holaa q tal buenop es mi primer post mira tengo una y cono en forma de escudo parapadeante en rojo y azul como el escudo que aparese cuando el sisitema de protecccion de windows deteacta la falta de antivirus o alguna otra irregularidad y esta me enbia a la pagina de www.virusheat.com alguien me podria decir como me desago de esto es vastante molesto
de antemano muchas gracias

Hola te doy la bienvenida a Foro de InfoSpyware.

• Politicas del foro.
• Consejos a la hora de publicar nuevos mensajes.

Sigue estos pasos:

Apaga "Restaurar Sistema" (System Restore) Solo en Win ME y XP

Iniciar el sistema en "Modo a Prueba de Fallos" (modo seguro)

Aun en modo seguro; Escanea tu PC con

• SUPERAntispyware -Manual-
• DelPSGuard(dejanos su log)
• MalwareBytes' Anti-Malware (dejanos el reporte que éste genere)

Utiliza el CClenaer. Usar primero su opción de "Limpiador" para borrar cookies, temporales de Internet y todos los archivos que este te muestre como obsoletos, y luego usar su opción de "Registro" para limpiar todo el registro de Windows (haciendo copia de seguridad).

Reinicia en Modo Normal y pasale este antivirus online:

• kaspersky -Manual- (Coloca su log)

• Si usas Firefox necesitaras de la extension IETab

Deshacer el paso número 1

Por comodidad te recomiendo que imprimas las indicaciones.

Comentanos como te ah ido!

en primea muchas grasias ise lo que me aconsejaron y funciono muy bien ya le e dado varios anañisis con antivirus y spybot y asta ahora todo en orden


los desplegados so estos
[/color]

DelPSGuard v 4.9.7

by www.ForoSpyware.com

Reporte Creado: 15:37:25,48, 05/06/2008

SO: Microsoft Windows XP [Versi¢n 5.1.2600]

Modo de Inicio: Seguro

_________________________________________





ªªªªªªªªªªªª Carpetas y Archivos infectados ªªªªªªªªªªªª



C:\WINDOWS\system32 \ntimage.gif Eliminado Malware.Bagle



ªªªªªªªªªªªªªªªªªªª Programas Malwares ªªªªªªªªªªªªªªªªª



C:\Archivos de programa\NetProject ...: ! Eliminado ! :...

C:\Archivos de programa\XP Antivirus ...: ! Eliminado ! :...





ªªªªªªªªªªªªªªªªªªª FIN ªªªªªªªªªªªªªªªªªªª



y


Malwarebytes' Anti-Malware 1.14

VersiÛn de la Base de Datos: 800



15:44:18 05/06/2008

mbam-log-6-5-2008 (15-44-18).txt



Tipo de examen : Examen R·pido

Objetos examinados: 35175

Tiempo transcurrido: 6 minute(s), 34 second(s)



Procesos en Memoria Infectados: 0

MÛdulos en Memoria Infectados: 1

Claves del Registro Infectadas: 45

Valores del Registro Infectados: 6

Elementos de Datos del Registro Infectados: 0

Carpetas Infectadas: 17

Ficheros Infectados: 23



Procesos en Memoria Infectados:

(No se han detectado elementos maliciosos)



MÛdulos en Memoria Infectados:

C:\WINDOWS\system32\rtmipr.dll (Trojan.Zlob) -> Unloaded module successfully.



