Foro de InfoSpyware - Foro de Hijackthis - Foro de Virus

Hice lo que me dijiste pero la pc sigue con el problema ademas lo que me dijiste que eliminara es un programa que yo uso igual lo elimine pero la pc tenia el prabloma antes de que yo pusiera ese programa.

Vaya el enemigo se sigue mostrando activo pero se esconde como las ratas

La verdad que no encuentro mucha información sobre la infección que aparecía.


.

Vamos a repetir cosillas, pero vamos a comprobar si ha cambiado algo la situación.


1. Primer paso

· Descarga y/ o actualiza estos programas, pero no los ejecutes aun.

. Flash_Disinfector
(Al final de la pagina)
· Malwarebytes.
. Dr. Web Cure-IT

2. Segundo paso

· Apaga restaurar sistema
· Inicia en Modo Seguro.

3. Tercer paso

Ejecuta.


. Flash_Disinfector
. Con los dispositivos USB desconectados ejecuta Flash_Disinfector, luego
conecta tu dispositivo USB (Pen Drive, Móvil, MP3/4), y ejecuta Flash_Disinfector nuevamente.

. Dr.CureIt
. Cuando te descargues esta aplicación ya está actualizada. Así que cuando la inicies no actualices. Dale a iniciar y aceptar; realizará un escaneo rápido. Cuando finalice limpia y cura lo que haya encontrado.


· Malwarebytes.
· En su opción de examen completo, y dándole al finalizar "Quitar todo lo encontrado"



4. Cuarto paso

· Reinicias tu ordenador en Modo Normal.
· Activa la opción Restaurar Sistema.




Cuando termines pega los reportes que te genere Malwarebytes y DRWeb en este post.


El reporte de DrWeb estará en una nueva carpeta llamada WebDoctor en Mis Documentos. Si es muy largo sólo copia la estadística final referida a la limpieza.


Vamos a ver si esos programas le dan caza al enemigo .

Pd: Tu antivirus es original?, o es piratilla

Hola la verdad soy muy nuevo en esto, lo que sucede es que mi internet se me cae a acada rato, no se que hacer, cuando enciendo mi pc este funciona normal, pero al cabo de unas horas este se me cae, tambien se me va el sonido, me toca en ejecutar escribir "services.msc"; buscar el audio de windows y darle inicio pues este esta detenido aunque dice automatico, despues de eso el internet se me cae.
ya lo formatie varias veces, le puse vista-windows7- y ahora de nuevo xp sp2- le monto todos sus controladores, pero de igual manera se me va el sonido, no se que hacer, el internet tambien se me cae; ya he escaneado con mi antivirus es avira, me encuentra una serie de virus o algo parecido, y me da la opcion de reparar, lo he escaneado con el nod 32 y este no me muestra ningun virus pero de igual manera se me sigue cayendo el internet, le tengo un adware 2009, le ejecuto el cleaner limpìo los registros y de igual manera se me sigue cayendo el internet y el sonido, mande a revisar la board y tampoco es problema de board;
en ejecutar le di NETSTAT -B y aparece esto:

TCP colossus:1326 190.110.196.97:microsoft-ds SYN_SENT 180
8
[mslsrv32.exe]

TCP colossus:1327 pc-148-213-162-190.cm.vtr.net:microsoft-ds SYN_
SENT 1808
[mslsrv32.exe]

TCP colossus:1328 Dynamic-IP-19084123200.cable.net.co:microsoft-ds
SYN_SENT 1808
[mslsrv32.exe]

TCP colossus:1329 190.114.131.63:microsoft-ds SYN_SENT 180
8
[mslsrv32.exe]

TCP colossus:1330 host251.190-136-12.telecom.net.ar:microsoft-ds
SYN_SENT 1808
[mslsrv32.exe]

TCP colossus:1331 190.140.203.88:microsoft-ds SYN_SENT 180
8
[mslsrv32.exe]

