| |||||||
| Temas Solucionados Casos de HijackThis y Malwares resueltos. (Solo lectura) |
 |
| | Enviar a: | Herramientas |
 | 
08/05/06, 22:27:22
|  |
| |||
| No puedo sacar el trojan downloader (Formateo) me entro ese gusano y segui una guia generica que habia en este foro para quitarlo, pero cada computadora puede ser distinta plis si alguien me ayuda aca dejo los LOGS. Logfile of HijackThis v1.99.1 Scan saved at 17:57:10, on 08/05/2006 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\csrss.exe C:\WINDOWS\SYSTEM32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\Archivos de programa\Alwil Software\Avast4\aswUpdSv.exe C:\Archivos de programa\Alwil Software\Avast4\ashServ.exe C:\Archivos de programa\MessengerPlus! 3\MsgPlus.exe C:\WINDOWS\system32\ctfmon.exe C:\Archivos de programa\ATnotes\ATnotes.exe C:\WINDOWS\system32\nvsvc32.exe C:\Archivos de programa\Spyware Doctor\sdhelp.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\wdfmgr.exe C:\Archivos de programa\Alwil Software\Avast4\ashMaiSv.exe C:\Archivos de programa\Alwil Software\Avast4\ashWebSv.exe C:\WINDOWS\System32\alg.exe C:\Archivos de programa\Mozilla Firefox\firefox.exe C:\Archivos de programa\MSN Messenger\msnmsgr.exe C:\Archivos de programa\Spyware Doctor\swdoctor.exe C:\Documents and Settings\Administrador\Escritorio\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.forospyware.com/ R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings,ProxyServer = 127.0.0.1:8080 R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings,ProxyOverride = local R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Vínculos O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Archivos de programa\Yahoo!\Companion\Installs\cpn\yt.dll O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Archivos de programa\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx O2 - BHO: PCTools Site Guard - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - C:\ARCHIV~1\SPYWAR~1\tools\iesdsg.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Archivos de programa\Java\jre1.5.0_06\bin\ssv.dll O2 - BHO: PCTools Browser Monitor - {B56A7D7D-6927-48C8-A975-17DF180C71AC} - C:\ARCHIV~1\SPYWAR~1\tools\iesdpb.dll O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - (no file) O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Archivos de programa\Yahoo!\Companion\Installs\cpn\yt.dll O3 - Toolbar: (no name) - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - (no file) O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\ARCHIV~1\SYMNET~1\SNDMon.exe /Consumer O4 - HKLM\..\Run: [MessengerPlus3] "C:\Archivos de programa\MessengerPlus! 3\MsgPlus.exe" O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [ATnotes.exe] C:\Archivos de programa\ATnotes\ATnotes.exe O8 - Extra context menu item: Sothink SWF Catcher - C:\Archivos de programa\Archivos comunes\SourceTec\SWF Catcher\InternetExplorer.htm O9 - Extra button: Spyware Doctor - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - C:\ARCHIV~1\SPYWAR~1\tools\iesdpb.dll O16 - DPF: {193C772A-87BE-4B19-A7BB-445B226FE9A1} (ewidoOnlineScan Control) - http://download.ewido.net/ewidoOnlineScan.cab O23 - Service: Adobe LM Service - Adobe Systems - C:\Archivos de programa\Archivos comunes\Adobe Systems Shared\Service\Adobelmsvc.exe O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Archivos de programa\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: avast! Antivirus - Unknown owner - C:\Archivos de programa\Alwil Software\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - Unknown owner - C:\Archivos de programa\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing) O23 - Service: avast! Web Scanner - Unknown owner - C:\Archivos de programa\Alwil Software\Avast4\ashWebSv.exe" /service (file missing) O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: PC Tools Spyware Doctor (SDhelper) - PC Tools Research Pty Ltd - C:\Archivos de programa\Spyware Doctor\sdhelp.exe O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Archivos de programa\Archivos comunes\Symantec Shared\SNDSrvc.exe  |
| InfoSpyware | ||
| |
|
08/05/06, 22:29:15
| |
| |||
| Re: No puedo sacar el trojan downloader SPYWARE DOCTOR: Resultados del análisis: Análisis realizado: 08/05/2006 17:57:24 Análisis detenido: 08/05/2006 18:01:23 Objetos analizados: 65393 Objetos encontrados: 65 Encontrados y excluidos: 0 Herramientas utilizadas: General Scanner, Process Scanner, LSP Scanner, Startup Scanner, Registry Scanner, Hosts Scanner, Browser Scanner, Browser Activity Scanner, Disk Scanner, ActiveX Scanner Nombre de la infección Ubicación Riesgo Adservice Scanner HKLM\SOFTWARE\Microsoft\MSSMGR Alto Adservice Scanner HKLM\SOFTWARE\Microsoft\MSSMGR## Alto Adservice Scanner HKLM\SOFTWARE\Microsoft\MSSMGR##Brnd Alto Adservice Scanner HKLM\SOFTWARE\Microsoft\MSSMGR##BPTV Alto Adservice Scanner HKLM\SOFTWARE\Microsoft\MSSMGR##LSTV Alto Adservice Scanner HKLM\SOFTWARE\Microsoft\MSSMGR##MSLIST Alto Adservice Scanner HKLM\SOFTWARE\Microsoft\MSSMGR##PID Alto Adservice Scanner HKLM\SOFTWARE\Microsoft\MSSMGR##Rid Alto Adservice Scanner HKLM\SOFTWARE\Microsoft\MSSMGR##LID Alto Adservice Scanner HKLM\SOFTWARE\Microsoft\MSSMGR##SCLIST Alto Adservice Scanner HKLM\SOFTWARE\Microsoft\MSSMGR##SSLIST Alto Adservice Scanner HKLM\SOFTWARE\Microsoft\MSSMGR##PSTV Alto Adservice Scanner HKLM\SOFTWARE\Microsoft\MSSMGR##BSTV Alto Adservice Scanner HKLM\SOFTWARE\Microsoft\MSSMGR##SSTV Alto Zango Search Assistant before December 2004 HKCR\Interface\{5CDE145A-B6B9-408D-A8CC-F9CA040BA7A4} Alto Zango Search Assistant before December 2004 HKCR\Interface\{5CDE145A-B6B9-408D-A8CC-F9CA040BA7A4}## Alto Zango Search Assistant before December 2004 HKCR\Interface\{5CDE145A-B6B9-408D-A8CC-F9CA040BA7A4}\ProxyStubClsid Alto Zango Search Assistant before December 2004 HKCR\Interface\{5CDE145A-B6B9-408D-A8CC-F9CA040BA7A4}\ProxyStubClsid## Alto Zango Search Assistant before December 2004 HKCR\Interface\{5CDE145A-B6B9-408D-A8CC-F9CA040BA7A4}\ProxyStubClsid32 Alto Zango Search Assistant before December 2004 HKCR\Interface\{5CDE145A-B6B9-408D-A8CC-F9CA040BA7A4}\ProxyStubClsid32## Alto Zango Search Assistant before December 2004 HKCR\Interface\{5CDE145A-B6B9-408D-A8CC-F9CA040BA7A4}\TypeLib Alto Zango Search Assistant before December 2004 HKCR\Interface\{5CDE145A-B6B9-408D-A8CC-F9CA040BA7A4}\TypeLib## Alto Zango Search Assistant