• Registrarse
  • Iniciar sesión


  • Resultados 1 al 5 de 5

    Virus que no me deja actualizar antivirus

    Resumen del tema: Virus que no me deja actualizar antivirus - Hola! Tengo algo en el ordenador que no me deja actualizar el antivirus Mccaffee y que muestra en todo momento el warning del Microsoft security alerts que dice que el antivirus no esta actualizado o ...

    1. #1
      Usuario Avatar de Irish-Di
      Registrado
      ene 2009
      Ubicación
      Irlanda
      Mensajes
      10

      Virus que no me deja actualizar antivirus

      Hola!

      Tengo algo en el ordenador que no me deja actualizar el antivirus Mccaffee y que muestra en todo momento el warning del Microsoft security alerts que dice que el antivirus no esta actualizado o que no estan bajadas todas las actualizaciones de windows. Cuando trato de bajarme las updates de cualquiera de estos 2 programas me dice que no hay ninguna.

      Dejo aqui el hijackthis report:

      Logfile of Trend Micro HijackThis v2.0.2
      Scan saved at 16:12:23, on 06/04/2009
      Platform: Windows XP SP3 (WinNT 5.01.2600)
      MSIE: Internet Explorer v8.00 (8.00.6001.18702)
      Boot mode: Normal

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\System32\Ati2evxx.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\WINDOWS\system32\HPConfig.exe
      C:\Program Files\HPQ\Notebook Utilities\HPWirelessMgr.exe
      C:\Program Files\Java\jre6\bin\jqs.exe
      C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
      C:\Program Files\Network Associates\VirusScan\Mcshield.exe
      C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\wscntfy.exe
      C:\WINDOWS\Explorer.EXE
      C:\windows\system\hpsysdrv.exe
      C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE
      C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe
      C:\Program Files\Common Files\Network Associates\TalkBack\TBMon.exe
      C:\WINDOWS\system32\umonit.exe
      C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
      C:\Program Files\Java\jre6\bin\jusched.exe
      C:\WINDOWS\system32\ctfmon.exe
      C:\Program Files\IObit\Advanced SystemCare 3\AWC.exe
      C:\Program Files\Skype\Phone\Skype.exe
      C:\Program Files\Skype\Plugin Manager\skypePM.exe
      C:\Program Files\Mozilla Firefox\firefox.exe
      C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.gmail.ie/ig
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
      O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
      O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
      O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
      O2 - BHO: (no name) - {BDF3E430-B101-42AD-A544-FADC6B084872} - (no file)
      O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
      O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
      O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
      O4 - HKLM\..\Run: [ShStatEXE] "C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE" /STANDALONE
      O4 - HKLM\..\Run: [McAfeeUpdaterUI] "C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe" /StartedFromRunKey
      O4 - HKLM\..\Run: [Network Associates Error Reporting Service] "C:\Program Files\Common Files\Network Associates\TalkBack\TBMon.exe"
      O4 - HKLM\..\Run: [UMonit] C:\WINDOWS\system32\umonit.exe
      O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
      O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
      O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
      O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
      O4 - HKCU\..\Run: [Advanced SystemCare 3] "C:\Program Files\IObit\Advanced SystemCare 3\AWC.exe" /startup
      O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
      O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
      O4 - Startup: OneNote 2007 Screen Clipper and Launcher.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
      O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~4\Office12\ONBttnIE.dll
      O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~4\Office12\ONBttnIE.dll
      O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\Office12\REFIEBAR.DLL
      O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
      O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
      O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O14 - IERESET.INF: START_PAGE_URL=http://www.creative.com
      O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab30149.cab
      O16 - DPF: {406B5949-7190-4245-91A9-30A17DE16AD0} (Snapfish Activia) - http://www.snapfish.com/SnapfishActivia.cab
      O16 - DPF: {62475759-9E84-458E-A1AB-5D2C442ADFDE} - http://a1540.g.akamai.net/7/1540/52/20030530/qtinstall.info.apple.com/abarth/us/win/QuickTimeInstaller.exe
      O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1155420074103
      O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab30149.cab
      O16 - DPF: {E6187999-9FEC-46A1-A20F-F4CA977D5643} (ZoneChess Object) - http://messenger.zone.msn.com/binary/Chess.cab30149.cab
      O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
      O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
      O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe
      O23 - Service: HP Configuration Interface Service (HPConfig) - Hewlett-Packard - C:\WINDOWS\system32\HPConfig.exe
      O23 - Service: HPWirelessMgr - Hewlett-Packard Co. - C:\Program Files\HPQ\Notebook Utilities\HPWirelessMgr.exe
      O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
      O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
      O23 - Service: McAfee Framework Service (McAfeeFramework) - Network Associates, Inc. - C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
      O23 - Service: Network Associates McShield (McShield) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\Mcshield.exe
      O23 - Service: Network Associates Task Manager (McTaskManager) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe
      O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe
      O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe

