 |
| |||||||
 InfoSpyware sortea una T-Shirts |
| Participa en el sorteo por una
"Camiseta Oficial de InfoSpyware" gracias al amigo
Enjuto Mojamuto |
| Foro de Virus y Spywares Ayuda con: Malwares - Virus - Spywares - Troyanos - Adwares - Worms - Hijackers - Dialers - Rootkits - Keylogger - etc.) Plantéanos tu problema en este sector. No ponga su log de HijackThis aquí !! |
 |
| | Herramientas |
 | 
15/05/08, 09:22:00
|  |
| |||
 Virus en la memoria de la PC Hola gente:  aquí de nuevo molestando. Esta vez es la compu de mi hijo  , pero como trabaja y su tiempo es poco se los paso yo.Está usando como sistema operativo el Vista Business.El antivirus Avast avisó: que tiene un virus en la memoria del sistema y que es muy peligroso trabajar así.  Además le aparecen esos cartelitos de material sospechoso que dice que hay demasiados correos saliendo en el mismo momento. Scaneó con avast y los virus los metió en el baúl. Le hice pasar Kaspersky Les dejo el informe ------------------------------------------------------------------------------- KASPERSKY ONLINE SCANNER REPORT Friday, May 09, 2008 6:54:51 AM Operating System: Microsoft Windows Vista Professional, Service Pack 1 (Build 6001) Kaspersky Online Scanner version: 5.0.98.0 Kaspersky Anti-Virus database last update: 9/05/2008 Kaspersky Anti-Virus database records: 749055 ------------------------------------------------------------------------------- Scan Settings: Scan using the following antivirus database: extended Scan Archives: true Scan Mail Bases: true Scan Target - My Computer: A:\ C:\ D:\ E:\ F:\ Scan Statistics: Total number of scanned objects: 141129 Number of viruses found: 17 Number of infected objects: 76 Number of suspicious objects: 0 Duration of the scan process: 01:58:43 Infected Object Name / Virus Name / Last Action C:\$Recycle.Bin\S-1-5-21-1325065538-2026520194-629695300-1000\$R2IUSBG.exe Infected: Trojan.Win32.Agent.lqe skipped C:\$Recycle.Bin\S-1-5-21-1325065538-2026520194-629695300-1000\$R3WMLU3.exe Infected: Trojan.Win32.Agent.lqe skipped C:\$Recycle.Bin\S-1-5-21-1325065538-2026520194-629695300-1000\$R9WOJW0.exe Infected: Trojan.Win32.Agent.lqe skipped C:\$Recycle.Bin\S-1-5-21-1325065538-2026520194-629695300-1000\$RAW0DIT.exe Infected: Trojan.Win32.Agent.lqe skipped C:\$Recycle.Bin\S-1-5-21-1325065538-2026520194-629695300-1000\$RBMZU3J.zip/misfotos_12.jpeg-www.myspace.com Infected: Backdoor.Win32.IRCBot.cje skipped C:\$Recycle.Bin\S-1-5-21-1325065538-2026520194-629695300-1000\$RBMZU3J.zip ZIP: infected - 1 skipped C:\$Recycle.Bin\S-1-5-21-1325065538-2026520194-629695300-1000\$RBP01K4.zip/misfotos1.jpeg-www.myspace.com Infected: Trojan.Win32.Qhost.alo skipped C:\$Recycle.Bin\S-1-5-21-1325065538-2026520194-629695300-1000\$RBP01K4.zip ZIP: infected - 1 skipped C:\$Recycle.Bin\S-1-5-21-1325065538-2026520194-629695300-1000\$RBXOFGA.~0000/core/gadget.js Infected: not-a-virus:RiskTool.JS.Shutdown.a skipped C:\$Recycle.Bin\S-1-5-21-1325065538-2026520194-629695300-1000\$RBXOFGA.~0000 ZIP: infected - 1 skipped C:\$Recycle.Bin\S-1-5-21-1325065538-2026520194-629695300-1000\$RCLVRPX.exe Infected: Trojan.Win32.Agent.lqe skipped C:\$Recycle.Bin\S-1-5-21-1325065538-2026520194-629695300-1000\$RH5YX2U.exe Infected: Trojan.Win32.Agent.lqe skipped C:\$Recycle.Bin\S-1-5-21-1325065538-2026520194-629695300-1000\$RIAEVXW.exe Infected: Trojan.Win32.Agent.lqe skipped C:\$Recycle.Bin\S-1-5-21-1325065538-2026520194-629695300-1000\$RIYDMJH.exe Infected: Trojan.Win32.Agent.lqe skipped C:\$Recycle.Bin\S-1-5-21-1325065538-2026520194-629695300-1000\$RJO4JPW.exe Infected: Trojan.Win32.Agent.lqe skipped C:\$Recycle.Bin\S-1-5-21-1325065538-2026520194-629695300-1000\$RMFMZOB.exe Infected: Trojan.Win32.Agent.lqe skipped C:\$Recycle.Bin\S-1-5-21-1325065538-2026520194-629695300-1000\$RMS9120.exe Infected: Trojan.Win32.Agent.lqe skipped C:\$Recycle.Bin\S-1-5-21-1325065538-2026520194-629695300-1000\$RN9WMJU.exe Infected: Trojan.Win32.Agent.jop skipped