TCP colossus:1332 139-92-192-190.cab.prima.net.ar:microsoft-ds SY
N_SENT 1808
[mslsrv32.exe]

TCP colossus:1333 242.20.166.190.f.sta.codetel.net.do:microsoft-ds
SYN_SENT 1808
[mslsrv32.exe]

TCP colossus:1334 Dynamic-IP-19084122190.cable.net.co:microsoft-ds
SYN_SENT 1808
[mslsrv32.exe]

TCP colossus:1335 190.144.138.54:microsoft-ds SYN_SENT 180
8
[mslsrv32.exe]

TCP colossus:1336 190.170.211.206:microsoft-ds SYN_SENT 18
08
[mslsrv32.exe]

TCP colossus:1337 Dynamic-IP-1908468208.cable.net.co:microsoft-ds
SYN_SENT 1808
[mslsrv32.exe]

TCP colossus:1338 Static-IP-cr19084234164.cable.net.co:microsoft-d
s SYN_SENT 1808
[mslsrv32.exe]

TCP colossus:1339 Static-IP-cr190842558.cable.net.co:microsoft-ds
SYN_SENT 1808
[mslsrv32.exe]

TCP colossus:1340 Dynamic-IP-1908427141.cable.net.co:microsoft-ds
SYN_SENT 1808
[mslsrv32.exe]

TCP colossus:1341 Dynamic-IP-1908454148.cable.net.co:microsoft-ds
SYN_SENT 1808
[mslsrv32.exe]

TCP colossus:1342 Dynamic-IP-1908427141.cable.net.co:microsoft-ds
SYN_SENT 1808
[mslsrv32.exe]

TCP colossus:1343 Dynamic-IP-1908448241.cable.net.co:microsoft-ds
SYN_SENT 1808
[mslsrv32.exe]

TCP colossus:1344 Dynamic-IP-190848224.cable.net.co:microsoft-ds
SYN_SENT 1808
[mslsrv32.exe]

TCP colossus:1345 Dynamic-IP-1908455145.cable.net.co:microsoft-ds
SYN_SENT 1808
[mslsrv32.exe]

TCP colossus:1346 Dynamic-IP-1908455145.cable.net.co:microsoft-ds
SYN_SENT 1808
[mslsrv32.exe]

TCP colossus:1347 Dynamic-IP-1908442205.cable.net.co:microsoft-ds
SYN_SENT 1808
[mslsrv32.exe]

TCP colossus:1348 Dynamic-IP-190843897.cable.net.co:microsoft-ds
SYN_SENT 1808
[mslsrv32.exe]

TCP colossus:1349 Dynamic-IP-19084110156.cable.net.co:microsoft-ds
SYN_SENT 1808
[mslsrv32.exe]

TCP colossus:1350 Dynamic-IP-19084199220.cable.net.co:microsoft-ds
SYN_SENT 1808
[mslsrv32.exe]

TCP colossus:1351 Dynamic-IP-190841310.cable.net.co:microsoft-ds
SYN_SENT 1808
[mslsrv32.exe]

TCP colossus:3270 localhost:3271 ESTABLISHED 1304
[Azureus.exe]

TCP colossus:3271 localhost:3270 ESTABLISHED 1304
[Azureus.exe]

TCP colossus:3272 localhost:3273 ESTABLISHED 1304
[Azureus.exe]

TCP colossus:3273 localhost:3272 ESTABLISHED 1304
[Azureus.exe]

TCP colossus:3274 localhost:3275 ESTABLISHED 1304
[Azureus.exe]

TCP colossus:3275 localhost:3274 ESTABLISHED 1304
[Azureus.exe]

TCP colossus:3543 localhost:3544 ESTABLISHED 1304
[Azureus.exe]

TCP colossus:3544 localhost:3543 ESTABLISHED 1304
[Azureus.exe]

TCP colossus:3545 localhost:3546 ESTABLISHED 1304
[Azureus.exe]

