restart) - quarantined NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\Archivos de programa\Internet Explorer\IEXPLORE.EXE.
09/04/2008 23:13:17 Real-time file system protection file C:\WINDOWS\system32\amvo0.dll Win32/PSW.OnLineGames.NMP trojan cleaned by deleting (after the next restart) - quarantined NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\Archivos de programa\Internet Explorer\IEXPLORE.EXE.
09/04/2008 23:13:17 Real-time file system protection file C:\WINDOWS\system32\amvo0.dll Win32/PSW.OnLineGames.NMP trojan cleaned by deleting (after the next restart) - quarantined NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\Archivos de programa\Internet Explorer\IEXPLORE.EXE.
09/04/2008 23:13:13 Real-time file system protection file C:\WINDOWS\system32\amvo0.dll Win32/PSW.OnLineGames.NMP trojan cleaned by deleting (after the next restart) - quarantined NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\Archivos de programa\Internet Explorer\IEXPLORE.EXE.
09/04/2008 23:13:13 Real-time file system protection file C:\WINDOWS\system32\amvo0.dll Win32/PSW.OnLineGames.NMP trojan cleaned by deleting (after the next restart) - quarantined NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\Archivos de programa\Internet Explorer\IEXPLORE.EXE.
09/04/2008 23:13:13 Real-time file system protection file C:\WINDOWS\system32\amvo0.dll Win32/PSW.OnLineGames.NMP trojan cleaned by deleting (after the next restart) - quarantined NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\Archivos de programa\Internet Explorer\IEXPLORE.EXE.
09/04/2008 23:13:10 Real-time file system protection file C:\WINDOWS\system32\amvo0.dll Win32/PSW.OnLineGames.NMP trojan cleaned by deleting (after the next restart) - quarantined NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\Archivos de programa\Internet Explorer\IEXPLORE.EXE.
09/04/2008 23:13:09 Real-time file system protection file C:\WINDOWS\system32\amvo0.dll Win32/PSW.OnLineGames.NMP trojan cleaned by deleting (after the next restart) - quarantined NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\Archivos de programa\Internet Explorer\IEXPLORE.EXE.
09/04/2008 23:13:08 Real-time file system protection file C:\WINDOWS\system32\amvo0.dll Win32/PSW.OnLineGames.NMP trojan cleaned by deleting (after the next restart) - quarantined NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\Archivos de programa\Internet Explorer\IEXPLORE.EXE.
09/04/2008 23:13:07 Real-time file system protection file C:\WINDOWS\system32\amvo0.dll Win32/PSW.OnLineGames.NMP trojan cleaned by deleting (after the next restart) - quarantined NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\Archivos de programa\Internet Explorer\IEXPLORE.EXE.
09/04/2008 23:13:06 Real-time file system protection file C:\WINDOWS\system32\amvo0.dll Win32/PSW.OnLineGames.NMP trojan cleaned by deleting (after the next restart) - quarantined NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\Archivos de programa\Internet Explorer\IEXPLORE.EXE.
09/04/2008 23:13:04 Real-time file system protection file C:\WINDOWS\system32\amvo0.dll Win32/PSW.OnLineGames.NMP trojan cleaned by deleting (after the next restart) NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\Archivos de programa\Internet Explorer\IEXPLORE.EXE.
09/04/2008 23:13:03 Real-time file system protection file C:\WINDOWS\system32\amvo0.dll Win32/PSW.OnLineGames.NMP trojan cleaned by deleting (after the next restart) - quarantined NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\Archivos de programa\Internet Explorer\IEXPLORE.EXE.
09/04/2008 23:13:02 Real-time file system protection file C:\WINDOWS\system32\amvo0.dll Win32/PSW.OnLineGames.NMP trojan cleaned by deleting (after the next restart) - quarantined NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\Archivos de programa\Internet Explorer\IEXPLORE.EXE.
09/04/2008 23:13:01 Real-time file system protection file C:\WINDOWS\system32\amvo0.dll Win32/PSW.OnLineGames.NMP trojan cleaned by deleting (after the next restart) - quarantined NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\Archivos de programa\Internet Explorer\IEXPLORE.EXE.
09/04/2008 23:13:00 Real-time file system protection file C:\WINDOWS\system32\amvo0.dll Win32/PSW.OnLineGames.NMP trojan cleaned by deleting (after the next restart) - quarantined NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\Archivos de programa\Internet Explorer\IEXPLORE.EXE.
09/04/2008 23:12:07 Real-time file system protection file D:\autorun.inf Win32/PSW.OnLineGames.NMY trojan cleaned by deleting - quarantined NT AUTHORITY\SYSTEM Event occurred on a new file created by the application: C:\WINDOWS\Explorer.EXE.
09/04/2008 23:12:06 Real-time file system protection file C:\WINDOWS\system32\amvo.exe Win32/PSW.OnLineGames.MUU trojan cleaned by deleting (after the next restart) - quarantined NT AUTHORITY\SYSTEM Event occurred during an attempt to access the file by the application: C:\WINDOWS\Explorer.EXE.
09/04/2008 23:12:06 Real-time file system protection file C:\WINDOWS\system32\amvo.exe Win32/PSW.OnLineGames.MUU trojan cleaned by deleting (after the next restart) - quarantined NT AUTHORITY\SYSTEM Event occurred during an attempt to access the file by the application: C:\WINDOWS\Explorer.EXE.