C:\$Recycle.Bin\S-1-5-21-1325065538-2026520194-629695300-1000\$RNPBB2B.zip/foto_1.jpeg-www.myspace.com Infected: Trojan-Downloader.Win32.Agent.kvn skipped C:\$Recycle.Bin\S-1-5-21-1325065538-2026520194-629695300-1000\$RNPBB2B.zip ZIP: infected - 1 skipped C:\$Recycle.Bin\S-1-5-21-1325065538-2026520194-629695300-1000\$ROMHMY2.exe Infected: Trojan.Win32.Agent.lqe skipped C:\$Recycle.Bin\S-1-5-21-1325065538-2026520194-629695300-1000\$RQ7LV37.exe Infected: Trojan.Win32.Agent.lqe skipped C:\$Recycle.Bin\S-1-5-21-1325065538-2026520194-629695300-1000\$RVSI13T.exe Infected: Trojan.Win32.Agent.lqe skipped C:\$Recycle.Bin\S-1-5-21-1325065538-2026520194-629695300-1000\$RXXGY3L.exe Infected: Trojan.Win32.Agent.lqe skipped C:\Program Files\Alwil Software\Avast4\DATA\aswResp.dat Object is locked skipped C:\Program Files\Alwil Software\Avast4\DATA\Avast4.db Object is locked skipped C:\Program Files\Alwil Software\Avast4\DATA\integ\avast.int Object is locked skipped C:\Program Files\Alwil Software\Avast4\DATA\log\AshWebSv.ws Object is locked skipped C:\Program Files\Alwil Software\Avast4\DATA\log\nshield.log Object is locked skipped C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\30 5f3e20ce2a8f59ac3bb4ca6dcdd4bb_ed432f29-c65d-4bdf-9454-608a22de42ea Object is locked skipped C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\4d 52402caaea445766fe8e9ebb7d256a_ed432f29-c65d-4bdf-9454-608a22de42ea Object is locked skipped C:\ProgramData\Microsoft\Network\Downloader\qmgr0. dat Object is locked skipped C:\ProgramData\Microsoft\Network\Downloader\qmgr1. dat Object is locked skipped C:\ProgramData\Microsoft\Search\Data\Applications\ Windows\GatherLogs\SystemIndex\SystemIndex.177.Crw l Object is locked skipped C:\ProgramData\Microsoft\Search\Data\Applications\ Windows\GatherLogs\SystemIndex\SystemIndex.177.gth r Object is locked skipped C:\ProgramData\Microsoft\Search\Data\Applications\ Windows\MSS.log Object is locked skipped C:\ProgramData\Microsoft\Search\Data\Applications\ Windows\MSStmp.log Object is locked skipped C:\ProgramData\Microsoft\Search\Data\Applications\ Windows\Projects\SystemIndex\Indexer\CiFiles\00010 001.wid Object is locked skipped C:\ProgramData\Microsoft\Search\Data\Applications\ Windows\Projects\SystemIndex\Indexer\CiFiles\00010 002.wid Object is locked skipped C:\ProgramData\Microsoft\Search\Data\Applications\ Windows\Projects\SystemIndex\Indexer\CiFiles\00010 003.wid Object is locked skipped C:\ProgramData\Microsoft\Search\Data\Applications\ Windows\Projects\SystemIndex\Indexer\CiFiles\00010 004.wid Object is locked skipped C:\ProgramData\Microsoft\Search\Data\Applications\ Windows\Projects\SystemIndex\Indexer\CiFiles\00010 005.wid Object is locked skipped C:\ProgramData\Microsoft\Search\Data\Applications\ Windows\Projects\SystemIndex\Indexer\CiFiles\00010 00F.wid Object is locked skipped C:\ProgramData\Microsoft\Search\Data\Applications\ Windows\Projects\SystemIndex\Indexer\CiFiles\00010 010.wid Object is locked skipped C:\ProgramData\Microsoft\Search\Data\Applications\ Windows\Projects\SystemIndex\Indexer\CiFiles\00010 011.wid Object is locked skipped C:\ProgramData\Microsoft\Search\Data\Applications\ Windows\Projects\SystemIndex\Indexer\CiFiles\00010 012.wid Object is locked skipped C:\ProgramData\Microsoft\Search\Data\Applications\ Windows\Projects\SystemIndex\Indexer\CiFiles\00010 013.wid Object is locked skipped C:\ProgramData\Microsoft\Search\Data\Applications\ Windows\Projects\SystemIndex\Indexer\CiFiles\00010 014.wid Object is locked skipped C:\ProgramData\Microsoft\Search\Data\Applications\ Windows\Projects\SystemIndex\Indexer\CiFiles\00010 015.wid Object is locked skipped C:\ProgramData\Microsoft\Search\Data\Applications\ Windows\Projects\SystemIndex\Indexer\CiFiles\00010 016.wid Object is locked skipped C:\ProgramData\Microsoft\Search\Data\Applications\ Windows\Projects\SystemIndex\Indexer\CiFiles\00010 017.wid Object is locked skipped C:\ProgramData\Microsoft\Search\Data\Applications\ Windows\Projects\SystemIndex\Indexer\CiFiles\00010 018.wid