Foro de InfoSpyware - Foro de Hijackthis - Foro de Virus

Sé que ya habéis respondido a varias personas acerca de este j***** dialer, pero es que no he encontrado ningún log parecido al mío, así que os dejo aquí el mío y me comentáis lo que sea, porque estoy un poco harto de este dichosos dialer

Logfile of HijackThis v1.99.1
Scan saved at 22:52:50, on 11/07/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Archivos de programa\Archivos comunes\Microsoft Shared\VS7Debug\mdm.exe
C:\Archivos de programa\Archivos comunes\Softwin\BitDefender Communicator\xcommsvr.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Archivos de programa\Softwin\BitDefender9\bdoesrv.exe
C:\archiv~1\softwin\bitdef~1\bdnagent.exe
C:\archiv~1\softwin\bitdef~1\bdswitch.exe
C:\Archivos de programa\Sony\CONNECTAutoUpdate\CONNECTScheduler.e xe
C:\Archivos de programa\QuickTime\qttask.exe
C:\Archivos de programa\MSN Messenger\MsnMsgr.Exe
C:\Archivos de programa\Sony\CONNECTAutoUpdate\CONNECTAUTrayApp.e xe
C:\Archivos de programa\Sony\CONNECTAutoUpdate\CONNECTAutoUpdate. exe
C:\WINDOWS\system32\wuauclt.exe
C:\Archivos de programa\Archivos comunes\Softwin\BitDefender Update Service\livesrv.exe
C:\Archivos de programa\Archivos comunes\Softwin\BitDefender Scan Server\bdss.exe
C:\Archivos de programa\Softwin\BitDefender9\vsserv.exe
c:\archiv~1\softwin\bitdef~1\bdmcon.exe
C:\DOCUME~1\PROPIE~1\CONFIG~1\Temp\Directorio temporal 1 para hijackthis.zip\HijackThis.exe

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Vínculos
O4 - HKLM\..\Run: [BDMCon] C:\ARCHIV~1\Softwin\BITDEF~1\bdmcon.exe
O4 - HKLM\..\Run: [BDOESRV] "C:\Archivos de programa\Softwin\BitDefender9\bdoesrv.exe"
O4 - HKLM\..\Run: [BDNewsAgent] "c:\archiv~1\softwin\bitdef~1\bdnagent.exe"
O4 - HKLM\..\Run: [BDSwitchAgent] "c:\archiv~1\softwin\bitdef~1\bdswitch.exe"
O4 - HKLM\..\Run: [CONNECTScheduler] "C:\Archivos de programa\Sony\CONNECTAutoUpdate\CONNECTScheduler.e xe" /RUN_SCHEDULER
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Archivos de programa\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Archivos de programa\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Archivos de programa\QuickTime\qttask.exe" -atboottime
O4 - HKCU\..\Run: [MsnMsgr] "C:\Archivos de programa\MSN Messenger\MsnMsgr.Exe" /background
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Archivos de programa\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: CONNECTAUTrayApp.lnk = C:\Archivos de programa\Sony\CONNECTAutoUpdate\CONNECTAUTrayApp.e xe
O4 - Global Startup: Microsoft Office.lnk = C:\Archivos de programa\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: E&xportar a Microsoft Excel - res://C:\ARCHIV~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Archivos de programa\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Consola de Sun Java - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Archivos de programa\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Run WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Archivos de programa\WinHTTrack\WinHTTrackIEBar.dll
O9 - Extra 'Tools' menuitem: Launch WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Archivos de programa\WinHTTrack\WinHTTrackIEBar.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Archivos de programa\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Archivos de programa\Messenger\msmsgs.exe
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://hopedreamtheater.spaces.msn.com//PhotoUpload/MsnPUpld.cab
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\ARCHIV~1\MSNMES~1\msgrapp.dll" (file missing)
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: BitDefender Scan Server (bdss) - Unknown owner - C:\Archivos de programa\Archivos comunes\Softwin\BitDefender Scan Server\bdss.exe" /service (file missing)
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Archivos de programa\Archivos comunes\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Archivos de programa\iPod\bin\iPodService.exe
O23 - Service: BitDefender Desktop Update Service (LIVESRV) - Unknown owner - C:\Archivos de programa\Archivos comunes\Softwin\BitDefender Update Service\livesrv.exe" /service (file missing)
O23 - Service: MSCSPTISRV - Sony Corporation - C:\Archivos de programa\Archivos comunes\Sony Shared\AVLib\MSCSPTISRV.exe
O23 - Service: PACSPTISVR - Sony Corporation - C:\Archivos de programa\Archivos comunes\Sony Shared\AVLib\PACSPTISVR.exe
O23 - Service: Sony SCSI Helper Service - Sony Corporation - C:\Archivos de programa\Archivos comunes\Sony Shared\Fsk\SonySCSIHelperService.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Archivos de programa\Archivos comunes\Sony Shared\AVLib\SPTISRV.exe
O23 - Service: BitDefender Virus Shield (VSSERV) - Unknown owner - C:\Archivos de programa\Softwin\BitDefender9\vsserv.exe" /service (file missing)
O23 - Service: BitDefender Communicator (XCOMM) - Unknown owner - C:\Archivos de programa\Archivos comunes\Softwin\BitDefender Communicator\xcommsvr.exe" /service (file missing)

Gracias por adelantado

Hola y Bienvenid@ a Forospyware!