TCP colossus:3546 localhost:3545 ESTABLISHED 1304
[Azureus.exe]

TCP colossus:1028 218.10.17.212:8585 ESTABLISHED 1808
[mslsrv32.exe]

TCP colossus:1531 75.Red-83-41-209.dynamicIP.rima-tde.net:53723 E
STABLISHED 1304
[Azureus.exe]

TCP colossus:1544 Dynamic-IP-190842122.cable.net.co:microsoft-ds
ESTABLISHED 1808
[mslsrv32.exe]

TCP colossus:1840 yw-in-f157.google.com:http ESTABLISHED 4036

[iexplore.exe]

TCP colossus:1947 88.Red-79-149-250.staticIP.rima-tde.net:1423 ES
TABLISHED 1304
[Azureus.exe]

TCP colossus:1954 77-239-223-201.adsl.terra.cl:61210 ESTABLISHED
1304
[Azureus.exe]

TCP colossus:1963 Dynamic-IP-190842216.cable.net.co:microsoft-ds
ESTABLISHED 1808
[mslsrv32.exe]

TCP colossus:2223 85.136.235.107.dyn.user.ono.com:40595 ESTABLISH
ED 1304
[Azureus.exe]

TCP colossus:2594 Dynamic-IP-190842122.cable.net.co:microsoft-ds
ESTABLISHED 1808
[mslsrv32.exe]

TCP colossus:2882 host86-160-65-131.range86-160.btcentralplus.com:
23238 ESTABLISHED 1952
[Skype.exe]

TCP colossus:2916 144.Red-83-46-59.dynamicIP.rima-tde.net:5000 ES
TABLISHED 1304
[Azureus.exe]

TCP colossus:3093 yi-in-f101.google.com:http ESTABLISHED 4036

[iexplore.exe]

TCP colossus:3694 Dynamic-IP-190842237.cable.net.co:microsoft-ds
ESTABLISHED 1808
[mslsrv32.exe]

TCP colossus:3768 84.123.185.253.dyn.user.ono.com:60281 ESTABLISH
ED 1304
[Azureus.exe]

TCP colossus:4057 133-133-246-190.fibertel.com.ar:24155 ESTABLISH
ED 1304
[Azureus.exe]

TCP colossus:4142 175.83-213-45.dynamic.clientes.euskaltel.es:4710
1 ESTABLISHED 1304
[Azureus.exe]

TCP colossus:4195 Dynamic-IP-190843122.cable.net.co:microsoft-ds
ESTABLISHED 1808
[mslsrv32.exe]

TCP colossus:4214 yi-in-f101.google.com:http ESTABLISHED 4036

[iexplore.exe]

TCP colossus:4346 160.71.221.87.dynamic.jazztel.es:20025 ESTABLIS
HED 1304
[Azureus.exe]

TCP colossus:4545 187.Red-88-15-2.dynamicIP.rima-tde.net:60000 ES
TABLISHED 1304
[Azureus.exe]

TCP colossus:4589 Dynamic-IP-190840215.cable.net.co:microsoft-ds
ESTABLISHED 1808
[mslsrv32.exe]

TCP colossus:4639 Dynamic-IP-19084388.cable.net.co:microsoft-ds E
STABLISHED 1808
[mslsrv32.exe]

TCP colossus:4996 67.185.223.87.dynamic.jazztel.es:15187 ESTABLIS
HED 1304
[Azureus.exe]

TCP colossus:25776 static-25-7-231-77.ipcom.comunitel.net:1047 EST
ABLISHED 1304
[Azureus.exe]

TCP colossus:25776 77.241.48.195:56766 ESTABLISHED 1304
[Azureus.exe]

TCP colossus:25776 79.108.55.145.dyn.user.ono.com:3346 ESTABLISHED
1304
[Azureus.exe]

TCP colossus:25776 221.Red-79-147-141.dynamicIP.rima-tde.net:1435
ESTABLISHED 1304
[Azureus.exe]