Object is locked skipped C:\ProgramData\Microsoft\Search\Data\Applications\ Windows\Projects\SystemIndex\Indexer\CiFiles\00010 01B.wid Object is locked skipped C:\ProgramData\Microsoft\Search\Data\Applications\ Windows\Projects\SystemIndex\Indexer\CiFiles\00010 01D.wid Object is locked skipped C:\ProgramData\Microsoft\Search\Data\Applications\ Windows\Projects\SystemIndex\Indexer\CiFiles\00010 01E.ci Object is locked skipped C:\ProgramData\Microsoft\Search\Data\Applications\ Windows\Projects\SystemIndex\Indexer\CiFiles\00010 01E.wid Object is locked skipped C:\ProgramData\Microsoft\Search\Data\Applications\ Windows\Projects\SystemIndex\Indexer\CiFiles\00010 01E.wsb Object is locked skipped C:\ProgramData\Microsoft\Search\Data\Applications\ Windows\Projects\SystemIndex\Indexer\CiFiles\00010 01F.wid Object is locked skipped C:\ProgramData\Microsoft\Search\Data\Applications\ Windows\Projects\SystemIndex\Indexer\CiFiles\00010 020.wid Object is locked skipped C:\ProgramData\Microsoft\Search\Data\Applications\ Windows\Projects\SystemIndex\Indexer\CiFiles\00010 021.wid Object is locked skipped C:\ProgramData\Microsoft\Search\Data\Applications\ Windows\Projects\SystemIndex\Indexer\CiFiles\00010 022.wid Object is locked skipped C:\ProgramData\Microsoft\Search\Data\Applications\ Windows\Projects\SystemIndex\Indexer\CiFiles\00010 023.wid Object is locked skipped C:\ProgramData\Microsoft\Search\Data\Applications\ Windows\Projects\SystemIndex\Indexer\CiFiles\INDEX .000 Object is locked skipped C:\ProgramData\Microsoft\Search\Data\Applications\ Windows\Projects\SystemIndex\PropMap\CiPT0000.000 Object is locked skipped C:\ProgramData\Microsoft\Search\Data\Applications\ Windows\Projects\SystemIndex\PropMap\Used0000.000 Object is locked skipped C:\ProgramData\Microsoft\Search\Data\Applications\ Windows\Projects\SystemIndex\SecStore\CiST0000.000 Object is locked skipped C:\ProgramData\Microsoft\Search\Data\Applications\ Windows\Projects\SystemIndex\SystemIndex.chk1.gthr Object is locked skipped C:\ProgramData\Microsoft\Search\Data\Applications\ Windows\Projects\SystemIndex\SystemIndex.chk2.gthr Object is locked skipped C:\ProgramData\Microsoft\Search\Data\Applications\ Windows\Projects\SystemIndex\SystemIndex.Ntfy1663. gthr Object is locked skipped C:\ProgramData\Microsoft\Search\Data\Applications\ Windows\tmp.edb Object is locked skipped C:\ProgramData\Microsoft\Search\Data\Applications\ Windows\Windows.edb Object is locked skipped C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsv c\NtfDB2D.tmp Object is locked skipped C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsv c\NtfDB2E.tmp Object is locked skipped C:\ProgramData\Microsoft\Windows Defender\Support\MPLog-11022006-050253.log Object is locked skipped C:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped C:\Users\Mat{ias\AppData\Local\Microsoft\Internet Explorer\MSIMGSIZ.DAT Object is locked skipped C:\Users\Mat{ias\AppData\Local\Microsoft\Media Player\CurrentDatabase_360.wmdb Object is locked skipped C:\Users\Mat{ias\AppData\Local\Microsoft\Windows\E xplorer\thumbcache_1024.db Object is locked skipped C:\Users\Mat{ias\AppData\Local\Microsoft\Windows\E xplorer\thumbcache_256.db Object is locked skipped C:\Users\Mat{ias\AppData\Local\Microsoft\Windows\E xplorer\thumbcache_32.db Object is locked skipped C:\Users\Mat{ias\AppData\Local\Microsoft\Windows\E xplorer\thumbcache_96.db Object is locked skipped C:\Users\Mat{ias\AppData\Local\Microsoft\Windows\E xplorer\thumbcache_idx.db Object is locked skipped C:\Users\Mat{ias\AppData\Local\Microsoft\Windows\E xplorer\thumbcache_sr.db Object is locked skipped C:\Users\Mat{ias\AppData\Local\Microsoft\Windows\H istory\History.IE5\index.dat Object is locked skipped C:\Users\Mat{ias\AppData\Local\Microsoft\Windows\T emporary Internet Files\AntiPhishing\B3BB5BBA-E7D5-40AB-A041-A5B1C0B26C8F.dat Object is locked skipped C:\Users\Mat{ias\AppData\Local\Microsoft\Windows\T emporary Internet Files\Content.IE5\index.dat Object is locked skipped