hola dlahman77 !!!ketal??
e pasado el ewido tal y como me dijiste, xo no pongo el informe xq me a eliminado directamente las 6 infecciones ke a encontrado.
e de decir ke el problema cn la ventana emergente continua, no e conseguido eliminarla
ke puedo acer aora???
muxisimas gracias por adelantado!!

Realiza lo siguiente:

* Desinstala estos programas si los tenes instalados :

MessengerSkinner
InternetGameBox
Spyware-Secure
Instant Access
HotTVPlayer
MailSkinner
GoRecord
Go-Astro
sudoku


* Descarga y actualiza SUPERAntispyware + Manual.
* Descarga NAVILOG1 + Manual (por IL-MAFIOSO).
y reinicia en Modo Seguro (a prueba de fallos).


1. Ejecuta Superantispyware. en modo completo y elimina las infecciones que este encuentre.
2. Ejecuta NAVILOLOG1. Siga las instrucciones de su Manual.
o Nota 1: Cuando ejecutes la herramienta seleccionas la opcion "2" "automatic cleaner".
o Nota 2: Guarda el reporte que te generó NAVILOG1 y que se encuentra en C:\Cleannavi.txt.

* Reinicia en modo normal y usa el CCleaner + Manual para limpiar el sistema.
o Primero utiliza la opción de "Limpiador" para borrar cookies, temporales de Internet y todos los archivos que este te muestre como obsoletos.
o Luego usa su opción de "Registro" para limpiar todo el registro de Windows (haciendo copia de seguridad).

* Realiza un escaneo completo del PC con el Panda active Scan 2.0 en modo normal.

*Nota*
- Pega los reportes de Navilog1 y Panda ActiveScan 2.0 para revisarlos.
- Al terminar el proceso de desinfección desinstala NAVILOG1.

ola!! aki esta el reporte de Navilog1:
Search Navipromo version 3.6.1 began on 30/07/2008 at 11:52:29,31

!!! Warning, this report may include legitimate files/programs !!!
!!! Post this report on the forum you are being helped !!!
!!! Don't continue with removal unless instructed by an authorized helper !!!
Fix running from C:\Program Files\navilog1
Actual User Account : "Compaq_Administrator"

Updated on 19.07.2008 at 20h00 by IL-MAFIOSO


Microsoft Windows XP [Versi¢n 5.1.2600]
Version Internet Explorer : 7.0.5730.13
Filesystem type : NTFS

Search done in safe mode

*** Searching for installed Software ***


*** Search folders in "C:\WINDOWS" ***


*** Search folders in "C:\Program Files" ***


*** Search folders in "C:\Documents and Settings\All Users\startm~1\programs" ***


*** Search folders in "C:\Documents and Settings\All Users\startm~1" ***


*** Search folders in "c:\docume~1\alluse~1\applic~1" ***


*** Search folders in "C:\Documents and Settings\Compaq_Administrator\applic~1" ***


*** Search folders in "C:\DOCUME~1\ADMINI~1\applic~1" ***


*** Search folders in "C:\DOCUME~1\Guille\applic~1" ***


*** Search folders in "C:\DOCUME~1\RAFAYC~1\applic~1" ***


*** Search folders in "C:\Documents and Settings\Compaq_Administrator\locals~1\applic~1" ***


*** Search folders in "C:\DOCUME~1\ADMINI~1\locals~1\applic~1" ***


*** Search folders in "C:\DOCUME~1\Guille\locals~1\applic~1" ***


*** Search folders in "C:\DOCUME~1\RAFAYC~1\locals~1\applic~1" ***


*** Search folders in "C:\Documents and Settings\Compaq_Administrator\startm~1\programs" ***


*** Search folders in "C:\DOCUME~1\ADMINI~1\startm~1\programs" ***


*** Search folders in "C:\DOCUME~1\Guille\startm~1\programs" ***


*** Search folders in "C:\DOCUME~1\RAFAYC~1\startm~1\programs" ***

*** Search with Catchme-rootkit/stealth malware detector by gmer ***
for more info : http://www.gmer.net

No Navipromo file found


*** Search with GenericNaviSearch ***
!!! Possibility of legitimate files in the result !!!
!!! Must always be checked before manually deleting !!!

* Scan in "C:\WINDOWS\system32" *

* Scan in "C:\Documents and Settings\Compaq_Administrator\locals~1\applic~1" *

* Scan in "C:\DOCUME~1\ADMINI~1\locals~1\applic~1" *

* Scan in "C:\DOCUME~1\Guille\locals~1\applic~1" *

* Scan in "C:\DOCUME~1\RAFAYC~1\locals~1\applic~1" *



*** Search files ***



*** Search specific Registry keys ***


*** Complementary Search ***
(Search specific files)

1)Search new Instant Access files :


2)Heuristic Search :

* In "C:\WINDOWS\system32" :


* In "C:\Documents and Settings\Compaq_Administrator\locals~1\applic~1" :


* In "C:\DOCUME~1\ADMINI~1\locals~1\applic~1" :


* In "C:\DOCUME~1\Guille\locals~1\applic~1" :


* In "C:\DOCUME~1\RAFAYC~1\locals~1\applic~1" :


3)Certificates Search :

Egroup certificate not found !
Electronic-Group certificate not found !
OOO-Favorit certificate not found !
Sunny-Day-Design-Ltd certificate not found !