09/04/2008 23:12:06 Real-time file system protection file C:\WINDOWS\system32\amvo.exe Win32/PSW.OnLineGames.MUU trojan cleaned by deleting NT AUTHORITY\SYSTEM Event occurred during an attempt to access the file by the application: C:\WINDOWS\Explorer.EXE.
09/04/2008 23:12:05 Real-time file system protection file C:\WINDOWS\system32\amvo.exe Win32/PSW.OnLineGames.MUU trojan cleaned by deleting - quarantined NT AUTHORITY\SYSTEM Event occurred during an attempt to access the file by the application: C:\WINDOWS\Explorer.EXE.
09/04/2008 23:12:05 Real-time file system protection file C:\autorun.inf Win32/PSW.OnLineGames.NMY trojan cleaned by deleting - quarantined NT AUTHORITY\SYSTEM Event occurred on a new file created by the application: C:\WINDOWS\Explorer.EXE.
09/04/2008 21:04:27 Startup scanner file C:\WINDOWS\system32\isass.dll Win32/AutoRun.BD worm cleaned by deleting (after the next restart) - quarantined MI-LAPTOP\Hermanito Aguilar
09/04/2008 21:04:26 Startup scanner file C:\WINDOWS\system32\isass.exe Win32/AutoRun.BD worm cleaned by deleting (after the next restart) - quarantined MI-LAPTOP\Hermanito Aguilar
09/04/2008 21:04:24 Real-time file system protection file C:\WINDOWS\system32\isass.dll Win32/AutoRun.BD worm cleaned by deleting (after the next restart) - quarantined NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\Archivos de programa\ESET\ESET NOD32 Antivirus\egui.exe.
09/04/2008 21:04:24 Real-time file system protection file C:\WINDOWS\system32\isass.dll Win32/AutoRun.BD worm cleaned by deleting (after the next restart) - quarantined NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\Archivos de programa\ESET\ESET NOD32 Antivirus\egui.exe.
09/04/2008 21:04:24 Real-time file system protection file C:\WINDOWS\system32\isass.dll Win32/AutoRun.BD worm cleaned by deleting (after the next restart) - quarantined NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\Archivos de programa\ESET\ESET NOD32 Antivirus\egui.exe.
09/04/2008 21:04:24 Real-time file system protection file C:\WINDOWS\system32\isass.dll Win32/AutoRun.BD worm cleaned by deleting (after the next restart) - quarantined NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\Archivos de programa\ESET\ESET NOD32 Antivirus\egui.exe.
09/04/2008 21:04:14 Real-time file system protection file C:\WINDOWS\system32\isass.dll Win32/AutoRun.BD worm cleaned by deleting (after the next restart) - quarantined NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\Archivos de programa\ESET\ESET NOD32 Antivirus\egui.exe.
09/04/2008 21:04:14 Real-time file system protection file C:\WINDOWS\system32\isass.dll Win32/AutoRun.BD worm cleaned by deleting (after the next restart) - quarantined NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\Archivos de programa\ESET\ESET NOD32 Antivirus\egui.exe.
09/04/2008 21:04:14 Real-time file system protection file C:\WINDOWS\system32\isass.dll Win32/AutoRun.BD worm cleaned by deleting (after the next restart) NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\Archivos de programa\ESET\ESET NOD32 Antivirus\egui.exe.
09/04/2008 21:04:14 Real-time file system protection file C:\WINDOWS\system32\isass.dll Win32/AutoRun.BD worm cleaned by deleting (after the next restart) - quarantined NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\Archivos de programa\ESET\ESET NOD32 Antivirus\egui.exe.
09/04/2008 21:04:11 Startup scanner file C:\WINDOWS\ctfmgr.exe Win32/PSW.Delf.WB trojan cleaned by deleting - quarantined MI-LAPTOP\Hermanito Aguilar
09/04/2008 21:04:10 Real-time file system protection file C:\WINDOWS\system32\isass.dll Win32/AutoRun.BD worm cleaned by deleting (after the next restart) - quarantined NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\Archivos de programa\ESET\ESET NOD32 Antivirus\egui.exe.
09/04/2008 21:04:10 Real-time file system protection file C:\WINDOWS\system32\isass.dll Win32/AutoRun.BD worm cleaned by deleting (after the next restart) - quarantined NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\Archivos de programa\ESET\ESET NOD32 Antivirus\egui.exe.
09/04/2008 21:04:10 Real-time file system protection file C:\WINDOWS\system32\isass.dll Win32/AutoRun.BD worm cleaned by deleting (after the next restart) - quarantined NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\Archivos de programa\ESET\ESET NOD32 Antivirus\egui.exe.
09/04/2008 21:04:10 Real-time file system protection file C:\WINDOWS\system32\isass.dll Win32/AutoRun.BD worm cleaned by deleting (after the next restart) - quarantined NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\Archivos de programa\ESET\ESET NOD32 Antivirus\egui.exe.
09/04/2008 21:04:10 Real-time file system protection file C:\WINDOWS\system32\isass.dll Win32/AutoRun.BD worm cleaned by deleting (after the next restart) - quarantined NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\Archivos de programa\ESET\ESET NOD32 Antivirus\egui.exe.
09/04/2008 21:04:10 Real-time file system protection file C:\WINDOWS\system32\isass.dll Win32/AutoRun.BD worm cleaned by deleting (after the next restart) - quarantined NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\Archivos de programa\ESET\ESET NOD32 Antivirus\egui.exe.