C:\Users\Mat{ias\AppData\Local\Microsoft\Windows\T emporary Internet Files\Content.IE5\W6I9YJDL\0000000001_000000000000 000559753[1].swf Object is locked skipped C:\Users\Mat{ias\AppData\Local\Microsoft\Windows\U srClass.dat Object is locked skipped C:\Users\Mat{ias\AppData\Local\Microsoft\Windows\U srClass.dat.LOG1 Object is locked skipped C:\Users\Mat{ias\AppData\Local\Microsoft\Windows\U srClass.dat.LOG2 Object is locked skipped C:\Users\Mat{ias\AppData\Local\Microsoft\Windows\U srClass.dat{d648b481-9073-11dc-859a-001731ce0194}.TM.blf Object is locked skipped C:\Users\Mat{ias\AppData\Local\Microsoft\Windows\U srClass.dat{d648b481-9073-11dc-859a-001731ce0194}.TMContainer00000000000000000001.regt rans-ms Object is locked skipped C:\Users\Mat{ias\AppData\Local\Microsoft\Windows\U srClass.dat{d648b481-9073-11dc-859a-001731ce0194}.TMContainer00000000000000000002.regt rans-ms Object is locked skipped C:\Users\Mat{ias\AppData\Local\Microsoft\Windows Defender\FileTracker\{63552A48-624D-48E9-9B24-7AC45AE16CA0} Object is locked skipped C:\Users\Mat{ias\AppData\Local\Microsoft\Windows Sidebar\Gadgets\AutoShutdown.gadget\core\gadget.js Infected: not-a-virus:RiskTool.JS.Shutdown.a skipped C:\Users\Mat{ias\AppData\Local\Microsoft\Windows Sidebar\Settings.ini Object is locked skipped C:\Users\Mat{ias\AppData\Local\Temp\FXSAPIDebugLog File.txt Object is locked skipped C:\Users\Mat{ias\AppData\Local\Temp\hsperfdata_Mat {ias\4932 Object is locked skipped C:\Users\Mat{ias\AppData\Local\Temp\~DFAD2B.tmp Object is locked skipped C:\Users\Mat{ias\AppData\Local\Temp\~DFEDD6.tmp Object is locked skipped C:\Users\Mat{ias\AppData\Local\Temp\~DFEFFF.tmp Object is locked skipped C:\Users\Mat{ias\AppData\Roaming\Microsoft\Windows \Cookies\index.dat Object is locked skipped C:\Users\Mat{ias\AppData\Roaming\Sports Interactive\Football Manager 2007\Temporary\pks_0_0.msa Object is locked skipped C:\Users\Mat{ias\AppData\Roaming\Sports Interactive\Football Manager 2007\Temporary\pks_1_3.msa Object is locked skipped C:\Users\Mat{ias\AppData\Roaming\Sports Interactive\Football Manager 2007\Temporary\pks_2_5.msa Object is locked skipped C:\Users\Mat{ias\AppData\Roaming\Sports Interactive\Football Manager 2007\Temporary\pks_3_1.msa Object is locked skipped C:\Users\Mat{ias\Documents\Instaladores de programas\ACDSee\32BITS\ACDC3224.EXE/WISE0017.BIN Infected: Trojan-PSW.Win32.Ganhame.jq skipped C:\Users\Mat{ias\Documents\Instaladores de programas\ACDSee\32BITS\ACDC3224.EXE WiseSFX: infected - 1 skipped C:\Users\Mat{ias\Documents\Instaladores de programas\Codecs\CodecPackElisoft140.exe/divx511\fsg_4104.exe Infected: not-a-virus:AdWare.Win32.Gator.4104 skipped C:\Users\Mat{ias\Documents\Instaladores de programas\Codecs\CodecPackElisoft140.exe Gentee: infected - 1 skipped C:\Users\Mat{ias\Documents\Instaladores de programas\Codecs\radmin21.zip/rserv31.exe Infected: not-a-virus:RemoteAdmin.Win32.RAdmin.n skipped C:\Users\Mat{ias\Documents\Instaladores de programas\Codecs\radmin21.zip/rview31.exe Infected: not-a-virus:RemoteAdmin.Win32.RAdmin.n skipped C:\Users\Mat{ias\Documents\Instaladores de programas\Codecs\radmin21.zip ZIP: infected - 2 skipped C:\Users\Mat{ias\Documents\Instaladores de programas\Gadgets\AutoShutdown.gadget/core/gadget.js Infected: not-a-virus:RiskTool.JS.Shutdown.a skipped C:\Users\Mat{ias\Documents\Instaladores de programas\Gadgets\AutoShutdown.gadget ZIP: infected - 1 skipped C:\Users\Mat{ias\Documents\Instaladores de programas\P2P\Ares\setup_ares.exe/data0037/NHInstall.exe Infected: not-a-virus:AdWare.Win32.NavExcel.d skipped C:\Users\Mat{ias\Documents\Instaladores de programas\P2P\Ares\setup_ares.exe/data0037/v2.0.4b.cab/NHelper.dll Infected: not-a-virus:AdWare.Win32.NavExcel.g skipped C:\Users\Mat{ias\Documents\Instaladores de programas\P2P\Ares\setup_ares.exe/data0037/v2.0.4b.cab/NHUninstaller.exe Infected: not-a-virus:AdWare.Win32.NavExcel skipped C:\Users\Mat{ias\Documents\Instaladores de programas\P2P\Ares\setup_ares.exe/data0037/v2.0.4b.cab/NHUpdater.exe