El log no muestra nada así que por favor haz un chequeo con los antivirus online de kaspersky y ewido y nos dejas acá los reportes (Solo coloca las entradas que digan Infected o Recognized)





Salu2

Muchas gracias por la pronta respuesta.

Ewido report:
__________________________________________________
ewido anti-spyware online scanner
http://www.ewido.net
__________________________________________________


Name: TrackingCookie.Reliablestats
Path: C:\Documents and Settings\Propietario\Cookies\propietario@stats1.re liablestats[2].txt
Risk: Medium

Name: Dialer.Agent.z
Path: [4576] C:\WINDOWS\TEMP\idd73F.tmp.exe
Risk: High

Name: Dialer.Agent.z
Path: [5468] C:\WINDOWS\TEMP\idd1168.tmp.exe
Risk: High

Name: TrackingCookie.2o7
Path: C:\Documents and Settings\Administrador.NOOGAR\Cookies\administrado r@msnportal.112.2o7[1].txt
Risk: Medium

Name: Downloader.Small.cvw
Path: C:\Documents and Settings\Propietario\Configuración local\Archivos temporales de Internet\Content.IE5\6XMYSSGF\L2[1].exe
Risk: High

Name: TrackingCookie.Doubleclick
Path: :mozilla.27:C:\Documents and Settings\Propietario\Datos de programa\Mozilla\Firefox\Profiles\23p44cvq.default \cookies.txt
Risk: Medium

Name: TrackingCookie.2o7
Path: :mozilla.37:C:\Documents and Settings\Propietario\Datos de programa\Mozilla\Firefox\Profiles\23p44cvq.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Com
Path: :mozilla.41:C:\Documents and Settings\Propietario\Datos de programa\Mozilla\Firefox\Profiles\23p44cvq.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Googleadservices
Path: :mozilla.48:C:\Documents and Settings\Propietario\Datos de programa\Mozilla\Firefox\Profiles\23p44cvq.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Atdmt
Path: :mozilla.52:C:\Documents and Settings\Propietario\Datos de programa\Mozilla\Firefox\Profiles\23p44cvq.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Mediaplex
Path: :mozilla.53:C:\Documents and Settings\Propietario\Datos de programa\Mozilla\Firefox\Profiles\23p44cvq.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Serving-sys
Path: :mozilla.54:C:\Documents and Settings\Propietario\Datos de programa\Mozilla\Firefox\Profiles\23p44cvq.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Serving-sys
Path: :mozilla.55:C:\Documents and Settings\Propietario\Datos de programa\Mozilla\Firefox\Profiles\23p44cvq.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Serving-sys
Path: :mozilla.56:C:\Documents and Settings\Propietario\Datos de programa\Mozilla\Firefox\Profiles\23p44cvq.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Serving-sys
Path: :mozilla.57:C:\Documents and Settings\Propietario\Datos de programa\Mozilla\Firefox\Profiles\23p44cvq.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Statcounter
Path: :mozilla.60:C:\Documents and Settings\Propietario\Datos de programa\Mozilla\Firefox\Profiles\23p44cvq.default \cookies.txt
Risk: Medium

Name: Adware.Virtumonde
Path: C:\WINDOWS\system32\mljhhgf.dll
Risk: Medium

Name: Downloader.Small.cvw
Path: C:\WINDOWS\Temp\win39E.tmp.exe
Risk: High

Name: Downloader.Swizzor.ag
Path: D:\Mis documentos\Mis archivos recibidos\Messenger Plus! - Setup.exe/sponsor.exe
Risk: High

Kaspersky report:
C:\Documents and Settings\Propietario\Configuración local\Archivos temporales de Internet\Content.IE5\6XMYSSGF\L2[1].exe Infected: Trojan-Downloader.Win32.Small.cvw skipped

C:\Documents and Settings\Propietario\Configuración local\Temp\mst4F.tmp Infected: Packed.Win32.Klone.g skipped

C:\Documents and Settings\Propietario\Configuración local\Temp\win59.tmp.exe/data0006 Infected: Trojan-Dropper.Win32.VB.nn skipped

C:\Documents and Settings\Propietario\Configuración local\Temp\win59.tmp.exe NSIS: infected - 1 skipped

C:\WINDOWS\system32\mljhhgf.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.cd skipped