TCP colossus:25776 100.Red-79-148-88.dynamicIP.rima-tde.net:17337
ESTABLISHED 1304
[Azureus.exe]

TCP colossus:25776 121.Red-79-153-79.dynamicIP.rima-tde.net:51911
ESTABLISHED 1304
[Azureus.exe]

TCP colossus:25776 81.203.35.222.dyn.user.ono.com:1189 ESTABLISHED
1304
[Azureus.exe]

TCP colossus:25776 209.Red-83-39-202.dynamicIP.rima-tde.net:3541 E
STABLISHED 1304
[Azureus.exe]

TCP colossus:25776 197.85-85-83.dynamic.clientes.euskaltel.es:54038
ESTABLISHED 1304
[Azureus.exe]

TCP colossus:25776 211.101.217.87.dynamic.jazztel.es:1192 ESTABLIS
HED 1304
[Azureus.exe]

TCP colossus:25776 20.Red-88-5-184.dynamicIP.rima-tde.net:25392 ES
TABLISHED 1304
[Azureus.exe]

TCP colossus:25776 111.Red-88-5-68.dynamicIP.rima-tde.net:3351 EST
ABLISHED 1304
[Azureus.exe]

TCP colossus:25776 62.Red-88-26-158.staticIP.rima-tde.net:51477 ES
TABLISHED 1304
[Azureus.exe]

TCP colossus:25776 90.162.100.242:49373 ESTABLISHED 1304
[Azureus.exe]

TCP colossus:25776 187.168.116.91.dynamic.mundo-r.com:37443 ESTABL
ISHED 1304
[Azureus.exe]

TCP colossus:25776 99.37.16.95.dynamic.jazztel.es:1121 ESTABLISHED
1304
[Azureus.exe]

TCP colossus:25776 dsl-187-153-235-68-dyn.prod-infinitum.com.mx:589
42 ESTABLISHED 1304
[Azureus.exe]

TCP colossus:25776 190.6.141.162:1048 ESTABLISHED 1304
[Azureus.exe]

TCP colossus:4156 yx-in-f105.google.com:http CLOSE_WAIT 1984

[GoogleToolbarNotifier.exe]


C:\Documents and Settings\Administrador>


este es el reporte de el avira hasta la fecha de hoy:



Avira AntiVir Personal
Report file date: Domingo, 16 de Agosto de 2009 09:32

Scanning for 1639416 virus strains and unwanted programs.

Licensee : Avira AntiVir Personal - FREE Antivirus
Serial number : 0000149996-ADJIE-0000001
Platform : Windows XP
Windows version : (Service Pack 2) [5.1.2600]
Boot mode : Normally booted
Username : SYSTEM
Computer name : COLOSSUS