before December 2004 HKCR\Interface\{5CDE145A-B6B9-408D-A8CC-F9CA040BA7A4}\TypeLib##Version Alto Zango Search Assistant before December 2004 HKCR\TypeLib\{344EE577-2027-4714-82FF-0D7538488547} Alto Zango Search Assistant before December 2004 HKCR\TypeLib\{344EE577-2027-4714-82FF-0D7538488547}## Alto Zango Search Assistant before December 2004 HKCR\TypeLib\{344EE577-2027-4714-82FF-0D7538488547}\1.0 Alto Zango Search Assistant before December 2004 HKCR\TypeLib\{344EE577-2027-4714-82FF-0D7538488547}\1.0## Alto Zango Search Assistant before December 2004 HKCR\TypeLib\{344EE577-2027-4714-82FF-0D7538488547}\1.0\0 Alto Zango Search Assistant before December 2004 HKCR\TypeLib\{344EE577-2027-4714-82FF-0D7538488547}\1.0\0## Alto Zango Search Assistant before December 2004 HKCR\TypeLib\{344EE577-2027-4714-82FF-0D7538488547}\1.0\0\win32 Alto Zango Search Assistant before December 2004 HKCR\TypeLib\{344EE577-2027-4714-82FF-0D7538488547}\1.0\0\win32## Alto Zango Search Assistant before December 2004 HKCR\TypeLib\{344EE577-2027-4714-82FF-0D7538488547}\1.0\FLAGS Alto Zango Search Assistant before December 2004 HKCR\TypeLib\{344EE577-2027-4714-82FF-0D7538488547}\1.0\FLAGS## Alto Zango Search Assistant before December 2004 HKCR\TypeLib\{344EE577-2027-4714-82FF-0D7538488547}\1.0\HELPDIR Alto Zango Search Assistant before December 2004 HKCR\TypeLib\{344EE577-2027-4714-82FF-0D7538488547}\1.0\HELPDIR## Alto Tracking Cookie(s) C:\Documents and Settings\Administrador\Cookies\administrador@atdmt[2].txt Medio Trojan.Downloader.Zlob.GEN C:\WINDOWS\system32\ld49A8.tmp Alto AdProtector C:\WINDOWS\TEMP\win5.tmp.exe Alto AdProtector C:\WINDOWS\TEMP\win7.tmp.exe Alto CWS HKCR\CLSID\{2D38A51A-23C9-48A1-A33C-48675AA2B494} Alto CWS HKCR\CLSID\{2D38A51A-23C9-48A1-A33C-48675AA2B494}## Alto CWS HKCR\CLSID\{2D38A51A-23C9-48A1-A33C-48675AA2B494}\InprocServer32 Alto CWS HKCR\CLSID\{2D38A51A-23C9-48A1-A33C-48675AA2B494}\InprocServer32## Alto CWS HKCR\CLSID\{2D38A51A-23C9-48A1-A33C-48675AA2B494}\InprocServer32##ThreadingModel Alto CWS HKCR\CLSID\{2D38A51A-23C9-48A1-A33C-48675AA2B494}\ProgID Alto CWS HKCR\CLSID\{2D38A51A-23C9-48A1-A33C-48675AA2B494}\ProgID## Alto CWS HKCR\CLSID\{2D38A51A-23C9-48A1-A33C-48675AA2B494}\Programmable Alto CWS HKCR\CLSID\{2D38A51A-23C9-48A1-A33C-48675AA2B494}\Programmable## Alto CWS HKCR\CLSID\{2D38A51A-23C9-48A1-A33C-48675AA2B494}\TypeLib Alto CWS HKCR\CLSID\{2D38A51A-23C9-48A1-A33C-48675AA2B494}\TypeLib## Alto CWS HKCR\CLSID\{2D38A51A-23C9-48A1-A33C-48675AA2B494}\VersionIndependentProgID Alto CWS HKCR\CLSID\{2D38A51A-23C9-48A1-A33C-48675AA2B494}\VersionIndependentProgID## Alto CWS HKLM\Software\Classes\CLSID\{2D38A51A-23C9-48A1-A33C-48675AA2B494} Alto CWS HKLM\Software\Classes\CLSID\{2D38A51A-23C9-48A1-A33C-48675AA2B494}## Alto CWS HKLM\Software\Classes\CLSID\{2D38A51A-23C9-48A1-A33C-48675AA2B494}\InprocServer32 Alto CWS HKLM\Software\Classes\CLSID\{2D38A51A-23C9-48A1-A33C-48675AA2B494}\InprocServer32## Alto CWS HKLM\Software\Classes\CLSID\{2D38A51A-23C9-48A1-A33C-48675AA2B494}\InprocServer32##ThreadingModel Alto CWS HKLM\Software\Classes\CLSID\{2D38A51A-23C9-48A1-A33C-48675AA2B494}\ProgID Alto CWS HKLM\Software\Classes\CLSID\{2D38A51A-23C9-48A1-A33C-48675AA2B494}\ProgID## Alto