Hola te doy la bienvenida a Foro de InfoSpyware.

• Politicas del foro.
• Consejos a la hora de publicar nuevos mensajes.

Primero vamos a hacer..

Realiza los siguientes pasos:

Apaga "Restaurar Sistema"

Descargar estas herramientas (pero no las ejecutarlas aun):

• Flash_Disinfector.exe (al final del post)
• SUPERAntiSpyware
• CCleaner

Reiniciar eh iniciar en "Modo a prueba de fallos" (modo seguro)

Ejecuta Flash_Disinfector.exe en el PC y luego Colocar el Pendrive (si tienes) en el puerto USB y ejecutarlo nuevamente.

Al terminar haga un escaneo general del sistema con SUPERAntiSpware y eliminar los intrusos que éste encuentre.

Ejecute CCleaner usando primero su opción de "Limpiador" para borrar cookies, temporales de Internet y todos los archivos que este te muestre como obsoletos, y luego usa su opción de "Registro" para limpiar todo el registro de Windows (haciendo copia de seguridad).

Activa nuevamente restaurar sistema


Luego...

Realiza estos pasos:

Descarga, ejecuta y actualiza CCleaner. Usar primero su opción de "Limpiador" para borrar cookies, temporales de Internet y todos los archivos que éste te muestre como obsoletos, y luego usar su opción de "Registro" para limpiar todo el registro de Windows (haciendo copia de seguridad).

Descarga y ejecuta MalwareBytes Anti-malware, examina por completo tu PC, elimina lo que éste te encuentre y reinicia. (dejanos el reporte que genere).

Escanea tu PC con este antivirus on line:
kaspersky on-line -Manual- (Deja su reporte)

• Si usas Firefox necesitarás de la extensión IETab

Recuerda volver y nos comentas si mejora o no tu PC, Saludos!

HOLA

Acabo determinar todos los pasos.