Claves del Registro Infectadas:

HKEY_CLASSES_ROOT\CLSID\{e89fa8e9-5c0b-45f6-a70e-f7b177bcd193} (Trojan.Zlob) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\Interface\{f7d09218-46d7-4d3d-9b7f-315204cd0836} (Trojan.BHO) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\Typelib\{e63648f7-3933-440e-b4f6-a8584dd7b7eb} (Trojan.BHO) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\CLSID\{427b1fd8-2123-4334-a7d8-7a497363914b} (Trojan.BHO) -> Quarantined and deleted successfully.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Explorer\Browser Helper Objects\{427b1fd8-2123-4334-a7d8-7a497363914b} (Trojan.BHO) -> Quarantined and deleted successfully.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{28abc5c0-4fcb-11cf-aax5-81cx1c635612} (Trojan.Agent) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\CLSID\{13901470-5bcf-0ea6-a762-ad195455772b} (Rogue.MalwareWar) -> Quarantined and deleted successfully.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Explorer\Browser Helper Objects\{4d1c4e81-a32a-416b-bcdb-33b3ef3617d3} (Adware.Need2Find) -> Quarantined and deleted successfully.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{9034a523-d068-4be8-a284-9df278be776e} (Trojan.Zlob) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\CLSID\{51d81dd5-55b7-497f-95db-d356429bb54e} (Trojan.Zlob) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\CLSID\{e94eb13e-d78f-0857-7734-5e67a49ffff1} (Trojan.Zlob) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\CLSID\{7c109800-a5d5-438f-9640-18d17e168b88} (Trojan.Zlob) -> Quarantined and deleted successfully.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\ExplNetProjowser Helper Objects\{7c109800-a5d5-438f-9640-18d17e168b88} (Trojan.Zlob) -> Quarantined and deleted successfully.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Explorer\Browser Helper Objects\{7c109800-a5d5-438f-9640-18d17e168b88} (Trojan.Zlob) -> Quarantined and deleted successfully.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Explorer\Browser Helper Objects\{5f90c0e3-4c0a-4d54-a8ac-5afe6163a99e} (Adware.Starware) -> Quarantined and deleted successfully.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Ext\PreApproved\{a84e835e-1b9c-4fc0-980f-4b2da3c6a2a7} (Adware.Comet) -> Quarantined and deleted successfully.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Ext\PreApproved\{bf0a1ff4-bbaf-487f-bc85-a24ef8f443a8} (Adware.Comet) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\Interface\{0fbc3efb-fc98-4b32-bf10-bde9aa4dea5a} (Adware.Comet) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\Interface\{6a4b7d17-1de9-4c14-8adf-eb4c07060519} (Adware.Comet) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\Interface\{abf441b2-9b57-4838-96a0-34b1cecd4aa5} (Adware.Comet) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\Typelib\{74278296-0ec7-4f7a-ad55-eb7a2f35f311} (Adware.Comet) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\Interface\{0dfba66b-db48-4292-831a-e7186d8a61ae} (Rogue.VirusHeat) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\Interface\{46f309ae-9d11-4c10-9d20-2c084b1c8bce} (Rogue.VirusHeat) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\Interface\{4cb95561-af37-4bbd-823c-1e355a744a43} (Rogue.VirusHeat) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\Interface\{76157861-4996-4711-90e4-6d868b877b24} (Rogue.VirusHeat) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\Interface\{81da01db-8100-4865-b9b0-a83f54378435} (Rogue.VirusHeat) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\Interface\{910ef37b-a486-41fc-8a1b-28c5581ab3ac} (Rogue.VirusHeat) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\Interface\{a6b2bc38-7f2a-4202-9b43-a28615727fee} (Rogue.VirusHeat) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\Interface\{b11da4c8-52dc-44a2-b21b-02bf7a93eb5b} (Rogue.VirusHeat) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\Interface\{b5adbfca-c6de-4e5a-a2da-70aa2933b696} (Rogue.VirusHeat) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\Interface\{b5ae5932-f1b3-45e4-842a-59eea65b13a8} (Rogue.VirusHeat) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\Interface\{ba18ba7b-9567-4408-9b87-3d3990c3969e} (Rogue.VirusHeat) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\Interface\{d56509ab-9821-4db0-bf2f-115159804140} (Rogue.VirusHeat) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\Interface\{dff203ea-222c-44fa-8b78-ed88b4587aa2} (Rogue.VirusHeat) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\Interface\{eb22b708-e0d3-4fce-800b-6dd0c5b30d42} (Rogue.VirusHeat) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\Interface\{f1ea02f8-e536-4828-bfb7-3de7fa4d4b09} (Rogue.VirusHeat) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\Interface\{f6e18622-dfa8-4dba-b05e-d3d147e16d44} (Rogue.VirusHeat) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\Typelib\{23624bd0-2a69-4f91-be6a-9f1f22b72c13} (Rogue.VirusHeat) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\AppID\MalwareWar.EXE (Rogue.MalwareWar) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\CLSID\E404.e404mgr (Trojan.BHO) -> Quarantined and deleted successfully.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WNetPws (Trojan.Zlob) -> Quarantined and deleted successfully.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Explorer\Browser HeNetProjeects (Trojan.Zlob) -> Quarantined and deleted successfully.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\W MPlayer\Schemes\f3pss (Adware.MyWebSearch) -> Quarantined and deleted successfully.