CWS HKLM\Software\Classes\CLSID\{2D38A51A-23C9-48A1-A33C-48675AA2B494}\Programmable Alto CWS HKLM\Software\Classes\CLSID\{2D38A51A-23C9-48A1-A33C-48675AA2B494}\Programmable## Alto CWS HKLM\Software\Classes\CLSID\{2D38A51A-23C9-48A1-A33C-48675AA2B494}\TypeLib Alto CWS HKLM\Software\Classes\CLSID\{2D38A51A-23C9-48A1-A33C-48675AA2B494}\TypeLib## Alto CWS HKLM\Software\Classes\CLSID\{2D38A51A-23C9-48A1-A33C-48675AA2B494}\VersionIndependentProgID Alto CWS HKLM\Software\Classes\CLSID\{2D38A51A-23C9-48A1-A33C-48675AA2B494}\VersionIndependentProgID## Alto Resultados del análisis: Análisis realizado: 08/05/2006 19:00:00 Análisis detenido: 08/05/2006 19:03:00 Objetos analizados: 59067 Objetos encontrados: 65 Encontrados y excluidos: 0 Herramientas utilizadas: General Scanner, Process Scanner, LSP Scanner, Startup Scanner, Registry Scanner, Hosts Scanner, Browser Scanner, Browser Activity Scanner, Disk Scanner, ActiveX Scanner Nombre de la infección Ubicación Riesgo Adservice Scanner HKLM\SOFTWARE\Microsoft\MSSMGR Alto Adservice Scanner HKLM\SOFTWARE\Microsoft\MSSMGR## Alto Adservice Scanner HKLM\SOFTWARE\Microsoft\MSSMGR##Brnd Alto Adservice Scanner HKLM\SOFTWARE\Microsoft\MSSMGR##BPTV Alto Adservice Scanner HKLM\SOFTWARE\Microsoft\MSSMGR##LSTV Alto Adservice Scanner HKLM\SOFTWARE\Microsoft\MSSMGR##MSLIST Alto Adservice Scanner HKLM\SOFTWARE\Microsoft\MSSMGR##PID Alto Adservice Scanner HKLM\SOFTWARE\Microsoft\MSSMGR##Rid Alto Adservice Scanner HKLM\SOFTWARE\Microsoft\MSSMGR##LID Alto Adservice Scanner HKLM\SOFTWARE\Microsoft\MSSMGR##SCLIST Alto Adservice Scanner HKLM\SOFTWARE\Microsoft\MSSMGR##SSLIST Alto Adservice Scanner HKLM\SOFTWARE\Microsoft\MSSMGR##PSTV Alto Adservice Scanner HKLM\SOFTWARE\Microsoft\MSSMGR##BSTV Alto Adservice Scanner HKLM\SOFTWARE\Microsoft\MSSMGR##SSTV Alto Zango Search Assistant before December 2004 HKCR\Interface\{5CDE145A-B6B9-408D-A8CC-F9CA040BA7A4} Alto Zango Search Assistant before December 2004 HKCR\Interface\{5CDE145A-B6B9-408D-A8CC-F9CA040BA7A4}## Alto Zango Search Assistant before December 2004 HKCR\Interface\{5CDE145A-B6B9-408D-A8CC-F9CA040BA7A4}\ProxyStubClsid Alto Zango Search Assistant before December 2004 HKCR\Interface\{5CDE145A-B6B9-408D-A8CC-F9CA040BA7A4}\ProxyStubClsid## Alto Zango Search Assistant before December 2004 HKCR\Interface\{5CDE145A-B6B9-408D-A8CC-F9CA040BA7A4}\ProxyStubClsid32 Alto Zango Search Assistant before December 2004 HKCR\Interface\{5CDE145A-B6B9-408D-A8CC-F9CA040BA7A4}\ProxyStubClsid32## Alto Zango Search Assistant before December 2004 HKCR\Interface\{5CDE145A-B6B9-408D-A8CC-F9CA040BA7A4}\TypeLib Alto Zango Search Assistant before December 2004 HKCR\Interface\{5CDE145A-B6B9-408D-A8CC-F9CA040BA7A4}\TypeLib## Alto Zango Search Assistant before December 2004 HKCR\Interface\{5CDE145A-B6B9-408D-A8CC-F9CA040BA7A4}\TypeLib##Version Alto Zango Search Assistant before December 2004 HKCR\TypeLib\{344EE577-2027-4714-82FF-0D7538488547} Alto Zango Search Assistant before December 2004 HKCR\TypeLib\{344EE577-2027-4714-82FF-0D7538488547}## Alto Zango Search Assistant before December 2004 HKCR\TypeLib\{344EE577-2027-4714-82FF-0D7538488547}\1.0 Alto Zango