| |||||||
| Foro de Virus y Spywares Ayuda con: Malwares - Virus - Spywares - Troyanos - Adwares - Worms - Hijackers - Dialers - Rootkits - Keylogger - etc.) Plantéanos tu problema en este sector. No ponga su log de HijackThis aquí !! |
 |
| | Enviar a: | Herramientas |
 | 
25/06/08, 21:32:24
|  |
| |||
| ayuda con virus alert o antivirus 2008 pro Hola amigos, tengo un problema con virus alert! o antivirus 2008 pro. Bueno, la situaciòn es la siguiente, no puedo eliminarlo. leyendo en los diferentes foros, descargue ccleaner,superantispyware, malwarebytes y hijackthis. quiiera saber cuales son los pasos, que debo aplicar, ya que parece que este virus aun no sale de mi pc, al aplicar superantispyware y malwarebytes. Hijackthis no lo se ocupar, por lo que no he realizado ninguna accion. porfavorayudenme, puesto que tengo informaciòn muy importante que entregar, y hasta el momento, este virus no me deja trabajar. Desde ya muchas gracias. Alex |
| InfoSpyware | ||
| |
|
25/06/08, 21:49:56
| |
| ||||
| Re: ayuda con virus alert o antivirus 2008 pro Que tal alabbe, A.-Descarga y actualiza Super antispyware <Leer_manual> B.- Desacarga DelpSGuard esta al final de la pagina<Leer Manual> 1.-Desactiva restaurar sistemaC.-.-Descarga y actualiza Malwarebytes' Anti-Malware<Leer_manual> 2.-Entra en modo seguro
D.-En modo Normal Realiza un Scan Online con el Panda ActiveScan+Manual y pega el reporte que genere envolviendolo con la etiqueta CODE # Regresa con los reportes del Panda, DelpSguard, MalwareBytes y dime como esta la PC  |
|
12/07/08, 20:28:09
| |
| |||
| Re: ayuda con virus alert o antivirus 2008 pro hola soy nuevo aca, me registre mas q nada para poder eliminar est virus "virus alert ! " hice todo tal cual lei aca pero el unico problema esq aun nose q pasa tengo como un espia o una propaganda en la pag. principal de google y aun no aparecen los accesos directos q se me desaparecieron en el momento q aparecio el virus.. quisiera saber como solucionar ese tema y aqui dejo los registros de los antivirus tal cual lo dijistes.. DelPSGuard v 4.9.8 by www.ForoSpyware.com Reporte Creado: 0:01:15,04, 12/07/2008 SO: Microsoft Windows XP [Versi¢n 5.1.2600] Modo de Inicio: Normal _________________________________________ »»»»»»»»»»»» Carpetas y Archivos infectados »»»»»»»»»»»» C:\WINDOWS\system32 \ctfmona.exe ...: ! Eliminado ! :... C:\WINDOWS\system32 \ntimage.gif Eliminado Malware.Bagle C:\WINDOWS\system32 \blackster.scr ...: ! Eliminado ! :... »»»»»»»»»»»»»»»»»»» Programas Malwares »»»»»»»»»»»»»»»»» »»»»»»»»»»»»»»»»»»» FIN »»»»»»»»»»»»»»»»»»» Código: Malwarebytes' Anti-Malware 1.20
Versión de la Base de Datos: 941
Windows 5.1.2600 Service Pack 2
12:37:50 a.m. 12/07/2008
mbam-log-7-12-2008 (00-37-50).txt
Tipo de examen : Examen Completo (C:\|D:\|)
Objetos examinados: 77918
Tiempo transcurrido: 11 minute(s), 41 second(s)
Procesos en Memoria Infectados: 1
Módulos en Memoria Infectados: 1
Claves del Registro Infectadas: 9
Valores del Registro Infectados: 4
Elementos de Datos del Registro Infectados: 15
Carpetas Infectadas: 0
Ficheros Infectados: 7
Procesos en Memoria Infectados:
C:\WINDOWS\system32\lphc3m5j0el5g.exe (Trojan.FakeAlert) -> Unloaded process successfully.
Módulos en Memoria Infectados:
C:\WINDOWS\system32\blphc3m5j0el5g.scr (Trojan.FakeAlert) -> Unloaded module successfully.