      --
      End of file - 7449 bytes


      Gracias!

    2. #2
      Ex-Colaborador Avatar de GPastor
      Registrado
      mar 2005
      Ubicación
      Perú
      Mensajes
      23.116

      Re: Virus que no me deja actualizar antivirus

      Hola, sigue estos pasos:

      Descarga, actualiza y ejecuta el programa:
      Descarga CCleaner y ejecútalo usando primero su opción de "Limpiador" para borrar cookies, temporales de Internet y todos los archivos que este te muestre como obsoletos, y luego usa su opción de "Registro" para limpiar todo el registro de Windows (haciendo copia de seguridad).


      - Descarga la herramienta ComboFix.exe y guárdala en el escritorio.
      • Desactiva temporalmente el Antivirus y/o Antispyware.
      • Cierra todas las ventanas abiertas.
      • Haz doble clic al archivo ComboFix.exe y sigue las instrucciones.
      • Cuando termine, generará un registro en C:\ComboFix.txt.
        • *Nota* Mientras CF este trabajando no mover el mouse ya que pararía su proceso.
        • *Nota* ComboFix puede reiniciar automáticamente el PC para completar el proceso de eliminación.
      Atención!! No use ComboFix a menos que se le haya indicado específicamente en su mensaje por un integrante de nuestro Staff. Es una herramienta de gran alcance destinada por su creador a ser usada bajo la orientación y supervisión de un experto, no para uso privado. El uso de ComboFix incorrectamente podría generar problemas en su sistema. Por favor, lea las "Negaciones de la Garantía" de ComboFix.
      • Reinicia y pega el reporte de C:\ComboFix.txt en este mismo mensaje.


      Saludos

    3. #3
      Usuario Avatar de Irish-Di
      Registrado
      ene 2009
      Ubicación
      Irlanda
      Mensajes
      10

      Re: Virus que no me deja actualizar antivirus

      Hola,

      ha pasado un mes desde que recibí tu respuesta y solo hoy he podido seguir tus instrucciones. Aqui te pefgo el log del combofix, a ver que me dices, pq no puedo hacer actualizaciones desde hace ya bastante como te decia.

      Un saludo,

      Diana

      ComboFix 09-04-25.A1 - axel 25/04/2009 15:30.1 - NTFSx86
      Microsoft Windows XP Home Edition 5.1.2600.3.1252.44.1033.18.446.199 [GMT 1:00]
      Running from: c:\documents and settings\axel\Desktop\ComboFix.exe
      * Created a new restore point

      WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
      .

      ((((((((((((((((((((((((( Files Created from 2009-05-25 to 2009-4-25 )))))))))))))))))))))))))))))))
      .

