Foro de InfoSpyware - Foro de Hijackthis - Foro de Virus

El mensaje del antivirus significa que aun sigue encontrando algo, trata de moverlo a la cuarentena o eliminarlo, y bolbe a hacer un examen online. Salu2.

OYE ESTA ESCANEANDO MALWARE NO IMPORTA SI ABORTO EL SCAN?

COMO ERA LO QUE ME FALTABA EN EL PRIMER MENSAJE QUE ME MANDASTE LO PUESE A ESCANEAR.
GRACIAS OTRAVEZ

Deja que termine acordate de eliminar todo lo que encuentre. Saludos.

ok. ahora ya funciona spybots y malware pero OTC no quiere bajar dice que me fue "blockeado por mi seguriad", ahora no es el problema del systema de seguridad. y el symantec me sigue leyendo virus.
ok di me que ahora que hago.
gracias.



oh! aqui te dejo el reporte de malware.



Malwarebytes' Anti-Malware 1.38
Database version: 2297
Windows 5.1.2600 Service Pack 3

7/2/2009 10:01:07 PM
mbam-log-2009-07-02 (22-01-07).txt

Scan type: Full Scan (C:\|)
Objects scanned: 290160
Time elapsed: 1 hour(s), 53 minute(s), 58 second(s)

Memory Processes Infected: 1
Memory Modules Infected: 1
Registry Keys Infected: 5
Registry Values Infected: 12
Registry Data Items Infected: 0
Folders Infected: 1
Files Infected: 10

Memory Processes Infected:
C:\WINDOWS\VistaDrive\VistaDrive.exe (Trojan.Downloader) -> Unloaded process successfully.

Memory Modules Infected:
c:\WINDOWS\system32\msncache.dll (Backdoor.Bot) -> Delete on reboot.

Registry Keys Infected:
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\m sncache (Backdoor.Bot) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\m sncache (Backdoor.Bot) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet004\Services\m sncache (Backdoor.Bot) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\msncache (Backdoor.Bot) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\UAC (Rootkit.Trace) -> Quarantined and deleted successfully.

Registry Values Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Run\vistadrive (Trojan.Downloader) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Curre ntVersion\Policies\Explorer\ForceClassicControlPan el (Hijack.ControlPanelStyle) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\BuildW (Malware.Trace) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\FirstIn stallFlag (Malware.Trace) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\guid (Malware.Trace) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\i (Malware.Trace) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\mms (Malware.Trace) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\mso (Malware.Trace) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\uid (Malware.Trace) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Ulrn (Malware.Trace) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Update (Malware.Trace) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\UpdateN ew (Malware.Trace) -> Quarantined and deleted successfully.

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
C:\Program Files\Manson (Trojan.Agent) -> Quarantined and deleted successfully.

Files Infected:
c:\WINDOWS\system32\msncache.dll (Backdoor.Bot) -> Delete on reboot.
C:\WINDOWS\VistaDrive\VistaDrive.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
c:\_OTM\movedfiles\07022009_184713\WINDOWS\Temp\t4 m0_778209597719.bk.old (Trojan.Downloader) -> Quarantined and deleted successfully.
c:\_OTM\movedfiles\07022009_184713\WINDOWS\Temp\tm p0_19630812804.bk.old (Trojan.Downloader) -> Quarantined and deleted successfully.
c:\_OTM\movedfiles\07022009_184713\WINDOWS\Temp\tx pxr_225193139311.b1k (Backdoor.Bot) -> Quarantined and deleted successfully.
c:\_OTM\movedfiles\07022009_184713\WINDOWS\Temp\tx pxr_515107320010.b1k (Backdoor.Bot) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\SKYNETlog.dat (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\FInstall.sys (Backdoor.Bot) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\wtukd32.exe (Backdoor.Bot) -> Quarantined and deleted successfully.
C:\WINDOWS\sto453189.dat (Trojan.Agent) -> Quarantined and deleted successfully.

Realiza un scan online con Panda Active Scan. Saludos.

pues el antivirus panda me dice que ten go dos virus pero solo los puede limpiar con la version de compra, es necesario pagar. para limpiar mi pc?
gracias.

Aqui esta el reporte de panda.


;************************************************* ************************************************** ************************************************** ******************************
ANALYSIS: 2009-07-04 18:22:03
PROTECTIONS: 1
MALWARE: 2
SUSPECTS: 0
;************************************************* ************************************************** ************************************************** ******************************
PROTECTIONS
Description Version Active Updated
;================================================= ================================================== ================================================== ==============================
Symantec Endpoint Protection 11.0.3001.2198 Yes Yes
;================================================= ================================================== ================================================== ==============================
MALWARE
Id Description Type Active Severity Disinfectable Disinfected Location
;================================================= ================================================== ================================================== ==============================
00139064 Cookie/Atlas DMT TrackingCookie No 0 Yes No C:\Documents and Settings\Customer\Cookies\customer@atdmt[2].txt
01703273 Spyware/Virtumonde Spyware No 1 Yes No C:\Documents and Settings\All Users\Application Data\Symantec\SRTSP\Quarantine\APQ1A.tmp
;================================================= ================================================== ================================================== ==============================
SUSPECTS
Sent Location S
;================================================= ================================================== ================================================== ==============================
;================================================= ================================================== ================================================== ==============================
VULNERABILITIES
Id Severity Description S
;================================================= ================================================== ================================================== ==============================
;================================================= ================================================== ================================================== ==============================

El reporte esta limpio, solo queda si queres es vaciar la cuarentena de tu antivirus. Como esta andando el PC? Saludos.

bueno si el reporte esta limpio. y llevo como 6 horas en mi pc y no etenido problemas, creo yo que este caso ya esta solucionado.

Me alegro de que se halla resuelto tu problema.


PD: si deseas REABRIR ESTE TEMA, presiona y un MODERADOR atenderá tu petición.

Hola:

A pedido del Usuario se reabre el tema:

Salu2.