4)Search known files :

C:\WINDOWS\system32\lmorutwa.ini2 found ! Possible Vundo infection, not cleaned with this tool !


*** Search completed on 30/07/2008 at 11:59:43,43 ***

y aki va el del Panda active Scan 2.0 :
;************************************************* ************************************************** ************************************************** ******************************
ANALYSIS: 2008-07-30 17:28:41
PROTECTIONS: 1
MALWARE: 4
SUSPECTS: 0
;************************************************* ************************************************** ************************************************** ******************************
PROTECTIONS
Description Version Active Updated
;================================================= ================================================== ================================================== ==============================
Norton Internet Security 2006 2006 Yes Yes
;================================================= ================================================== ================================================== ==============================
MALWARE
Id Description Type Active Severity Disinfectable Disinfected Location
;================================================= ================================================== ================================================== ==============================
00139064 Cookie/Atlas DMT TrackingCookie No 0 Yes No C:\Documents and Settings\Compaq_Administrator\Cookies\compaq_admin istrator@atdmt[2].txt
00139535 Application/Processor HackTools No 0 Yes No C:\Program Files\Navilog1\Process.exe
02197130 Trj/Rebooter.J Virus/Trojan No 1 Yes Yes C:\Program Files\Navilog1\Reboot.exe
02887528 Cookie/AdvancedCleaner TrackingCookie No 0 Yes No C:\Documents and Settings\Guille\Cookies\guille@advancedcleaner[2].txt
;================================================= ================================================== ================================================== ==============================
SUSPECTS
Sent Location &
;================================================= ================================================== ================================================== ==============================
;================================================= ================================================== ================================================== ==============================
VULNERABILITIES
Id Severity Description &
;================================================= ================================================== ================================================== ==============================
108742 MEDIUM MS06-006 &
;================================================= ================================================== ================================================== ==============================


se puiede sacar algo en claro??
muxas gracias por las molestias!!!

Si seguís con el problema de las ventanas emergenes volve a pasar el delpguar y el MalwareBytes en modo completo desde modo seguro.

El el log de panda no muestra infecciones, solo 2 falsos positivos y 2 cookies que no tienen peligrosidad alguna.

Hi! ya pasado el DelPsguard, y no a detectado nada. El informe estaba vacio.
el MalwareByte's Antimalware no detecto ningun virus:
Malwarebytes' Anti-Malware 1.21
Database version: 969
Windows 5.1.2600 Service Pack 2

11:29:27 31/07/2008
mbam-log-7-31-2008 (11-29-27).txt

Scan type: Full Scan (C:\|D:\|)
Objects scanned: 166767
Time elapsed: 28 minute(s), 54 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)


la ventana emergente sigue saliendo.e pensado ke igual no es virus lo ke ace ke salga la ventana, sino ke puede ser ke algun programa este mal instalado o algo asi...es posible??
gracias!

Si tenes el Msn plus desactivalo y volve a instalarlo sin el patrocinador.

Descarga Doctor Web CureIT + Manual ejecutalo y elimina lo que este detecte.
Descarga actualiza y ejecuta SUPERAntispyware + Manual pasalo en modo completo.
Manda a cuarentena lo que este detecte.

Descarga Deljob.exe y guardalo en tu escritorio.
* Hace doble clic en Deljob.exe.
* Cuando Deljob.exe haya terminado, se abrirá posteriormente un bloc de notas (logit.txt). Si no es así, por favor localizar este registro a su unidad C.
* Por favor, enviar el contenido del archivo de registro en su siguiente respuesta.