      2009-04-15 20:22 . 2009-03-06 14:22 284160 ------w c:\windows\system32\dllcache\pdh.dll
      2009-04-15 20:22 . 2009-02-09 12:10 401408 ------w c:\windows\system32\dllcache\rpcss.dll
      2009-04-15 20:22 . 2009-02-06 10:39 35328 ------w c:\windows\system32\dllcache\sc.exe
      2009-04-15 20:22 . 2009-02-06 11:11 110592 ------w c:\windows\system32\dllcache\services.exe
      2009-04-15 20:22 . 2009-02-09 12:10 473600 ------w c:\windows\system32\dllcache\fastprox.dll
      2009-04-15 20:22 . 2009-02-06 10:10 227840 ------w c:\windows\system32\dllcache\wmiprvse.exe
      2009-04-15 20:22 . 2009-02-09 12:10 453120 ------w c:\windows\system32\dllcache\wmiprvsd.dll
      2009-04-15 20:22 . 2009-02-09 12:10 729088 ------w c:\windows\system32\dllcache\lsasrv.dll
      2009-04-15 20:22 . 2009-02-09 12:10 617472 ------w c:\windows\system32\dllcache\advapi32.dll
      2009-04-15 20:22 . 2009-02-09 12:10 714752 ------w c:\windows\system32\dllcache\ntdll.dll
      2009-04-15 20:19 . 2008-05-03 11:55 2560 ------w c:\windows\system32\xpsp4res.dll
      2009-04-15 20:19 . 2009-03-27 06:58 1203922 ------w c:\windows\system32\dllcache\sysmain.sdb
      2009-04-15 20:19 . 2008-04-21 12:08 215552 ------w c:\windows\system32\dllcache\wordpad.exe
      2009-04-05 12:38 . 2009-04-05 12:38 -------- d-sh--w c:\documents and settings\axel\IECompatCache
      2009-04-03 22:20 . 2009-04-03 22:20 -------- d-----w c:\documents and settings\axel\Application Data\IObit
      2009-04-03 22:20 . 2009-04-03 22:20 -------- d-----w c:\program files\IObit
      2009-04-03 21:50 . 2009-04-03 21:50 -------- d-sh--w c:\documents and settings\axel\PrivacIE
      2009-04-03 21:40 . 2009-04-03 21:40 -------- d-sh--w c:\documents and settings\axel\IETldCache
      2009-04-03 20:47 . 2009-04-03 20:47 -------- d-----w c:\windows\ie8updates
      2009-04-03 20:35 . 2009-04-03 20:42 -------- dc-h--w c:\windows\ie8
      2009-04-03 20:29 . 2009-02-28 04:55 105984 ------w c:\windows\system32\dllcache\iecompat.dll