Search Assistant before December 2004 HKCR\TypeLib\{344EE577-2027-4714-82FF-0D7538488547}\1.0## Alto Zango Search Assistant before December 2004 HKCR\TypeLib\{344EE577-2027-4714-82FF-0D7538488547}\1.0\0 Alto Zango Search Assistant before December 2004 HKCR\TypeLib\{344EE577-2027-4714-82FF-0D7538488547}\1.0\0## Alto Zango Search Assistant before December 2004 HKCR\TypeLib\{344EE577-2027-4714-82FF-0D7538488547}\1.0\0\win32 Alto Zango Search Assistant before December 2004 HKCR\TypeLib\{344EE577-2027-4714-82FF-0D7538488547}\1.0\0\win32## Alto Zango Search Assistant before December 2004 HKCR\TypeLib\{344EE577-2027-4714-82FF-0D7538488547}\1.0\FLAGS Alto Zango Search Assistant before December 2004 HKCR\TypeLib\{344EE577-2027-4714-82FF-0D7538488547}\1.0\FLAGS## Alto Zango Search Assistant before December 2004 HKCR\TypeLib\{344EE577-2027-4714-82FF-0D7538488547}\1.0\HELPDIR Alto Zango Search Assistant before December 2004 HKCR\TypeLib\{344EE577-2027-4714-82FF-0D7538488547}\1.0\HELPDIR## Alto Tracking Cookie(s) C:\Documents and Settings\Administrador\Cookies\administrador@atdmt[2].txt Medio Trojan.Downloader.Zlob.GEN C:\WINDOWS\system32\ld49A8.tmp Alto AdProtector C:\WINDOWS\TEMP\win5.tmp.exe Alto AdProtector C:\WINDOWS\TEMP\win7.tmp.exe Alto CWS HKCR\CLSID\{2D38A51A-23C9-48A1-A33C-48675AA2B494} Alto CWS HKCR\CLSID\{2D38A51A-23C9-48A1-A33C-48675AA2B494}## Alto CWS HKCR\CLSID\{2D38A51A-23C9-48A1-A33C-48675AA2B494}\InprocServer32 Alto CWS HKCR\CLSID\{2D38A51A-23C9-48A1-A33C-48675AA2B494}\InprocServer32## Alto CWS HKCR\CLSID\{2D38A51A-23C9-48A1-A33C-48675AA2B494}\InprocServer32##ThreadingModel Alto CWS HKCR\CLSID\{2D38A51A-23C9-48A1-A33C-48675AA2B494}\ProgID Alto CWS HKCR\CLSID\{2D38A51A-23C9-48A1-A33C-48675AA2B494}\ProgID## Alto CWS HKCR\CLSID\{2D38A51A-23C9-48A1-A33C-48675AA2B494}\Programmable Alto CWS HKCR\CLSID\{2D38A51A-23C9-48A1-A33C-48675AA2B494}\Programmable## Alto CWS HKCR\CLSID\{2D38A51A-23C9-48A1-A33C-48675AA2B494}\TypeLib Alto CWS HKCR\CLSID\{2D38A51A-23C9-48A1-A33C-48675AA2B494}\TypeLib## Alto CWS HKCR\CLSID\{2D38A51A-23C9-48A1-A33C-48675AA2B494}\VersionIndependentProgID Alto CWS HKCR\CLSID\{2D38A51A-23C9-48A1-A33C-48675AA2B494}\VersionIndependentProgID## Alto CWS HKLM\Software\Classes\CLSID\{2D38A51A-23C9-48A1-A33C-48675AA2B494} Alto CWS HKLM\Software\Classes\CLSID\{2D38A51A-23C9-48A1-A33C-48675AA2B494}## Alto CWS HKLM\Software\Classes\CLSID\{2D38A51A-23C9-48A1-A33C-48675AA2B494}\InprocServer32 Alto CWS HKLM\Software\Classes\CLSID\{2D38A51A-23C9-48A1-A33C-48675AA2B494}\InprocServer32## Alto CWS HKLM\Software\Classes\CLSID\{2D38A51A-23C9-48A1-A33C-48675AA2B494}\InprocServer32##ThreadingModel Alto CWS HKLM\Software\Classes\CLSID\{2D38A51A-23C9-48A1-A33C-48675AA2B494}\ProgID Alto CWS HKLM\Software\Classes\CLSID\{2D38A51A-23C9-48A1-A33C-48675AA2B494}\ProgID## Alto CWS HKLM\Software\Classes\CLSID\{2D38A51A-23C9-48A1-A33C-48675AA2B494}\Programmable Alto CWS HKLM\Software\Classes\CLSID\{2D38A51A-23C9-48A1-A33C-48675AA2B494}\Programmable## Alto CWS HKLM\Software\Classes\CLSID\{2D38A51A-23C9-48A1-A33C-48675AA2B494}\TypeLib Alto CWS HKLM\Software\Classes\CLSID\{2D38A51A-23C9-48A1-A33C-48675AA2B494}\TypeLib## Alto CWS