Claves del Registro Infectadas:
HKEY_CLASSES_ROOT\Interface\{25ddd24d-1a1b-41ac-919b-b6bc6dfbc2fc} (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{34b5a18e-62d7-47ad-8801-1da95cacc9ba} (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{4b745bde-f479-42de-9c18-37422ea83bcc} (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Typelib\{83e03729-a156-46ec-9cb8-afedc71aec0a} (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\aoprndtws (Malware.Trace) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\rdfa (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Software Notifier (Rogue.Multiple) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MS Juan (Malware.Trace) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\VSPlugin (Trojan.FakeAlert) -> Quarantined and deleted successfully.
Valores del Registro Infectados:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\204a09ff (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\lphc3m5j0el5g (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\fdxbameg (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\fsrpknov (Trojan.FakeAlert) -> Quarantined and deleted successfully.
Elementos de Datos del Registro Infectados:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProductId (Trojan.FakeAlert) -> Bad: (VIRUS ALERT!) Good: (55274-641-2857497-23800) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\Control Panel\International\sTimeFormat (Trojan.FakeAlert) -> Bad: (HH:mm: VIRUS ALERT!) Good: (hh:mm:ss tt) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Start_ShowControlPanel (Hijack.StartMenu) -> Bad: (0) Good: (1) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Start_ShowRun (Hijack.StartMenu) -> Bad: (0) Good: (1) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Start_ShowSearch (Hijack.StartMenu) -> Bad: (0) Good: (1) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Start_ShowHelp (Hijack.StartMenu) -> Bad: (0) Good: (1) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Start_ShowMyDocs (Hijack.StartMenu) -> Bad: (0) Good: (1) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Start_ShowMyComputer (Hijack.StartMenu) -> Bad: (0) Good: (1) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoStartMenuMorePrograms (Hijack.StartMenu) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\StartMenuLogOff (Hijack.StartMenu) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoDrives (Hijack.Drives) -> Bad: (12) Good: (0) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoToolbarCustomize (Hijack.Explorer) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoSetFolders (Hijack.Explorer) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\NoDispBackgroundPage (Hijack.DisplayProperties) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\NoDispScrSavPage (Hijack.DisplayProperties) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
Carpetas Infectadas:
(No se han detectado elementos maliciosos)
Ficheros Infectados:
C:\WINDOWS\system32\vqsnywmb.dll (Trojan.Vundo) -> Delete on reboot.
C:\WINDOWS\system32\bmwynsqv.ini (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\bmwynsqv.ini2 (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\eorp.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.
C:\WINDOWS\gpefaowr.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\lphc3m5j0el5g.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\blphc3m5j0el5g.scr (Trojan.FakeAlert) -> Quarantined and deleted successfully. Código: ;*********************************************************************************************************************************************************************************** ANALYSIS: 2008-07-12 01:21:39 PROTECTIONS: 0 MALWARE: 5 SUSPECTS: 1 ;*********************************************************************************************************************************************************************************** PROTECTIONS Description Version Active Updated ;=================================================================================================================================================================================== ;=================================================================================================================================================================================== MALWARE Id Description Type Active Severity Disinfectable Disinfected Location ;=================================================================================================================================================================================== 