Infected: not-a-virus:AdWare.Win32.NavExcel.b skipped C:\Users\Mat{ias\Documents\Instaladores de programas\P2P\Ares\setup_ares.exe/data0037/v2.0.4b.cab Infected: not-a-virus:AdWare.Win32.NavExcel.b skipped C:\Users\Mat{ias\Documents\Instaladores de programas\P2P\Ares\setup_ares.exe/data0037 Infected: not-a-virus:AdWare.Win32.NavExcel.b skipped C:\Users\Mat{ias\Documents\Instaladores de programas\P2P\Ares\setup_ares.exe/data0038 Infected: not-a-virus:AdWare.Win32.NavExcel.i skipped C:\Users\Mat{ias\Documents\Instaladores de programas\P2P\Ares\setup_ares.exe NSIS: infected - 7 skipped C:\Users\Mat{ias\Documents\Mis archivos recibidos\nuevaFoto10.zip/nuevaFoto10.JPG_www.facebook.com Infected: Backdoor.Win32.IRCBot.cpc skipped C:\Users\Mat{ias\Documents\Mis archivos recibidos\nuevaFoto10.zip ZIP: infected - 1 skipped C:\Users\Mat{ias\mxusbkd.exe Infected: Trojan.Win32.Agent.jop skipped C:\Users\Mat{ias\ntuser.dat Object is locked skipped C:\Users\Mat{ias\ntuser.dat.LOG1 Object is locked skipped C:\Users\Mat{ias\ntuser.dat.LOG2 Object is locked skipped C:\Users\Mat{ias\ntuser.dat{db008970-99d9-11dc-b9e3-001731ce0194}.TM.blf Object is locked skipped C:\Users\Mat{ias\ntuser.dat{db008970-99d9-11dc-b9e3-001731ce0194}.TMContainer00000000000000000001.regt rans-ms Object is locked skipped C:\Users\Mat{ias\ntuser.dat{db008970-99d9-11dc-b9e3-001731ce0194}.TMContainer00000000000000000002.regt rans-ms Object is locked skipped C:\Users\Mat{ias\utuu.exe Infected: Trojan.Win32.Agent.jop skipped C:\Users\Mat{ias\uulyiw.exe Infected: Trojan.Win32.Agent.lqe skipped C:\Windows\CSC\v2.0.6\pq Object is locked skipped C:\Windows\CSC\v2.0.6\temp\ea-{cebb2006-17b3-11dd-a482-001731ce0194} Object is locked skipped C:\Windows\Debug\PASSWD.LOG Object is locked skipped C:\Windows\Debug\WIA\wiatrace.log Object is locked skipped C:\Windows\ServiceProfiles\LocalService\AppData\Lo cal\lastalive0.dat Object is locked skipped C:\Windows\ServiceProfiles\LocalService\AppData\Lo cal\lastalive1.dat Object is locked skipped C:\Windows\ServiceProfiles\LocalService\AppData\Lo cal\Microsoft\Windows\WindowsUpdate.log Object is locked skipped C:\Windows\ServiceProfiles\LocalService\NTUSER.DAT Object is locked skipped C:\Windows\ServiceProfiles\LocalService\ntuser.dat .LOG1 Object is locked skipped C:\Windows\ServiceProfiles\LocalService\ntuser.dat .LOG2 Object is locked skipped C:\Windows\ServiceProfiles\LocalService\NTUSER.DAT {3d4e88e9-6a70-11db-b1ba-d64300c9c793}.TM.blf Object is locked skipped C:\Windows\ServiceProfiles\LocalService\NTUSER.DAT {3d4e88e9-6a70-11db-b1ba-d64300c9c793}.TMContainer00000000000000000001.regt rans-ms Object is locked skipped C:\Windows\ServiceProfiles\LocalService\NTUSER.DAT {3d4e88e9-6a70-11db-b1ba-d64300c9c793}.TMContainer00000000000000000002.regt rans-ms Object is locked skipped C:\Windows\ServiceProfiles\NetworkService\NTUSER.D AT Object is locked skipped C:\Windows\ServiceProfiles\NetworkService\ntuser.d at.LOG1 Object is locked skipped C:\Windows\ServiceProfiles\NetworkService\ntuser.d at.LOG2 Object is locked skipped C:\Windows\ServiceProfiles\NetworkService\NTUSER.D AT{3d4e88e5-6a70-11db-b1ba-d64300c9c793}.TM.blf Object is locked skipped C:\Windows\ServiceProfiles\NetworkService\NTUSER.D AT{3d4e88e5-6a70-11db-b1ba-d64300c9c793}.TMContainer00000000000000000001.regt rans-ms Object is locked skipped C:\Windows\ServiceProfiles\NetworkService\NTUSER.D AT{3d4e88e5-6a70-11db-b1ba-d64300c9c793}.TMContainer00000000000000000002.regt rans-ms Object is locked skipped C:\Windows\SoftwareDistribution\ReportingEvents.lo g Object is locked skipped C:\Windows\System32\106766.exe Infected: Trojan.Win32.Pakes.cta skipped C:\Windows\System32\131430.exe Infected: Trojan.Win32.Pakes.cta skipped C:\Windows\System32\169434.exe Infected: Trojan.Win32.Pakes.cta skipped C:\Windows\System32\21256.exe Infected: Trojan.Win32.Pakes.cta skipped C:\Windows\System32\222042.exe Infected: Trojan.Win32.Pakes.cta skipped C:\Windows\System32\227598.exe