HKEY_LOCAL_MACHINE\SOFTWARE\Screensavers.com (Adware.Comet) -> Quarantined and deleted successfully.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Uninstall\SSSInstaller (Adware.Comet) -> Quarantined and deleted successfully.



Valores del Registro Infectados:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Explorer\SharedTaskScheduler\{e89fa8e9-5c0b-45f6-a70e-f7b177bcd193} (Trojan.Zlob) -> Quarantined and deleted successfully.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{51d81dd5-55b7-497f-95db-d356429bb54e} (Trojan.Zlob) -> Quarantined and deleted successfully.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{1962c5bc-e475-465b-823b-133e711bceb9} (Adware.Starware) -> Quarantined and deleted successfully.

HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\SearchMigratedDefaultURL (Trojan.Zlob) -> Quarantined and deleted successfully.

HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchUrl\w\ (Trojan.Zlob) -> Quarantined and deleted successfully.

HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchURL (Trojan.Zlob) -> Quarantined and deleted successfully.



Elementos de Datos del Registro Infectados:

(No se han detectado elementos maliciosos)



Carpetas Infectadas:

C:\Archivos de programa\Starware316 (Adware.Starware) -> Quarantined and deleted successfully.

C:\Archivos de programa\Starware316\bin (Adware.Starware) -> Quarantined and deleted successfully.

C:\Archivos de programa\Starware316\icons (Adware.Starware) -> Quarantined and deleted successfully.

C:\Archivos de programa\Screensavers.com (Adware.Comet) -> Quarantined and deleted successfully.

C:\Archivos de programa\Screensavers.com\ActiveDesktop (Adware.Comet) -> Quarantined and deleted successfully.

C:\Archivos de programa\Screensavers.com\SSSInstaller (Adware.Comet) -> Quarantined and deleted successfully.

C:\Archivos de programa\Screensavers.com\ActiveDesktop\bin (Adware.Comet) -> Quarantined and deleted successfully.

C:\Archivos de programa\Screensavers.com\SSSInstaller\bin (Adware.Comet) -> Quarantined and deleted successfully.

C:\Archivos de programa\Screensavers.com\SSSInstaller\Ready (Adware.Comet) -> Quarantined and deleted successfully.

C:\Archivos de programa\Screensavers.com\SSSInstaller\temp (Adware.Comet) -> Quarantined and deleted successfully.

C:\Archivos de programa\Screensavers.com\SSSInstaller\Upload (Adware.Comet) -> Quarantined and deleted successfully.

C:\Archivos de programa\VirusHeat 4.4 (Rogue.VirusHeat) -> Quarantined and deleted successfully.

C:\Archivos de programa\MalwareWar 7.3 (Rogue.MalwareWar) -> Quarantined and deleted successfully.

C:\WINDOWS\system32\UpMedia (Adware.SmartShopper) -> Quarantined and deleted successfully.