Estos son ls resultados:

Malwarebytes' Anti-Malware 1.11
Versión de la Base de Datos: 619

Tipo de examen : Examen Completo (C:\|D:\|F:\|)
Objetos examinados: 100152
Tiempo transcurrido: 45 minute(s), 3 second(s)

Procesos en Memoria Infectados: 0
Módulos en Memoria Infectados: 0
Claves del Registro Infectadas: 5
Valores del Registro Infectados: 0
Elementos de Datos del Registro Infectados: 0
Carpetas Infectadas: 0
Ficheros Infectados: 0

Procesos en Memoria Infectados:
(No se han detectado elementos maliciosos)

Módulos en Memoria Infectados:
(No se han detectado elementos maliciosos)

Claves del Registro Infectadas:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{00000162-9980-0010-8000-00aa00389b71} (Rogue.WinAntivirus) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{147a976f-eee1-4377-8ea7-4716e4cdd239} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{9afb8248-617f-460d-9366-d71cdeda3179} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\CSNetManagerXp (Worm.Silly) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\C SNetManagerXp (Worm.Silly) -> Quarantined and deleted successfully.

Valores del Registro Infectados:
(No se han detectado elementos maliciosos)

Elementos de Datos del Registro Infectados:
(No se han detectado elementos maliciosos)

Carpetas Infectadas:
(No se han detectado elementos maliciosos)

Ficheros Infectados:
(No se han detectado elementos maliciosos)




Y del Kaspersky:


-------------------------------------------------------------------------------
KASPERSKY ONLINE SCANNER INFORME
sábado, 12 de abril de 2008 22:00:08
Sistema operativo: Microsoft Windows XP Home Edition, Service Pack 2 (Build 2600)
Kaspersky Online Scanner versión: 5.0.84.1
Ultima actualización: 13/04/2008
Registros en la base antivirus: 701009
-------------------------------------------------------------------------------

Configuración del análisis:
Analizar usando las siguientes bases: estendidas
Analizar archivos: verdadero
Analizar bases de correo: verdadero

Objetivo a analizar - Mi PC:
C:\
D:\
E:\
F:\

Estadísticas:
Número de objeros analizados: 72728
Virus encontrados: 1
Objetos infectados: 1 / 0
Objetos sospechosos: 0
Duración del análisis: 01:06:07

Bombre del objeto infectado / Nombre del virus / Última acción

C:\autorun.inf\lpt3.This folder was created by Flash_Disinfector Object is locked saltado
C:\Documents and Settings\Hermanito Aguilar\Configuración local\Archivos temporales de Internet\Content.IE5\index.dat Object is locked saltado
C:\Documents and Settings\Hermanito Aguilar\Configuración local\Datos de programa\Microsoft\Feeds Cache\index.dat Object is locked saltado
C:\Documents and Settings\Hermanito Aguilar\Configuración local\Datos de programa\Microsoft\Windows\UsrClass.dat Object is locked saltado
C:\Documents and Settings\Hermanito Aguilar\Configuración local\Datos de programa\Microsoft\Windows\UsrClass.dat.LOG Object is locked saltado
C:\Documents and Settings\Hermanito Aguilar\Configuración local\Historial\History.IE5\index.dat Object is locked saltado
C:\Documents and Settings\Hermanito Aguilar\Configuración local\Temp\njpavm.dll Infectados: Worm.Win32.AutoRun.dcz saltado
C:\Documents and Settings\Hermanito Aguilar\Cookies\index.dat Object is locked saltado
C:\Documents and Settings\Hermanito Aguilar\NTUSER.DAT Object is locked saltado
C:\Documents and Settings\Hermanito Aguilar\ntuser.dat.LOG Object is locked saltado
C:\Documents and Settings\LocalService\Configuración local\Datos de programa\Microsoft\Windows\UsrClass.dat Object is locked saltado
C:\Documents and Settings\LocalService\Configuración local\Datos de programa\Microsoft\Windows\UsrClass.dat.LOG Object is locked saltado
C:\Documents and Settings\LocalService\NTUSER.DAT Object is locked saltado
C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked saltado
C:\Documents and Settings\NetworkService\Configuración local\Datos de programa\Microsoft\Windows\UsrClass.dat Object is locked saltado
C:\Documents and Settings\NetworkService\Configuración local\Datos de programa\Microsoft\Windows\UsrClass.dat.LOG Object is locked saltado
C:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked saltado
C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked saltado
C:\Documents and Settings\Propietario\ Object is locked saltado