      .
      (((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
      .
      2009-04-21 20:30 . 2008-10-09 18:08 -------- d-----w c:\documents and settings\axel\Application Data\Skype
      2009-04-21 18:08 . 2009-01-03 15:55 -------- d-----w c:\documents and settings\axel\Application Data\skypePM
      2009-04-16 20:25 . 2009-01-08 18:48 -------- d-----w c:\documents and settings\All Users\Application Data\Microsoft Help
      2009-04-02 21:35 . 2009-03-02 21:50 -------- d-----w c:\program files\Malwarebytes' Anti-Malware
      2009-03-31 19:44 . 2005-07-02 12:02 -------- d-----w c:\program files\Java
      2009-03-26 15:49 . 2009-03-02 21:50 38496 ----a-w c:\windows\system32\drivers\mbamswissarmy.sys
      2009-03-26 15:49 . 2009-03-02 21:50 15504 ----a-w c:\windows\system32\drivers\mbam.sys
      2009-03-21 14:06 . 2009-03-21 14:06 989696 ------w c:\windows\system32\dllcache\kernel32.dll
      2009-03-09 04:19 . 2009-03-05 21:28 410984 ----a-w c:\windows\system32\deploytk.dll
      2009-03-08 13:09 . 2006-11-07 03:27 391536 ----a-w c:\windows\system32\dllcache\iedkcs32.dll
      2009-03-08 13:09 . 2006-10-17 12:04 638816 ----a-w c:\windows\system32\dllcache\iexplore.exe
      2009-03-08 03:41 . 2006-05-19 15:08 5937152 ----a-w c:\windows\system32\dllcache\mshtml.dll
      2009-03-08 03:39 . 2007-05-17 18:27 11063808 ----a-w c:\windows\system32\dllcache\ieframe.dll
      2009-03-08 03:34 . 2006-05-10 05:23 914944 ----a-w c:\windows\system32\dllcache\wininet.dll
      2009-03-08 03:34 . 2005-10-21 12:51 914944 ----a-w c:\windows\system32\wininet.dll
      2009-03-08 03:34 . 2006-05-10 05:23 1206784 ----a-w c:\windows\system32\dllcache\urlmon.dll
      2009-03-08 03:34 . 2006-11-07 21:03 236544 ----a-w c:\windows\system32\dllcache\webcheck.dll
      2009-03-08 03:34 . 2006-10-17 12:05 43008 ----a-w c:\windows\system32\dllcache\licmgr10.dll
      2009-03-08 03:34 . 2002-08-29 02:00 43008 ----a-w c:\windows\system32\licmgr10.dll
      2009-03-08 03:34 . 2006-10-17 12:05 105984 ----a-w c:\windows\system32\dllcache\url.dll
      2009-03-08 03:34 . 2006-10-17 12:04 109568 ----a-w c:\windows\system32\dllcache\occache.dll
      2009-03-08 03:34 . 2006-05-10 05:23 193536 ----a-w c:\windows\system32\dllcache\msrating.dll
      2009-03-08 03:33 . 2006-09-18 14:15 759296 ----a-w c:\windows\system32\dllcache\VGX.dll
      2009-03-08 03:33 . 2009-03-08 03:33 18944 ------w c:\windows\system32\dllcache\corpol.dll
      2009-03-08 03:33 . 2002-08-29 02:00 18944 ----a-w c:\windows\system32\corpol.dll
      2009-03-08 03:33 . 2006-05-10 05:22 25600 ----a-w c:\windows\system32\dllcache\jsproxy.dll
      2009-03-08 03:33 . 2008-05-09 10:53 726528 ----a-w c:\windows\system32\dllcache\jscript.dll
      2009-03-08 03:33 . 2006-11-07 03:27 229376 ----a-w c:\windows\system32\dllcache\ieaksie.dll
      2009-03-08 03:33 . 2008-05-09 10:53 420352 ----a-w c:\windows\system32\dllcache\vbscript.dll
      2009-03-08 03:33 . 2002-08-29 02:00 420352 ----a-w c:\windows\system32\vbscript.dll
      2009-03-08 03:33 . 2006-11-07 03:26 125952 ----a-w c:\windows\system32\dllcache\ieakeng.dll
      2009-03-08 03:32 . 2006-11-07 03:26 72704 ----a-w c:\windows\system32\dllcache\admparse.dll
      2009-03-08 03:32 . 2002-08-29 02:00 72704 ----a-w c:\windows\system32\admparse.dll
      2009-03-08 03:32 . 2006-11-07 03:26 173056 ----a-w c:\windows\system32\dllcache\ie4uinit.exe
      2009-03-08 03:32 . 2006-11-07 03:25 163840 ----a-w c:\windows\system32\dllcache\ieakui.dll
      2009-03-08 03:32 . 2006-11-07 03:26 71680 ----a-w c:\windows\system32\dllcache\iesetup.dll
      2009-03-08 03:32 . 2006-11-07 03:26 55808 ----a-w c:\windows\system32\dllcache\iernonce.dll
      2009-03-08 03:32 . 2002-08-29 02:00 71680 ----a-w c:\windows\system32\iesetup.dll
      2009-03-08 03:32 . 2006-11-07 03:26 128512 ----a-w c:\windows\system32\dllcache\advpack.dll
      2009-03-08 03:32 . 2006-05-10 05:22 94720 ----a-w c:\windows\system32\dllcache\inseng.dll