Infected: Trojan.Win32.Pakes.cta skipped C:\Windows\System32\261029.exe Infected: Trojan.Win32.Pakes.cta skipped C:\Windows\System32\287790.exe Infected: Trojan.Win32.Pakes.cta skipped C:\Windows\System32\30491.exe Infected: Trojan.Win32.Pakes.cta skipped C:\Windows\System32\307877.exe Infected: Trojan.Win32.Pakes.cta skipped C:\Windows\System32\401399.exe Infected: Trojan.Win32.Pakes.cta skipped C:\Windows\System32\475047.exe Infected: Trojan.Win32.Pakes.cta skipped C:\Windows\System32\575579.exe Infected: Trojan.Win32.Pakes.cta skipped C:\Windows\System32\623988.exe Infected: Trojan.Win32.Pakes.cta skipped C:\Windows\System32\66664.exe Infected: Trojan.Win32.Pakes.cta skipped C:\Windows\System32\66793.exe Infected: Trojan.Win32.Pakes.cta skipped C:\Windows\System32\68070.exe Infected: Trojan.Win32.Pakes.cta skipped C:\Windows\System32\68631.exe Infected: Trojan.Win32.Pakes.cta skipped C:\Windows\System32\691256.exe Infected: Trojan.Win32.Pakes.cta skipped C:\Windows\System32\712029.exe Infected: Trojan.Win32.Pakes.cta skipped C:\Windows\System32\734484.exe Infected: Trojan.Win32.Pakes.cta skipped C:\Windows\System32\763284.exe Infected: Trojan.Win32.Pakes.cta skipped C:\Windows\System32\765599.exe Infected: Trojan.Win32.Pakes.cta skipped C:\Windows\System32\766254.exe Infected: Trojan.Win32.Pakes.cta skipped C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0 Object is locked skipped C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0 Object is locked skipped C:\Windows\System32\829467.exe Infected: Trojan.Win32.Pakes.cta skipped C:\Windows\System32\843573.exe Infected: Trojan.Win32.Pakes.cta skipped C:\Windows\System32\886890.exe Infected: Trojan.Win32.Pakes.cta skipped C:\Windows\System32\94599.exe Infected: Trojan.Win32.Pakes.cta skipped C:\Windows\System32\catroot2\edb.log Object is locked skipped C:\Windows\System32\catroot2\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}\catdb Object is locked skipped C:\Windows\System32\catroot2\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\catdb Object is locked skipped C:\Windows\System32\config\COMPONENTS Object is locked skipped C:\Windows\System32\config\COMPONENTS.LOG1 Object is locked skipped C:\Windows\System32\config\COMPONENTS.LOG2 Object is locked skipped C:\Windows\System32\config\DEFAULT Object is locked skipped C:\Windows\System32\config\DEFAULT.LOG1 Object is locked skipped C:\Windows\System32\config\DEFAULT.LOG2 Object is locked skipped C:\Windows\System32\config\RegBack\COMPONENTS Object is locked skipped C:\Windows\System32\config\RegBack\DEFAULT Object is locked skipped C:\Windows\System32\config\RegBack\SAM Object is locked skipped C:\Windows\System32\config\RegBack\SECURITY Object is locked skipped C:\Windows\System32\config\RegBack\SOFTWARE Object is locked skipped C:\Windows\System32\config\RegBack\SYSTEM Object is locked skipped C:\Windows\System32\config\SAM Object is locked skipped C:\Windows\System32\config\SAM.LOG1 Object is locked skipped C:\Windows\System32\config\SAM.LOG2 Object is locked skipped C:\Windows\System32\config\SECURITY Object is locked skipped C:\Windows\System32\config\SECURITY.LOG1 Object is locked skipped C:\Windows\System32\config\SECURITY.LOG2 Object is locked skipped C:\Windows\System32\config\SOFTWARE Object is locked skipped C:\Windows\System32\config\SOFTWARE.LOG1 Object is locked skipped C:\Windows\System32\config\SOFTWARE.LOG2 Object is locked skipped C:\Windows\System32\config\SYSTEM Object is locked skipped C:\Windows\System32\config\SYSTEM.LOG1 Object is locked skipped C:\Windows\System32\config\SYSTEM.LOG2 Object is locked skipped C:\Windows\System32\config\TxR\{250834B7-750C-494d-BDC3-DA86B6E2101B}.TM.blf Object is locked skipped C:\Windows\System32\config\TxR\{250834B7-750C-494d-BDC3-DA86B6E2101B}.TMContainer00000000000000000001.regt rans-ms Object is locked skipped C:\Windows\System32\config\TxR\{250834B7-750C-494d-BDC3-DA86B6E2101B}.TMContainer00000000000000000002.regt rans-ms Object is locked skipped