C:\System Volume Information\MountPointManagerRemoteDatabase Object is locked saltado
C:\WINDOWS\$NtUninstallKB833407$\bssym7.ttf Object is locked saltado
C:\WINDOWS\$NtUninstallKB835732$\callcont.dll Object is locked saltado
C:\WINDOWS\$NtUninstallKB835732$\h323.tsp Object is locked saltado
C:\WINDOWS\$NtUninstallKB835732$\h323msp.dll Object is locked saltado
C:\WINDOWS\$NtUninstallKB835732$\helpctr.exe Object is locked saltado
C:\WINDOWS\$NtUninstallKB835732$\ipnathlp.dll Object is locked saltado
C:\WINDOWS\$NtUninstallKB835732$\lsasrv.dll Object is locked saltado
C:\WINDOWS\$NtUninstallKB835732$\mf3216.dll Object is locked saltado
C:\WINDOWS\$NtUninstallKB835732$\msasn1.dll Object is locked saltado
C:\WINDOWS\$NtUninstallKB835732$\msgina.dll Object is locked saltado
C:\WINDOWS\$NtUninstallKB835732$\mst120.dll Object is locked saltado
C:\WINDOWS\$NtUninstallKB835732$\netapi32.dll Object is locked saltado
C:\WINDOWS\$NtUninstallKB835732$\nmcom.dll Object is locked saltado
C:\WINDOWS\$NtUninstallKB835732$\rtcdll.dll Object is locked saltado
C:\WINDOWS\$NtUninstallKB835732$\schannel.dll Object is locked saltado
C:\WINDOWS\Debug\PASSWD.LOG Object is locked saltado
C:\WINDOWS\system32\CatRoot2\edb.log Object is locked saltado
C:\WINDOWS\system32\CatRoot2\tmp.edb Object is locked saltado
C:\WINDOWS\system32\config\AppEvent.Evt Object is locked saltado
C:\WINDOWS\system32\config\default Object is locked saltado
C:\WINDOWS\system32\config\default.LOG Object is locked saltado
C:\WINDOWS\system32\config\Internet.evt Object is locked saltado
C:\WINDOWS\system32\config\SAM Object is locked saltado
C:\WINDOWS\system32\config\SAM.LOG Object is locked saltado
C:\WINDOWS\system32\config\SecEvent.Evt Object is locked saltado
C:\WINDOWS\system32\config\SECURITY Object is locked saltado
C:\WINDOWS\system32\config\SECURITY.LOG Object is locked saltado
C:\WINDOWS\system32\config\software Object is locked saltado
C:\WINDOWS\system32\config\software.LOG Object is locked saltado
C:\WINDOWS\system32\config\SysEvent.Evt Object is locked saltado
C:\WINDOWS\system32\config\system Object is locked saltado
C:\WINDOWS\system32\config\system.LOG Object is locked saltado
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked saltado
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP Object is locked saltado
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER Object is locked saltado
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MA P Object is locked saltado
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MA P Object is locked saltado
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DAT A Object is locked saltado
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP Object is locked saltado
D:\autorun.inf\lpt3.This folder was created by Flash_Disinfector Object is locked saltado
D:\System Volume Information\MountPointManagerRemoteDatabase Object is locked saltado
F:\autorun.inf\lpt3.This folder was created by Flash_Disinfector Object is locked saltado

Análisis completado.


Gracias por tu ayuda.

Noto mas rápida mi computadora (sera porque ya se eliminaron 500 MB de archivos inservibles como cookies)

Pero me acaba de aparecer un Pop-up

decía CID: y era de mercadolibre.com

Espero tu respuesta. Gracias!!!!

Descargate OTMoveIt lo guardas en el Escritorio.

• Haz un doble clic sobre OTMoveIt.exe para ejecutarlo.
• Asegurate que este marcado "Unregister Dll's and Ocx's".
• Copia el texto que se encuentra en el cuadrado más abajo, y pega el texto en el marco de izquierdo de OTMoveIt nombrado Paste List of Filas / Folders to be moved.

• Haz clic en MoveIt! Para lanzar la supresión.
• Cuando el resultado aparece en el marco Results, haz clic enExit.
• Reinicia el PC (Este paso es muy importante)

Envía el informe (reporte) de OTMoveIt situado sobre C: \ _ OTMoveIt\MovedFiles.

Si sigues con problemas..