00168056 Cookie/YieldManager TrackingCookie No 0 Yes No C:\Documents and Settings\Administrador\Cookies\administrador@ad.yieldmanager[2].txt 00288208 Application/HideWindow.S HackTools No 0 Yes No C:\WINDOWS\SYSTEM32\CMDOW.EXE 00343731 Application/CloseApp HackTools No 0 Yes No C:\WINDOWS\SYSTEM32\CLOSEAPP.EXE 03009106 W32/Xor-encoded.A Virus No 0 Yes No C:\Archivos de programa\Eset\INFECTED\XSSXYQCA.NQF 03009106 W32/Xor-encoded.A Virus No 0 Yes No C:\Archivos de programa\Eset\INFECTED\L44ZBVCA.NQF 03009106 W32/Xor-encoded.A Virus No 0 Yes No C:\Archivos de programa\Eset\INFECTED\UWA3QNAA.NQF 03009106 W32/Xor-encoded.A Virus No 0 Yes No C:\Archivos de programa\Eset\INFECTED\BBWQJSAA.NQF 03009106 W32/Xor-encoded.A Virus No 0 Yes No C:\Archivos de programa\Eset\INFECTED\MXVY40BA.NQF 03009106 W32/Xor-encoded.A Virus No 0 Yes No C:\Archivos de programa\Eset\INFECTED\NQ22ESCA.NQF 03009106 W32/Xor-encoded.A Virus No 0 Yes No C:\Archivos de programa\Eset\INFECTED\ZPQ4AKAA.NQF 03205018 Generic Trojan Virus/Trojan No 0 Yes No C:\Archivos de programa\DelPSGuard\IED.EXE ;=================================================================================================================================================================================== SUSPECTS Sent Location [ ;=================================================================================================================================================================================== No D:\Temp\VISTASP1.EXE [ ;=================================================================================================================================================================================== VULNERABILITIES Id Severity Description [ ;=================================================================================================================================================================================== 184380 MEDIUM MS08-002 [ 184379 MEDIUM MS08-001 [ 182048 HIGH MS07-069 [ 182046 HIGH MS07-067 [ 182043 HIGH MS07-064 [ 179553 HIGH MS07-061 [ 176382 HIGH MS07-057 [ 176383 HIGH MS07-058 [ 170911 HIGH MS07-050 [ 170907 HIGH MS07-046 [ 170906 HIGH MS07-045 [ 170904 HIGH MS07-043 [ 164915 HIGH MS07-035 [ 164913 HIGH MS07-033 [ 164911 HIGH MS07-031 [ 160623 HIGH MS07-027 [ 157262 HIGH MS07-022 [ 157261 HIGH MS07-021 [ 157260 HIGH MS07-020 [ 157259 HIGH MS07-019 [ 156477 HIGH MS07-017 [ 150253 HIGH MS07-016 [ 150249 HIGH MS07-013 [ 150248 HIGH MS07-012 [ 150247 HIGH MS07-011 [ 150243 HIGH MS07-008 [ 150242 HIGH MS07-007 [ 150241 MEDIUM MS07-006 [ ;=================================================================================================================================================================================== |
|
13/07/08, 03:56:59
| |
| ||||
 Re: ayuda con virus alert o antivirus 2008 pro has esto Descarga y actualiza Malwarebytes' Anti-Malware escanea en modo seguro y listo te lo kitara..........te lo jurooooooooo   yo tenia virus alert y me lo saco...el otro dia de estupido lo tuve de nuevo en el pc... escanee y xao de nuevo haz solo eso y listo....y por si acaso si kieres depues de hacer eso haz otro scaner con tu antivirus de preferencia el nod32....y xao problem...avisa si lo sacas para cerrar el tema.................... |
|
14/07/08, 10:45:46
| |
| ||||
| Re: ayuda con virus alert o antivirus 2008 pro Hola alabbe Realiza estos pasos por favor...  - Descarga la herramienta ComboFix.exe y guárdala en el escritorio.
Cita:
Salu2 Recuerda volver y contarnos los resltados <¡D3ViL!> Novedades del Foro | Antivirus Online | Eliminar Malwares | Políticas del Foro | Blog * Ayúdanos haciendo una DONACIÓN para poder seguir Ayudando. * Infórmate de las ultimas amenazas de la red desde: InfoSpyware Blog * No se resuelven dudas por Privados ni por E-mail, ya que para eso esta el foro. |
|
« Tema Anterior
|
Próximo Tema »
| Herramientas | |
| |
| 
Temas Similares | |
| Tema | Autor | Foro | Respuestas | Último mensaje |
| problemas con avira antivir | comanchero | AntiVirus | 35 | 10/09/08 12:08:59 |
| Como Eliminar el W32.Spybot.worm | marianototo | Foro de Virus y Spywares | 40 | 27/02/08 19:41:29 |
| Spyware, sin Internet, sin impresora.. HELP!! (terminado) | Athany | Temas Solucionados | 11 | 28/10/07 23:10:00 |
| Nuevo Usuario con Varios Virus | Hiei | Foro de Virus y Spywares | 8 | 21/04/07 06:35:43 |
| Problemas con spywares y demas (formateado) | RoblesN70 | Temas Solucionados | 5 | 26/10/06 09:00:34 |
Todas las horas son GMT -4. La hora es 12:14:53.