      2009-03-08 03:32 . 2007-05-17 18:27 594432 ----a-w c:\windows\system32\dllcache\msfeeds.dll
      2009-03-08 03:32 . 2007-05-17 18:27 1985024 ----a-w c:\windows\system32\dllcache\iertutil.dll
      2009-03-08 03:32 . 2006-05-10 05:23 611840 ----a-w c:\windows\system32\dllcache\mstime.dll
      2009-03-08 03:24 . 2006-10-17 11:44 68608 ----a-w c:\windows\system32\dllcache\hmmapi.dll
      2009-03-08 03:22 . 2006-11-07 21:03 156160 ----a-w c:\windows\system32\dllcache\msls31.dll
      2009-03-08 03:22 . 2002-08-29 02:00 156160 ----a-w c:\windows\system32\msls31.dll
      2009-03-08 03:11 . 2007-05-17 18:27 445952 ----a-w c:\windows\system32\dllcache\ieapfltr.dll
      2009-03-07 00:04 . 2005-01-22 21:31 1183 ----a-w C:\sti.log
      2009-03-06 14:22 . 2002-08-29 02:00 284160 ----a-w c:\windows\system32\pdh.dll
      2009-03-05 21:14 . 2007-08-30 09:42 -------- d-----w c:\program files\Disk Cleaner
      2009-03-05 21:13 . 2009-03-05 21:13 -------- d-----w c:\program files\CCleaner
      2009-03-02 21:50 . 2009-03-02 21:50 -------- d-----w c:\documents and settings\axel\Application Data\Malwarebytes
      2009-03-02 21:50 . 2009-03-02 21:50 -------- d-----w c:\documents and settings\All Users\Application Data\Malwarebytes
      2009-03-02 21:34 . 2004-10-13 19:36 -------- d-----w c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy
      2009-03-01 23:03 . 2004-12-12 20:29 -------- d-----r c:\program files\Skype
      2009-03-01 23:03 . 2009-03-01 23:03 -------- d-----w c:\program files\Common Files\Skype
      2009-02-25 22:45 . 2008-09-27 19:00 -------- d-----w c:\program files\Microsoft Silverlight
      2009-02-09 12:10 . 2002-08-29 02:00 729088 ----a-w c:\windows\system32\lsasrv.dll
      2009-02-09 12:10 . 2005-07-26 04:31 401408 ----a-w c:\windows\system32\rpcss.dll
      2009-02-09 12:10 . 2002-08-29 02:00 714752 ----a-w c:\windows\system32\ntdll.dll
      2009-02-09 12:10 . 2002-08-29 02:00 617472 ----a-w c:\windows\system32\advapi32.dll
      2009-02-09 11:13 . 2008-10-14 17:09 1846784 ------w c:\windows\system32\dllcache\win32k.sys
      2009-02-09 11:13 . 2002-08-29 02:00 1846784 ----a-w c:\windows\system32\win32k.sys
      2009-02-07 18:02 . 2008-10-14 17:07 2066048 ------w c:\windows\system32\dllcache\ntkrnlpa.exe
      2009-02-07 18:02 . 2002-08-29 02:00 2066048 ----a-w c:\windows\system32\ntkrnlpa.exe
      2009-02-06 20:07 . 2007-05-17 18:27 3698584 ----a-w c:\windows\system32\dllcache\ieapfltr.dat
      2009-02-06 11:11 . 2002-08-29 02:00 110592 ----a-w c:\windows\system32\services.exe
      2009-02-06 11:08 . 2008-10-14 17:08 2189056 ------w c:\windows\system32\dllcache\ntoskrnl.exe
      2009-02-06 11:08 . 2002-08-29 02:00 2189056 ----a-w c:\windows\system32\ntoskrnl.exe
      2009-02-06 11:06 . 2008-10-14 17:08 2145280 ------w c:\windows\system32\dllcache\ntkrnlmp.exe
      2009-02-06 10:39 . 2002-08-29 02:00 35328 ----a-w c:\windows\system32\sc.exe
      2009-02-06 10:32 . 2008-10-14 17:08 2023936 ------w c:\windows\system32\dllcache\ntkrpamp.exe
      2009-02-03 19:59 . 2009-02-03 19:59 56832 ------w c:\windows\system32\dllcache\secur32.dll
      2009-02-03 19:59 . 2002-08-29 02:00 56832 ----a-w c:\windows\system32\secur32.dll
      2009-01-18 18:52 . 2003-09-26 10:45 93848 ----a-w c:\documents and settings\axel\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
      2008-11-13 20:21 . 2004-05-21 14:11 76264 ----a-w c:\documents and settings\axel\Application Data\GDIPFONTCACHEV1.DAT
      2006-05-27 11:24 . 2006-05-27 11:24 72376 ----a-w c:\documents and settings\Guest\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
      2004-11-03 07:43 . 2004-08-26 09:08 284 ----a-w c:\documents and settings\axel\Application Data\ViewerApp.dat
      2008-10-06 09:08 . 2008-10-06 09:09 32768 --sha-w c:\windows\system32\config\systemprofile\Local Settings\History\History.IE5\MSHist012008100620081007\index.dat
      .