La ventana emergente debería de desaparecer, no es normal, pero no decís que dice la ventana emergente
Veamos si con estas herramientas eliminamos la ventana.

ola!e pasado el Doctor Web CureIT, y elimine lo ke detecto, el reporte a sido:
miditest.htm;C:\Archivos de programa\anvil\html;una modificación de BAT.Mtr.1429;Movido.;
MIDITEST.HT_;C:\Documents and Settings\Guille\Local Settings\Temp\WZS4.tmp;una modificación de BAT.Mtr.1429;Movido.;
KillWind.exe;C:\hp\bin;Tool.ProcessKill;;
DPSG.exe;C:\Program Files\DelPSGuard;Trojan.StartPage.21002;Eliminado. ;
A0000024.dll;C:\System Volume Information\_restore{106CF321-99A3-4E3A-9103-1BD027606A99}\RP1;Program.ProxyOSS;;
A0000025.exe;C:\System Volume Information\_restore{106CF321-99A3-4E3A-9103-1BD027606A99}\RP1;Adware.Relevant;;
A0000026.exe;C:\System Volume Information\_restore{106CF321-99A3-4E3A-9103-1BD027606A99}\RP1;Adware.NewDotNet;;
A0000398.exe;C:\System Volume Information\_restore{106CF321-99A3-4E3A-9103-1BD027606A99}\RP2;Tool.Prockill;;
A0000423.exe;C:\System Volume Information\_restore{106CF321-99A3-4E3A-9103-1BD027606A99}\RP2;Trojan.StartPage.21002;Eliminado .;
A0000441.exe\data001;C:\System Volume Information\_restore{106CF321-99A3-4E3A-9103-1BD027606A99}\RP2\A0000441.exe;Trojan.StartPage.21 002;;
A0000441.exe;C:\System Volume Information\_restore{106CF321-99A3-4E3A-9103-1BD027606A99}\RP2;Archivo comprimido contiene objetos infectados;Movido.;
A0000857.exe;C:\System Volume Information\_restore{106CF321-99A3-4E3A-9103-1BD027606A99}\RP2;Trojan.StartPage.21002;Eliminado .;
sb6adts.htc\Script.0;C:\WINDOWS\pchealth\helpctr\I nstalledSKUs\Professional_32_0c0a\Vendors\CN=Hewle tt-Packard L=Cupertino S=Ca C=US\Scripts\sb6adts;probablemente SCRIPT.Virus;;
sb6adts.htc;C:\WINDOWS\pchealth\helpctr\InstalledS KUs\Professional_32_0c0a\Vendors\CN=Hewlett-Packard L=Cupertino S=Ca C=US\Scripts;Archivo comprimido contiene objetos infectados;Movido.;
sb6adts.htc\Script.0;C:\WINDOWS\pchealth\helpctr\V endors\CN=Hewlett-Packard L=Cupertino S=Ca C=US\Scripts\sb6adts.htc;probablemente SCRIPT.Virus;;
sb6adts.htc;C:\WINDOWS\pchealth\helpctr\Vendors\CN =Hewlett-Packard L=Cupertino S=Ca C=US\Scripts;Archivo comprimido contiene objetos infectados;Movido.;


posteriormente pase el SUPERAntispyware y elimino todo lo k encontro.
por ultimo el Deljob.exe:
--------------------------------------------------------
No LOP job-files found
--------------------------------------------------------
Files in Windows Tasks folder

Norton AntiVirus - Ejecutar an*lisis de todo el sistema - Compaq_Administrator.job
--------------------------------------------------------
Export App Data folders
--------------------------------------------------------
El volumen de la unidad C es PRESARIO
El n£mero de serie del volumen es: 1449-A3F8