C:\Windows\System32\config\TxR\{250834B7-750C-494d-BDC3-DA86B6E2101B}.TMContainer00000000000000000003.regt rans-ms Object is locked skipped C:\Windows\System32\config\TxR\{250834B7-750C-494d-BDC3-DA86B6E2101B}.TMContainer00000000000000000004.regt rans-ms Object is locked skipped C:\Windows\System32\config\TxR\{db008955-99d9-11dc-b9e3-001731ce0194}.TxR.0.regtrans-ms Object is locked skipped C:\Windows\System32\config\TxR\{db008955-99d9-11dc-b9e3-001731ce0194}.TxR.1.regtrans-ms Object is locked skipped C:\Windows\System32\config\TxR\{db008955-99d9-11dc-b9e3-001731ce0194}.TxR.2.regtrans-ms Object is locked skipped C:\Windows\System32\config\TxR\{db008955-99d9-11dc-b9e3-001731ce0194}.TxR.blf Object is locked skipped C:\Windows\System32\LogFiles\HTTPERR\httperr1.log Object is locked skipped C:\Windows\System32\LogFiles\Scm\SCM.EVM Object is locked skipped C:\Windows\System32\LogFiles\SQM\SQMLogger_2008-5-9-0-0-21_0.etl Object is locked skipped C:\Windows\System32\LogFiles\WUDF\WUDFTrace.etl Object is locked skipped C:\Windows\System32\Msdtc\KtmRmTm.blf Object is locked skipped C:\Windows\System32\Msdtc\KtmRmTmContainer00000000 000000000001 Object is locked skipped C:\Windows\System32\Msdtc\KtmRmTmContainer00000000 000000000002 Object is locked skipped C:\Windows\System32\spool\SpoolerETW.etl Object is locked skipped C:\Windows\System32\spool25.exe Infected: Backdoor.Win32.IRCBot.cch skipped C:\Windows\System32\wbem\Logs\WMITracing.log Object is locked skipped C:\Windows\System32\wbem\repository\INDEX.BTR Object is locked skipped C:\Windows\System32\wbem\repository\MAPPING1.MAP Object is locked skipped C:\Windows\System32\wbem\repository\MAPPING2.MAP Object is locked skipped C:\Windows\System32\wbem\repository\OBJECTS.DATA Object is locked skipped C:\Windows\System32\WDI\LogFiles\WdiContextLog.etl .002 Object is locked skipped C:\Windows\System32\wfp\wfpdiag.etl Object is locked skipped C:\Windows\System32\winevt\Logs\Antivirus.evtx Object is locked skipped C:\Windows\System32\winevt\Logs\Application.evtx Object is locked skipped C:\Windows\System32\winevt\Logs\DFS Replication.evtx Object is locked skipped C:\Windows\System32\winevt\Logs\HardwareEvents.evt x Object is locked skipped C:\Windows\System32\winevt\Logs\Internet Explorer.evtx Object is locked skipped C:\Windows\System32\winevt\Logs\Key Management Service.evtx Object is locked skipped C:\Windows\System32\winevt\Logs\Microsoft-Windows-Backup.evtx Object is locked skipped C:\Windows\System32\winevt\Logs\Microsoft-Windows-Bits-Client%4Operational.evtx Object is locked skipped C:\Windows\System32\winevt\Logs\Microsoft-Windows-CodeIntegrity%4Operational.evtx Object is locked skipped C:\Windows\System32\winevt\Logs\Microsoft-Windows-Diagnosis-DPS%4Operational.evtx Object is locked skipped C:\Windows\System32\winevt\Logs\Microsoft-Windows-Diagnostics-Networking%4Operational.evtx Object is locked skipped C:\Windows\System32\winevt\Logs\Microsoft-Windows-Diagnostics-Performance%4Operational.evtx Object is locked skipped C:\Windows\System32\winevt\Logs\Microsoft-Windows-DriverFrameworks-UserMode%4Operational.evtx Object is locked skipped C:\Windows\System32\winevt\Logs\Microsoft-Windows-GroupPolicy%4Operational.evtx Object is locked skipped C:\Windows\System32\winevt\Logs\Microsoft-Windows-International%4Operational.evtx Object is locked skipped C:\Windows\System32\winevt\Logs\Microsoft-Windows-Kernel-WHEA.evtx Object is locked skipped C:\Windows\System32\winevt\Logs\Microsoft-Windows-LanguagePackSetup%4Operational.evtx Object is locked skipped C:\Windows\System32\winevt\Logs\Microsoft-Windows-NetworkAccessProtection%4Operational.evtx Object is locked skipped C:\Windows\System32\winevt\Logs\Microsoft-Windows-ReadyBoost%4Operational.evtx Object is locked skipped C:\Windows\System32\winevt\Logs\Microsoft-Windows-ReliabilityAnalysisComponent%4Metrics.evtx Object is locked skipped C:\Windows\System32\winevt\Logs\Microsoft-Windows-ReliabilityAnalysisComponent%4Operational.evtx Object