Version information:
BUILD.DAT : 9.0.0.407 17961 Bytes 29/07/2009 10:34:00
AVSCAN.EXE : 9.0.3.7 466689 Bytes 16/08/2009 14:26:58
AVSCAN.DLL : 9.0.3.0 40705 Bytes 27/02/2009 13:58:24
LUKE.DLL : 9.0.3.2 209665 Bytes 20/02/2009 14:35:49
LUKERES.DLL : 9.0.2.0 12033 Bytes 27/02/2009 13:58:52
ANTIVIR0.VDF : 7.1.0.0 15603712 Bytes 27/10/2008 15:30:36
ANTIVIR1.VDF : 7.1.4.132 5707264 Bytes 24/06/2009 14:26:57
ANTIVIR2.VDF : 7.1.5.88 2668032 Bytes 10/08/2009 14:26:57
ANTIVIR3.VDF : 7.1.5.117 290304 Bytes 14/08/2009 14:26:57
Engineversion : 8.2.1.1
AEVDF.DLL : 8.1.1.1 106868 Bytes 16/08/2009 14:26:58
AESCRIPT.DLL : 8.1.2.25 459130 Bytes 16/08/2009 14:26:58
AESCN.DLL : 8.1.2.4 127348 Bytes 16/08/2009 14:26:58
AERDL.DLL : 8.1.2.4 430452 Bytes 16/08/2009 14:26:58
AEPACK.DLL : 8.1.3.18 401783 Bytes 16/08/2009 14:26:57
AEOFFICE.DLL : 8.1.0.38 196987 Bytes 16/08/2009 14:26:57
AEHEUR.DLL : 8.1.0.154 1917302 Bytes 16/08/2009 14:26:57
AEHELP.DLL : 8.1.5.3 233846 Bytes 16/08/2009 14:26:57
AEGEN.DLL : 8.1.1.56 356725 Bytes 16/08/2009 14:26:57
AEEMU.DLL : 8.1.0.9 393588 Bytes 09/10/2008 17:32:40
AECORE.DLL : 8.1.7.6 184694 Bytes 16/08/2009 14:26:57
AEBB.DLL : 8.1.0.3 53618 Bytes 09/10/2008 17:32:40
AVWINLL.DLL : 9.0.0.3 18177 Bytes 12/12/2008 11:47:59
AVPREF.DLL : 9.0.0.1 43777 Bytes 05/12/2008 13:32:15
AVREP.DLL : 8.0.0.3 155905 Bytes 20/01/2009 17:34:28
AVREG.DLL : 9.0.0.0 36609 Bytes 05/12/2008 13:32:09
AVARKT.DLL : 9.0.0.3 292609 Bytes 16/08/2009 14:26:58
AVEVTLOG.DLL : 9.0.0.7 167169 Bytes 30/01/2009 13:37:08
SQLITE3.DLL : 3.6.1.0 326401 Bytes 28/01/2009 18:03:49
SMTPLIB.DLL : 9.2.0.25 28417 Bytes 02/02/2009 11:21:33
NETNT.DLL : 9.0.0.0 11521 Bytes 05/12/2008 13:32:10
RCIMAGE.DLL : 9.0.0.25 2438913 Bytes 16/08/2009 14:26:57
RCTEXT.DLL : 9.0.37.0 86785 Bytes 16/08/2009 14:26:57

Configuration settings for the scan:
Jobname.............................: Complete system scan
Configuration file..................: c:\archivos de programa\avira\antivir desktop\sysscan.avp
Logging.............................: low
Primary action......................: interactive
Secondary action....................: ignore
Scan master boot sector.............: on
Scan boot sector....................: on
Boot sectors........................: C:, D:, E:,
Process scan........................: on
Scan registry.......................: on
Search for rootkits.................: on
Integrity checking of system files..: off
Scan all files......................: All files
Scan archives.......................: on
Recursion depth.....................: 20
Smart extensions....................: on
Macro heuristic.....................: on
File heuristic......................: medium
Deviating risk categories...........: +APPL,+GAME,+JOKE,+PCK,+SPR,

Start of the scan: Domingo, 16 de Agosto de 2009 09:32

Starting search for hidden objects.
'25898' objects were checked, '0' hidden objects were found.