Directorio de C:\Documents and Settings\Compaq_Administrator\Application Data

30/07/2008 11:00 <DIR> .
30/07/2008 11:00 <DIR> ..
12/02/2008 17:53 <DIR> ACCURA~1 AccurateRip
26/01/2008 16:20 <DIR> Adobe
15/10/2006 14:47 <DIR> AdobeUM
08/02/2007 19:20 <DIR> Ahead
24/12/2006 13:43 <DIR> ANVILS~1 Anvil Studio
13/11/2007 16:26 <DIR> Autodesk
26/03/2007 18:57 <DIR> BITTOR~1 BitTorrent
15/10/2006 22:54 <DIR> CYBERL~1 CyberLink
07/12/2006 16:39 <DIR> DATALA~1 DataLayer
19/09/2007 13:03 <DIR> DivX
23/01/2008 15:53 <DIR> ESTsoft
08/03/2007 19:20 <DIR> EXPERT~1 eXPert PDF Editor
03/05/2008 16:38 <DIR> FFSJ
03/06/2008 14:37 <DIR> Google
01/08/2008 21:31 <DIR> Hamachi
19/10/2006 19:03 <DIR> Help
16/10/2006 21:06 <DIR> HP
14/10/2006 10:31 <DIR> HPQ
15/11/2005 03:04 <DIR> IDENTI~1 Identities
22/10/2007 15:20 <DIR> INSTAL~1 InstallShield
02/12/2006 16:10 <DIR> LEADER~1 Leadertech
13/10/2006 19:20 <DIR> MACROM~1 Macromedia
24/07/2008 12:26 <DIR> MALWAR~1 Malwarebytes
21/04/2008 21:04 <DIR> MEDIAP~1 Media Player Classic
21/08/2007 16:38 <DIR> MICROS~1 Microsoft
14/10/2006 10:05 <DIR> MICROS~2 Microsoft Web Folders
24/12/2006 12:58 <DIR> MISARC~1 Mis archivos de La Batalla por la Tierra Media
18/06/2008 14:34 <DIR> Mozilla
07/12/2006 16:39 <DIR> Nokia
25/12/2006 12:03 <DIR> NOKIAM~1 Nokia Multimedia Player
03/12/2006 17:53 <DIR> OLYMPUS
03/07/2007 15:34 <DIR> Orbit
07/12/2006 16:37 <DIR> PCSUIT~1 PC Suite
07/10/2007 17:40 <DIR> PPLive
10/12/2006 16:41 <DIR> PPMate
20/06/2008 17:12 <DIR> Real
28/07/2008 14:20 <DIR> SecuROM
25/03/2008 17:50 <DIR> SOLIDD~1 SolidDocuments
02/12/2006 16:11 <DIR> Sonic
13/11/2007 17:19 <DIR> SPORTS~1 Sports Interactive
14/10/2006 14:14 <DIR> Sun
30/07/2008 11:00 <DIR> SUPERA~1.COM SUPERAntiSpyware.com
13/10/2006 20:11 <DIR> Symantec
03/01/2007 19:23 <DIR> Talkback
17/04/2007 09:22 <DIR> Teleca
24/07/2008 20:09 <DIR> THINST~1 Thinstall
22/10/2007 15:22 <DIR> TomTom
01/08/2008 16:42 <DIR> uTorrent
20/04/2008 16:04 <DIR> vlc
14/08/2007 15:04 <DIR> Vso
10/07/2007 11:15 <DIR> WinBatch
0 archivos 0 bytes
53 dirs 116.866.043.904 bytes libres
El volumen de la unidad C es PRESARIO
El n£mero de serie del volumen es: 1449-A3F8

Directorio de C:\Documents and Settings\All Users\Application Data

28/07/2008 10:38 <DIR> .
28/07/2008 10:38 <DIR> ..
14/03/2007 18:59 <DIR> Adobe
12/11/2007 21:58 <DIR> Autodesk
02/01/2006 21:26 <DIR> CYBERL~1 CyberLink
27/05/2008 20:51 <DIR> DVDSHR~1 DVD Shrink
16/06/2008 21:13 <DIR> FLEXnet
14/01/2007 14:19 <DIR> Google
01/08/2008 17:05 <DIR> GOOGLE~1 Google Updater
02/01/2006 21:55 <DIR> HEWLET~1 Hewlett-Packard
02/01/2006 21:24 <DIR> INSTAL~1 InstallShield
20/07/2008 11:42 <DIR> Lavasoft
05/11/2007 00:25 <DIR> MACROV~1 Macrovision
20/07/2008 11:25 <DIR> MALWAR~1 Malwarebytes
19/08/2007 16:14 <DIR> MESSEN~1 Messenger Plus!
10/02/2008 22:44 <DIR> MICROS~1 Microsoft
15/02/2007 22:35 <DIR> NVIEW_~1 nView_Profiles
18/02/2008 00:21 <DIR> PCSUIT~1 PC Suite
12/02/2008 19:28 <DIR> QUICKT~1 QuickTime
25/03/2008 17:38 <DIR> SOLIDD~1 SolidDocuments
02/01/2006 21:20 <DIR> Sonic
06/04/2008 12:25 <DIR> SONYER~1 Sony Ericsson
21/07/2008 07:45 <DIR> SPYBOT~1 Spybot - Search & Destroy
20/07/2008 11:45 <DIR> SUPERA~1.COM SUPERAntiSpyware.com
18/08/2007 13:47 <DIR> Symantec
17/04/2007 09:20 <DIR> Teleca
29/07/2007 21:49 <DIR> TEMP
29/07/2007 21:40 <DIR> TERMIN~1 TERMINAL Studio
22/10/2007 15:22 <DIR> TomTom
19/04/2007 15:36 <DIR> WINDOW~1 Windows Genuine Advantage
27/02/2008 20:03 <DIR> WLINST~1 WLInstaller
28/07/2008 10:38 <DIR> YAHOO!~1 Yahoo! Companion
0 archivos 0 bytes
32 dirs 116.866.039.808 bytes libres
--------------------------------------------------------
All User Accounts
--------------------------------------------------------
Administrator
All Users
Compaq_Administrator
Guille
Rafa y Concha
--------------------------------------------------------
la ventana emergente sigue saliendo cada vez ke arranco el PC.es una ventana cuyo titulo es APPLICATION LAUNCHER y dentro de eya pone :"imposible cargar su configuracion".sale un boton de aceptar, le doy y el ordenador sigue normalmente.
graciaaS!

Busca que actualizacion te falta en Windows updates

ya e exo la actualizacion y la vnetanita sigue saliendo.
thnx!