is locked skipped C:\Windows\System32\winevt\Logs\Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx Object is locked skipped C:\Windows\System32\winevt\Logs\Microsoft-Windows-Resource-Exhaustion-Resolver%4Operational.evtx Object is locked skipped C:\Windows\System32\winevt\Logs\Microsoft-Windows-Resource-Leak-Diagnostic%4Operational.evtx Object is locked skipped C:\Windows\System32\winevt\Logs\Microsoft-Windows-RestartManager%4Operational.evtx Object is locked skipped C:\Windows\System32\winevt\Logs\Microsoft-Windows-TaskScheduler%4Operational.evtx Object is locked skipped C:\Windows\System32\winevt\Logs\Microsoft-Windows-WindowsUpdateClient%4Operational.evtx Object is locked skipped C:\Windows\System32\winevt\Logs\Security.evtx Object is locked skipped C:\Windows\System32\winevt\Logs\Setup.evtx Object is locked skipped C:\Windows\System32\winevt\Logs\System.evtx Object is locked skipped C:\Windows\Tasks\SCHEDLGU.TXT Object is locked skipped C:\Windows\Temp\_avast4_\unp127438788.tmp Object is locked skipped C:\Windows\Temp\_avast4_\unp146155409.tmp Object is locked skipped C:\Windows\Temp\_avast4_\unp159786196.tmp Object is locked skipped C:\Windows\Temp\_avast4_\unp197440675.tmp Object is locked skipped C:\Windows\Temp\_avast4_\unp29241401.tmp Object is locked skipped C:\Windows\Temp\_avast4_\unp50589788.tmp Object is locked skipped C:\Windows\Temp\_avast4_\unp54203425.tmp Object is locked skipped C:\Windows\Temp\_avast4_\unp60106719.tmp Object is locked skipped C:\Windows\Temp\_avast4_\unp92308042.tmp Object is locked skipped C:\Windows\Temp\_avast4_\Webshlock.txt Object is locked skipped C:\Windows\WindowsUpdate.log Object is locked skipped Scan process completed. Creo que van a tener para divertirse. Esperamos su ayuda!!!! Desde ya mil gracias pues son todos unos genios Ünica      |
|
15/05/08, 10:32:02
| |
| ||||
| Re: Virus en la memoria de la PC Que tal Unica_53, Desacarga OTMoveit2 + MANUAL Ejecuta la Herramienta OTMoveIt:
Código HTML: C:\$Recycle.Bin\S-1-5-21-1325065538-2026520194-629695300-1000
C:\Users\Mat{ias\Documents\Instaladores de programas\ACDSee\32BITS\ACDC3224.EXE
C:\Users\Mat{ias\Documents\Instaladores de programas\Codecs\radmin21.zip
C:\Users\Mat{ias\Documents\Instaladores de programas\Gadgets\AutoShutdown.gadget
C:\Users\Mat{ias\Documents\Instaladores de programas\P2P\Ares\setup_ares.exe
C:\Users\Mat{ias\Documents\Mis archivos recibidos\nuevaFoto10.zip
C:\Users\Mat{ias\mxusbkd.exe
C:\Users\Mat{ias\utuu.exe
C:\Users\Mat{ias\uulyiw.exe
C:\Windows\System32\106766.exe
C:\Windows\System32\131430.exe
C:\Windows\System32\169434.exe
C:\Windows\System32\21256.exe
C:\Windows\System32\222042.exe
C:\Windows\System32\227598.exe
C:\Windows\System32\261029.exe
C:\Windows\System32\287790.exe
C:\Windows\System32\30491.exe
C:\Windows\System32\307877.exe
C:\Windows\System32\401399.exe
C:\Windows\System32\475047.exe
C:\Windows\System32\575579.exe
C:\Windows\System32\623988.exe
C:\Windows\System32\66664.exe
C:\Windows\System32\66793.exe
C:\Windows\System32\68070.exe
C:\Windows\System32\68631.exe
C:\Windows\System32\691256.exe
C:\Windows\System32\712029.exe
C:\Windows\System32\734484.exe
C:\Windows\System32\763284.exe
C:\Windows\System32\765599.exe
C:\Windows\System32\766254.exe
C:\Windows\System32\829467.exe
C:\Windows\System32\843573.exe
C:\Windows\System32\886890.exe
C:\Windows\System32\94599.exe
C:\Windows\System32\spool25.exe
|
|
« Tema Anterior
|
Próximo Tema »
| Herramientas | |
|
|
|
Temas Similares | |
| Tema | Autor | Foro | Respuestas | Último mensaje |
| Muchos problemas Spyware AYUDA !! | killer007 | Foro de Virus y Spywares | 16 | 02/06/07 22:10:36 |
| pc infectada, pero antivirus no los elimina ..ayuda | mizzuri | Foro Oficial de HijackThis en español | 4 | 02/05/07 00:34:32 |
| Nuevo Usuario con Varios Virus | Hiei | Foro de Virus y Spywares | 8 | 21/04/07 05:35:43 |
| bloqueado regedit (Solucionado) | DMPajaro | Temas Solucionados | 3 | 13/12/06 14:20:01 |
Todas las horas son GMT -4. La hora es 08:58:21.