      ((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
      .
      .
      *Note* empty entries & legit default entries are not shown
      REGEDIT4

      [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
      "ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360]

      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
      "hpsysdrv"="c:\windows\system\hpsysdrv.exe" [2001-07-19 52736]
      "ShStatEXE"="c:\program files\Network Associates\VirusScan\SHSTAT.EXE" [2004-09-22 94208]
      "McAfeeUpdaterUI"="c:\program files\Network Associates\Common Framework\UpdaterUI.exe" [2004-08-06 139320]
      "Network Associates Error Reporting Service"="c:\program files\Common Files\Network Associates\TalkBack\TBMon.exe" [2003-10-07 147514]
      "UMonit"="c:\windows\system32\umonit.exe" [2005-08-06 53248]
      "Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-01-11 39792]
      "GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2007-08-24 33648]
      "SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-03-09 148888]

      [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
      "CTFMON.EXE"="c:\windows\System32\CTFMON.EXE" [2008-04-14 15360]

      c:\documents and settings\axel\Start Menu\Programs\Startup\
      OneNote 2007 Screen Clipper and Launcher.lnk - c:\program files\Microsoft Office\Office12\ONENOTEM.EXE [2007-12-7 101440]

      HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32
      "wave1"= serwvdrv.dll

      [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Exif Launcher.lnk]
      path=c:\documents and settings\All Users\Start Menu\Programs\Startup\Exif Launcher.lnk
      backup=c:\windows\pss\Exif Launcher.lnkCommon Startup

      [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^hp psc 2000 Series.lnk]
      path=c:\documents and settings\All Users\Start Menu\Programs\Startup\hp psc 2000 Series.lnk
      backup=c:\windows\pss\hp psc 2000 Series.lnkCommon Startup

      [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^officejet 6100.lnk]
      path=c:\documents and settings\All Users\Start Menu\Programs\Startup\officejet 6100.lnk
      backup=c:\windows\pss\officejet 6100.lnkCommon Startup

      [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^WinZip Quick Pick.lnk]
      path=c:\documents and settings\All Users\Start Menu\Programs\Startup\WinZip Quick Pick.lnk
      backup=c:\windows\pss\WinZip Quick Pick.lnkCommon Startup

      [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
      "%windir%\\system32\\sessmgr.exe"=
      "c:\\Program Files\\Messenger\\msmsgs.exe"=
      "%windir%\\Network Diagnostic\\xpnetdiag.exe"=
      "c:\\Program Files\\MSN Messenger\\msnmsgr.exe"=
      "c:\\Program Files\\MSN Messenger\\livecall.exe"=
      "c:\\Program Files\\iTunes\\iTunes.exe"=
      "c:\\Program Files\\LimeWire\\LimeWire.exe"=
      "c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
      "c:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=
      "c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
      "c:\\Program Files\\Skype\\Phone\\Skype.exe"=

      R3 fixustor;fixustor;c:\windows\system32\drivers\fixustor.sys [2005-08-06 6656]
      R3 LEX_NIC_SERVICE;IEEE 802.11 Wireless NIC Win2000 Driver;c:\windows\system32\DRIVERS\Express.sys [2002-10-17 57344]
      R3 P0630VID;Creative WebCam Live!;c:\windows\system32\DRIVERS\P0630Vid.sys [2004-04-14 91797]
      S1 NaiAvTdi1;NaiAvTdi1;c:\windows\system32\drivers\mvstdi5x.sys [2004-09-22 58048]
      S3 CALIAUD;Conexant AMC 3D ENVIRONMENTAL AUDIO;c:\windows\system32\drivers\caliaud.sys [2002-11-05 291328]
      S3 CALIHALA;CALIHALA;c:\windows\system32\drivers\calihal.sys [2002-11-05 244608]
      S3 DP83815;National Semiconductor Corp. DP83815/816 NDIS 5.0 Miniport Driver;c:\windows\system32\DRIVERS\DP83815.SYS [2002-08-29 16512]