The scan of running processes will be started
Scan process 'r1puninst.exe' - '1' Module(s) have been scanned
Scan process 'avscan.exe' - '1' Module(s) have been scanned
Scan process 'rundll32.exe' - '1' Module(s) have been scanned
Scan process 'realsched.exe' - '1' Module(s) have been scanned
Scan process 'avguard.exe' - '1' Module(s) have been scanned
Scan process 'sched.exe' - '1' Module(s) have been scanned
Scan process 'avgnt.exe' - '1' Module(s) have been scanned
Scan process 'GoogleToolbarNotifier.exe' - '1' Module(s) have been scanned
Scan process 'Monitor.exe' - '1' Module(s) have been scanned
Scan process 'skypePM.exe' - '1' Module(s) have been scanned
Scan process 'alg.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'AnotherDesktop.exe' - '1' Module(s) have been scanned
Scan process 'sistray.exe' - '1' Module(s) have been scanned
Scan process 'EasyShare.exe' - '1' Module(s) have been scanned
Scan process 'Skype.exe' - '1' Module(s) have been scanned
Scan process 'msnmsgr.exe' - '1' Module(s) have been scanned
Scan process 'ctfmon.exe' - '1' Module(s) have been scanned
Scan process 'GrooveMonitor.exe' - '1' Module(s) have been scanned
Scan process 'soundman.exe' - '1' Module(s) have been scanned
Scan process 'explorer.exe' - '1' Module(s) have been scanned
Scan process 'spoolsv.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'lsass.exe' - '1' Module(s) have been scanned
Scan process 'services.exe' - '1' Module(s) have been scanned
Scan process 'winlogon.exe' - '1' Module(s) have been scanned
Scan process 'csrss.exe' - '1' Module(s) have been scanned
Scan process 'smss.exe' - '1' Module(s) have been scanned
32 processes with 32 modules were scanned

Starting master boot sector scan:
Master boot sector HD0
[INFO] No virus was found!

Start scanning boot sectors:
Boot sector 'C:\'
[INFO] No virus was found!
Boot sector 'D:\'
[INFO] No virus was found!
Boot sector 'E:\'
[INFO] No virus was found!

Starting to scan executable files (registry).
The registry was scanned ( '53' files ).


Starting the file scan:

Begin scan in 'C:\'
C:\pagefile.sys
[WARNING] The file could not be opened!
[NOTE] This file is a Windows system file.
[NOTE] This file cannot be opened for scanning.
C:\Documents and Settings\Administrador\7zS937.tmp\windowscefiles.e xe
[0] Archive type: RAR SFX (self extracting)
--> System32\cmdow.exe
[DETECTION] Contains recognition pattern of the APPL/HideWindows.31232.1 application
C:\Documents and Settings\Default User\7zS937.tmp\windowscefiles.exe
[0] Archive type: RAR SFX (self extracting)
--> System32\cmdow.exe
[DETECTION] Contains recognition pattern of the APPL/HideWindows.31232.1 application
C:\Documents and Settings\NetworkService\Configuración local\Archivos temporales de Internet\Content.IE5\OHERWTG1\fbxlkj[1].bmp
[DETECTION] Is the TR/Dropper.Gen Trojan
C:\WINDOWS\BricoPacks\Vista Inspirat 2\PackFiles\7_calc.exe
[DETECTION] Contains recognition pattern of the WORM/Agent.gfy worm
C:\WINDOWS\system32\calc.exe
[DETECTION] Contains recognition pattern of the WORM/Agent.gfy worm
C:\WINDOWS\system32\cmdow.exe
[DETECTION] Contains recognition pattern of the APPL/HideWindows.31232.1 application
C:\WINDOWS\system32\wezasfdc.dll
[DETECTION] Is the TR/Dropper.Gen Trojan
[WARNING] The file could not be opened!
C:\WINDOWS\system32\config\systemprofile\7zS937.tm p\windowscefiles.exe
[0] Archive type: RAR SFX (self extracting)
--> System32\cmdow.exe
[DETECTION] Contains recognition pattern of the APPL/HideWindows.31232.1 application
C:\WINDOWS\system32\drivers\sptd.sys
[WARNING] The file could not be opened!
Begin scan in 'D:\'
Begin scan in 'E:\'