C:\WINDOWS\system32\158117 (Trojan.BHO) -> Quarantined and deleted successfully.

C:\Documents and Settings\All Users\Datos de programa\Adsl Software Limited (Rogue.MalWarrior) -> Quarantined and deleted successfully.

C:\Documents and Settings\All Users\Datos de programa\Adsl Software Limited\WinSpywareProtect (Rogue.MalWarrior) -> Quarantined and deleted successfully.



Ficheros Infectados:

C:\WINDOWS\system32\rtmipr.dll (Trojan.Zlob) -> Delete on reboot.

C:\WINDOWS\system32\158117\158117.dll (Trojan.BHO) -> Quarantined and deleted successfully.

C:\Archivos de programa\Archivos comunes\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Rogue.MalwareWar) -> Quarantined and deleted successfully.

C:\Archivos de programa\NetProject\wamdl.dll (Trojan.Zlob) -> Quarantined and deleted successfully.

C:\Archivos de programa\NetProject\sbmdl.dll (Trojan.Zlob) -> Quarantined and deleted successfully.

C:\Archivos de programa\Starware316\Starware316Config.xml (Adware.Starware) -> Quarantined and deleted successfully.

C:\Archivos de programa\Starware316\Starware316Uninstall.exe (Adware.Starware) -> Quarantined and deleted successfully.

C:\Archivos de programa\Starware316\icons\star_16.ico (Adware.Starware) -> Quarantined and deleted successfully.

C:\Archivos de programa\Screensavers.com\SSSUninst.exe (Adware.Comet) -> Quarantined and deleted successfully.

C:\Archivos de programa\Screensavers.com\ActiveDesktop\bin\Active DesktopExe.exe (Adware.Comet) -> Quarantined and deleted successfully.

C:\Archivos de programa\VirusHeat 4.4\ignored.lst (Rogue.VirusHeat) -> Quarantined and deleted successfully.

C:\Archivos de programa\VirusHeat 4.4\msvcp71.dll (Rogue.VirusHeat) -> Quarantined and deleted successfully.

C:\Archivos de programa\VirusHeat 4.4\msvcr71.dll (Rogue.VirusHeat) -> Quarantined and deleted successfully.

C:\Archivos de programa\VirusHeat 4.4\VirusHeat 4.4.exe (Rogue.VirusHeat) -> Quarantined and deleted successfully.

C:\Archivos de programa\VirusHeat 4.4\vpp.ini (Rogue.VirusHeat) -> Quarantined and deleted successfully.

C:\Archivos de programa\MalwareWar 7.3\ignorelist.dat (Rogue.MalwareWar) -> Quarantined and deleted successfully.

C:\Archivos de programa\MalwareWar 7.3\MalwareWar 7.3.exe (Rogue.MalwareWar) -> Quarantined and deleted successfully.

C:\Archivos de programa\MalwareWar 7.3\MalwareWar.ini (Rogue.MalwareWar) -> Quarantined and deleted successfully.

C:\Archivos de programa\MalwareWar 7.3\msvcp71.dll (Rogue.MalwareWar) -> Quarantined and deleted successfully.

C:\Archivos de programa\MalwareWar 7.3\msvcr71.dll (Rogue.MalwareWar) -> Quarantined and deleted successfully.

C:\Documents and Settings\All Users\Datos de programa\Adsl Software Limited\WinSpywareProtect\WinSpywareProtect.exe (Rogue.MalWarrior) -> Quarantined and deleted successfully.

C:\Documents and Settings\All Users\Men˙ Inicio\Online Security Guide.url (Rogue.Link) -> Quarantined and deleted successfully.

C:\Documents and Settings\All Users\Men˙ Inicio\Security Troubleshooting.url (Rogue.Link) -> Quarantined and deleted successfully.





Bueno gracias

Hola, muy bien, las herramientas están realizando su trabajo.

Recuerda volver y dejarme los reportes faltantes.

Saludos y suerte!