Sigue estos pasos:

Apaga "Restaurar Sistema" (System Restore) Solo en Win ME y XP

Iniciar el sistema en "Modo a Prueba de Fallos" (modo seguro)

Aun en modo seguro; Escanea tu PC con

• NaviLog
• DelPSGuard(dejanos su log)
• SuperAntispyware
• Ad-Aware

Utiliza el CClenaer. Usar primero su opción de "Limpiador" para borrar cookies, temporales de Internet y todos los archivos que este te muestre como obsoletos, y luego usar su opción de "Registro" para limpiar todo el registro de Windows (haciendo copia de seguridad).

Deshacer el paso número 1

Por comodidad te recomiendo que imprimas las indicaciones.

Comentanos como te ah ido!

Ya use el OTMoveIt y aqui les envio el informe:

DllUnregisterServer procedure not found in C:\Documents and Settings\Hermanito Aguilar\Configuración local\Temp\njpavm.dll
C:\Documents and Settings\Hermanito Aguilar\Configuración local\Temp\njpavm.dll NOT unregistered.
C:\Documents and Settings\Hermanito Aguilar\Configuración local\Temp\njpavm.dll moved successfully.

OTMoveIt2 by OldTimer - Version 1.0.4.1 log created on 04132008_165925



Un dato: al momento de darle click en MoveIt! mi antivirus ESET NOD32 detecto la amenaza (Threat) como gen virus o algo asi. Habian tres opciones Limpiar (pero estaba desabilitada) Delete y Ignore (o Exit, no recuerdo bien) y puse delete; luego aparecio en la ventana de OTMoveIt que el archivo se movió exitosamente.

Hasta ahora no han aparecido más pop-ups. Debo agradecerles.

Pero una cosa más, al iniciar mi compu aparece la ventana de inicio de SuperAntispyware (no se si asi se llama, es un recuadro de presentación donde dice: Superantispyware, t libramos de todos los virus no solo de los faciles) y luego en la esquina inferior derecha del escritorio se intenta cargar una ventana, pero no se carga por completo, queda en blanco. Me imagino que son esas ventanas de notificaciones y updates del programa antispyware, pero no se carga y queda en blanco.
Debo eliminar el programa? Cheque el progrma y no tiene ningun archivo en cuarentena.


DUDAS:

De todos los programas que bajé, los debo mantener instalados todos (Superantispyware, CCleaner, Malwarebytes' Anti-Malware, OTMoveIt!)???
Es que no me gusta tener muchos programas instalados.

En el Malwarebytes' Anti-Malware hay 5 malware en cuarentena por eso he dudado en desinstalarlo por temor a liberar esos virus. Realmente puede pasar eso? Los arcivos en cuarentena estan especificados en el reporte del programa que te envie ayer.

El ESET NOD32 es un buen antivirus? Lo debo conservar? Qué me aconsejas?


MUCHAS GRACIAS POR TODO!!!!

Tarde mucho escribiendo este mensaje y hasta ahorita no han aparecido pop-ups. Mi compu es más rapida, y tiene mas memoria, la siento como nueva.

Espero que aclares mis dudas y gracias.

Hola, elimina esta carpeta:

C: \ _ OTMoveIt\

Desinstala todos los programas que te has descargado, luego de éstos eliminas todas las carpetas que pertenecian a los mismos.

El NOD32 es un antivirus muy bueno, se encuentra entre los mejores, pero ninguno es eficiente al 100% siempre algun bichito logra entrar.

Tienes alguna duda?

Saludos!

Ya desinstale todo y elimine las carpetas. Mi compu esta mas rapida que nunca y al parecer limpia, por cierto el recuadro desapareció.

Ya no tengo dudas.

Muchas gracias JUAN, tu ayuda ha sido muy valiosa.

Muchas gracias a este foro también, nunca pensé que con la ayuda de un foro podría resolver los problemas de mi compu. Antes era necesario llevarla con un técnico para que la formatee pero ahora he visto que en este todos cooperan para ayudar a la gente y lo mejor de todo gratis!

MUCHAS GRACIAS!!!!

Hola, si no tienes ninguna otra duda damos el tema por solucionado, cualquier problema con este mismo tema,enviás un MP a cualquier miembro del staff para que se te reabra y puedas continuarlo o das las razones de reapertura por medio de este botón: arriba a la derecha de tu post...

Cualquier cosa que necesites ya sabes donde encontrarnos


Saludos!

**SOLUCIONADO**