Beginning disinfection:
C:\Documents and Settings\Administrador\7zS937.tmp\windowscefiles.e xe
[NOTE] The file was moved to '4af61bfc.qua'!
C:\Documents and Settings\Default User\7zS937.tmp\windowscefiles.exe
[NOTE] The file was moved to '4af61c00.qua'!
C:\Documents and Settings\NetworkService\Configuración local\Archivos temporales de Internet\Content.IE5\OHERWTG1\fbxlkj[1].bmp
[DETECTION] Is the TR/Dropper.Gen Trojan
[NOTE] The file was moved to '4b001c08.qua'!
C:\WINDOWS\BricoPacks\Vista Inspirat 2\PackFiles\7_calc.exe
[DETECTION] Contains recognition pattern of the WORM/Agent.gfy worm
[NOTE] The file was moved to '4aeb1c05.qua'!
C:\WINDOWS\system32\calc.exe
[DETECTION] Contains recognition pattern of the WORM/Agent.gfy worm
[NOTE] The file was moved to '4af41c07.qua'!
C:\WINDOWS\system32\cmdow.exe
[DETECTION] Contains recognition pattern of the APPL/HideWindows.31232.1 application
[NOTE] The file was moved to '4aec1c13.qua'!
C:\WINDOWS\system32\wezasfdc.dll
[DETECTION] Is the TR/Dropper.Gen Trojan
[WARNING] An error has occurred and the file was not deleted. ErrorID: 26004
[WARNING] The source file could not be found.
[NOTE] Attempting to perform action using the ARK library.
[NOTE] The file was moved to '4b021c0c.qua'!
C:\WINDOWS\system32\config\systemprofile\7zS937.tm p\windowscefiles.exe
[NOTE] The file was moved to '4af61c12.qua'!


End of the scan: Domingo, 16 de Agosto de 2009 09:46
Used time: 13:12 Minute(s)

The scan has been done completely.

3950 Scanned directories
147522 Files were scanned
8 Viruses and/or unwanted programs were found
0 Files were classified as suspicious
0 files were deleted
0 Viruses and unwanted programs were repaired
8 Files were moved to quarantine
0 Files were renamed
3 Files cannot be scanned
147511 Files not concerned
1089 Archives were scanned
3 Warnings
9 Notes
25898 Objects were scanned with rootkit scan
0 Hidden objects were found

porfavor ayudenme no se que hacer
agradeceria su colaboracion.

ahhh se me olvidaba tambien en el administrador de disposotivos me reconoce una pci de comunicaciones que no tengo instalada, tengo el cd de la board pero este no me lainstala me dice "CONTROLADORA SIMPLE DE COMUNICACIONES" RANURA PCI 1(BUS PCI 0, DISPOSOTIVO 12 FUNCION 0) "NO ESTAN INSTALADOS LOS CONTROLADORES PARA ESTE DISPOSOTIVO (CODIGO 28).

agrdeceria toda la yuda posible. garcias
att:
aldernay

Mira al querer descargar el Flash_Disinfector el antivirus lo detecta como virus y mi antivirus si es original.

Lo detecta como virus, pero es un falso-positivo. Dejalo que se instale.


Esto se debe a uno de los componentes que trae el programa de limpieza flash desinfector es considerado como una herramienta hacker por muchos antivirus.

Posible archivo infectado en la web (Solucionado)

Informe del malwareytes:
El informe del Dr Web no lo encuentro pero si detecto y elimino como 6 virus, mi antivirus si es original y el problema con el internet continua.

El reporte de DrWeb estará en una nueva carpeta llamada WebDoctor en Mis Documentos. Si es muy largo sólo copia la estadística final referida a la limpieza.


Si aparece el nombre de los archivos que ha borrado o el nombre del virus que es, interesa saberlo.


Necesito que cierres todas las ventanas que tengas de navegación y el programa Azuares.

Con todo cerrado repite este paso::


Necesito ver si un proceso que había antes aun está.


También pulsas control+alt+supr para ver el administrador de procesos. Revisa por si hay uno llamado MSLSRV32.EXE

Vaya leches! que lió con el post insertado ese que tenemos Realiza lo sugerido igualmente

La carpeta WebDoctor no existe en mi pc y en el administrador de procesos no aparece ninguno con el nombre que me diste.

Me había liado un poco con el trozo de post de otro usuario en este tema .


Veo que usas Kaspersky como antivirus. ¿Es original? ¿Querrías probar otro?