HKLM\Software\Classes\CLSID\{2D38A51A-23C9-48A1-A33C-48675AA2B494}\VersionIndependentProgID Alto CWS HKLM\Software\Classes\CLSID\{2D38A51A-23C9-48A1-A33C-48675AA2B494}\VersionIndependentProgID## Alto Resultados del análisis: Análisis realizado: 08/05/2006 22:21:35 Análisis detenido: 08/05/2006 22:26:00 Objetos analizados: 63571 Objetos encontrados: 12 Encontrados y excluidos: 0 Herramientas utilizadas: General Scanner, Process Scanner, LSP Scanner, Startup Scanner, Registry Scanner, Hosts Scanner, Browser Scanner, Browser Activity Scanner, Disk Scanner, ActiveX Scanner Nombre de la infección Ubicación Riesgo Adservice Scanner HKLM\SOFTWARE\Microsoft\MSSMGR Alto Adservice Scanner HKLM\SOFTWARE\Microsoft\MSSMGR## Alto Adservice Scanner HKLM\SOFTWARE\Microsoft\MSSMGR##Brnd Alto Adservice Scanner HKLM\SOFTWARE\Microsoft\MSSMGR##BPTV Alto Adservice Scanner HKLM\SOFTWARE\Microsoft\MSSMGR##LSTV Alto Adservice Scanner HKLM\SOFTWARE\Microsoft\MSSMGR##PSTV Alto Adservice Scanner HKLM\SOFTWARE\Microsoft\MSSMGR##BSTV Alto Adservice Scanner HKLM\SOFTWARE\Microsoft\MSSMGR##SSTV Alto Adservice Scanner HKLM\SOFTWARE\Microsoft\MSSMGR##SCLIST Alto Adservice Scanner HKLM\SOFTWARE\Microsoft\MSSMGR##SSLIST Alto Tracking Cookie(s) C:\Documents and Settings\Administrador\Cookies\administrador@atdmt[1].txt Medio Trojan.Downloader.Zlob.GEN C:\WINDOWS\system32\ld49A8.tmp Alto Otras secciones: |
|
09/05/06, 20:02:12
| |
| ||||
| Re: No puedo sacar el trojan downloader Hola manu19, lee las Políticas del Foro Cita:
Sigue estos pasos: - Cierra todos los programas, ejecuta HijackThis y dale "Fix Cheked" a estas entradas: O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - (no file) O3 - Toolbar: (no name) - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - (no file) - Pasa el Disk Cleaner para limpiar cookies y temporales y el Regseeker para Limpiar el Registro, pásalo hasta q no quede nada para eliminar. - Pasa el Ad-Aware SE actualizado e instala SpywareBlaster - Reinicia la maquina y realiza un escaneo con Ewido y Panda Online y de ser necesario pega sus respectivos reportes, luego pega otro log de Hijackthis y nos cuentas como te fue. Saludos  Saludos Novedades del Foro | Antivirus Online | Eliminar Malwares | Políticas del Foro | Blog * Ayúdanos haciendo una DONACIÓN para poder seguir Ayudando. * Infórmate de las ultimas amenazas de la red desde: InfoSpyware Blog * No se resuelven dudas por Privados ni por E-mail, ya que para eso esta el foro. |
|
« Tema Anterior
|
Próximo Tema »
| Herramientas | |
| |
| 
Temas Similares | |
| Tema | Autor | Foro | Respuestas | Último mensaje |
| nesecito ayuda para eliminar el trojan downloader (Solucionado) | yeico | Temas Solucionados | 6 | 30/03/06 16:44:11 |
| No puedo sacar el Spyaxe (solucionado) | santiagov | Temas Solucionados | 2 | 28/12/05 19:43:36 |
| FAQ: Mitos del Formateo | Enrique33 | Foro de Software | 0 | 21/11/05 13:39:20 |
| Se me fue el trojan-spy.HTML.smitfraud.c o no?? - (Solucionado / Formateo) | Darlene | Temas Solucionados | 13 | 05/07/05 15:27:59 |
| me ataco el atiupdpl...no lo puedo sacar | laurapampa | Foro de Virus y Spywares | 6 | 05/07/05 13:24:45 |
Todas las horas son GMT -4. La hora es 09:00:35.