      --- Other Services/Drivers In Memory ---

      *NewlyCreated* - ENTDRV51

      [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{366259a0-7b8c-11dd-83de-00e0eb516711}]
      \Shell\AutoRun\command - E:\PMB_P.exe

      [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{60B49E34-C7CC-11D0-8953-00A0C90347FF}]
      "c:\windows\system32\rundll32.exe" "c:\windows\system32\iedkcs32.dll",BrandIEActiveSetup SIGNUP
      .
      Contents of the 'Scheduled Tasks' folder

      2004-05-22 c:\windows\Tasks\FRU Task 2002-06-27 08:46ewlett-Packard2002-06-27 08:46p psc 2100 seriesF56855811176EC24C9B302F94878AD886AF77CFF059320132.job
      - c:\program files\Hewlett-Packard\Digital Imaging\Bin\hpqfrucl.exe [2002-06-27 00:46]
      .
      .
      ------- Supplementary Scan -------
      .
      uStart Page = hxxp://www.gmail.ie/ig
      uInternet Settings,ProxyOverride = <local>
      DPF: DirectAnimation Java Classes - file://c:\windows\Java\classes\dajava.cab
      DPF: Microsoft XML Parser for Java - file://c:\windows\Java\classes\xmldso.cab
      FF - ProfilePath - c:\documents and settings\axel\Application Data\Mozilla\Firefox\Profiles\aom97se9.default\
      FF - prefs.js: browser.startup.homepage - www.gmail.ie/ig
      .

      **************************************************************************

      catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
      Rootkit scan 2009-04-25 15:38
      Windows 5.1.2600 Service Pack 3 NTFS

      scanning hidden processes ...

      scanning hidden autostart entries ...

      HKLM\Software\Microsoft\Windows\CurrentVersion\Run
      UMonit = c:\windows\system32\umonit.exe?ixustor.sys??Pid_a0c0??????%?I_01??US8???OT?H??????????????????????????A~??????????????D?l??????|p??|????m??|??D~??????????%?B$?|??B~??B~*?,???%???????????????????????????????B~??????????????D?????T???~?D???????D???D????????

      scanning hidden files ...

      scan completed successfully
      hidden files: 0

      **************************************************************************
      .
      --------------------- DLLs Loaded Under Running Processes ---------------------

      - - - - - - - > 'lsass.exe'(688)
      c:\windows\system32\EntApi.dll

      - - - - - - - > 'explorer.exe'(2504)
      c:\windows\system32\EntApi.dll
      c:\windows\system32\ieframe.dll
      c:\windows\system32\webcheck.dll
      c:\windows\system32\OneX.DLL
      c:\windows\system32\eappprxy.dll
      c:\windows\system32\WPDShServiceObj.dll
      c:\windows\system32\PortableDeviceTypes.dll
      c:\windows\system32\PortableDeviceApi.dll
      .
      Completion time: 2009-04-25 15:43
      ComboFix-quarantined-files.txt 2009-04-25 14:43

      Pre-Run: 11,350,032,384 bytes free
      Post-Run: 13,093,228,544 bytes free

      216 --- E O F --- 2009-04-16 20:39

    4. #4
      Ex-Colaborador Avatar de GPastor
      Registrado
      mar 2005
      Ubicación
      Perú
      Mensajes
      23.116

      Re: Virus que no me deja actualizar antivirus

      Hola, ante todo mil disculpas por la demora, estuve bastante ocupado estos días.

      El reporte está limpio, por lo que dificilmente el problema sea causado por alguna infección, verifica si otros programas pueden ser actualizados, como el MBAM que te recomendé utilizar.

      Saludos

    5. #5
      Usuario Avatar de Irish-Di
      Registrado
      ene 2009
      Ubicación
      Irlanda
      Mensajes
      10

      Re: Virus que no me deja actualizar antivirus

      Vale tratare de actualizarlo,


      gracias