C:\WINDOWS\system32\winhoq32.dll Infected: Packed.Win32.Klone.g skipped

C:\WINDOWS\Temp\idd103.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd106.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd113.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd1162.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd1168.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd119D.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd11BC.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd11CF.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd11DB.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd11E6.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd11F3.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd11F6.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd11F8.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd11FA.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd11FB.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd11FE.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd123.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd137.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd138.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd150E.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd159.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd16B6.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd16DA.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd17B.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd18.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd19.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd19E.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd1A.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd1B.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd1C.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd1C0.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd1DF.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd1F.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd20.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd202.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd2135.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd21F.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd22.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd225.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd24.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd247.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd25.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd256C.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd26A.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd27C.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd28C.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd2AF.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd2D1.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd2F.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd2F3.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd30.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd316.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd32.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd33D.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd343.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd369.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd38C.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd3A1.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd3A6.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd3A8.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd3B3.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd3B6.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd3B7.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd3C.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd3C2.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd3C5.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd3CB.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd3D.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd3DF.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd3E.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd3EB.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd3ED.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd3F7.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd3FC.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd3FD.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd4.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd40.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd402.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd408.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd40C.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd40E.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd41.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd410.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd413.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd414.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd41E.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd420.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd422.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd425.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd428.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd429.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd42A.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd42B.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd42C.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd42D.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd43.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd430.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd431.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd437.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd439.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd43F.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd440.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd443.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd444.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd446.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd44B.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd44D.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd44F.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd45.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd450.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd451.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd45A.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd45B.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd45E.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd45F.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd46.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd461.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd463.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd464.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd466.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd467.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd469.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd46C.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd470.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd473.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd474.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd475.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd48A.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd4A4.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd4C6.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd4E6.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd50.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd505.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd51.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd524.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd53.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd54C.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd55.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd56.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd56B.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd57.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd58D.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd59.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd5A.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd5B5.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd5C.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd5D4.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd5F3.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd607.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd613.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd632.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd65.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd651.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd67.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd679.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd698.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd6B7.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd6DA.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd6DF.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd6F9.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd7.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd70.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd718.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd73F.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd740.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd75F.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd77E.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd7A1.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd7C0.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd7E8.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd807.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd81.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd826.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd84E.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd86D.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd88.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd88C.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd8AF.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd8D3.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd8F2.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd90E.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd924.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd926.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd929.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd92A.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd92C.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd93.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd930.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd932.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd934.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\idd942.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\iddAA.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\iddAA1.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\iddAF.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\iddC0.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\iddC7.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\iddCD.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\iddD.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\iddD0.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\iddD2.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\iddDF.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\iddE0.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\iddE2.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\iddEDC.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\iddF1.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\iddF4.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\tmp0000393a\tmp00000000 Object is locked skipped
C:\WINDOWS\Temp\win17.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\win19.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\win1B.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\win1E.tmp.exe Infected: Packed.Win32.Klone.g skipped
C:\WINDOWS\Temp\win39E.tmp.exe Infected: Trojan-Downloader.Win32.Small.cvw skipped

C:\WINDOWS\Temp\winC.tmp.exe Infected: Packed.Win32.Klone.g skipped

I:\Programas\Elisoft.rar/CodecPackElisoft140.exe/divx511\fsg_4104.exe Infected: not-a-virus:AdWare.Win32.Gator.4104 skipped

I:\Programas\Elisoft.rar/CodecPackElisoft140.exe Infected: not-a-virus:AdWare.Win32.Gator.4104 skipped

I:\Programas\Elisoft.rar RAR: infected - 2 skipped

I:\Programas\CodecPackElisoft140.exe/divx511\fsg_4104.exe Infected: not-a-virus:AdWare.Win32.Gator.4104 skipped

I:\Programas\CodecPackElisoft140.exe Gentee: infected - 1 skipped

Los archivos temporales del dialer los he borrado ya varias veces, pero siguen multiplicándose cada vez que intenta conectarse, no me preocupa porque el firewall lo bloquea bien, pero es engorroso, además de tener que estar constantemente quitándolo de memoria en el administrador de tareas que se come bastante el muy m....

Gracias de nuevo

Bien, empecemos entonces:


- Desactiva la restauración del sistema

- Configura el sistema para ver todos los archivos ocultos



Descarga las siguientes herramientas:

• Vundofix.exe --> Copia la nota sobre como utililzarlo
  
• Killbox
  
• Regseeker
  
• Disk Cleaner
  
  
  Reinicia el sistema en modo a prueba de fallos (modo seguro)

Copia y pega las siguientes entradas en el Killbox (una a la vez) donde dice "Full Path of File to Delete" y le das click al boton rojo con cruz blanca del programa para eliminar el archivo:

C:\WINDOWS\TEMP\idd73F.tmp.exe

C:\WINDOWS\TEMP\idd1168.tmp.exe

C:\Documents and Settings\Propietario\Configuración local\Archivos temporales de Internet\Content.IE5\6XMYSSGF\L2[1].exe

C:\WINDOWS\system32\mljhhgf.dll

C:\WINDOWS\Temp\win39E.tmp.exe

C:\WINDOWS\system32\winhoq32.dll


Borra también todos los archivos con extensión .tmp.exe que vez allí en la lista que dejaste


Reinicia en modo normal y ejecuta el vundofix siguiendo los pasos que te pedí copiar


Haz un nuevo chequeo con los antivirus online y me cuentas



Salu2

Vale, ya no registran ningún problema, logs limpios y ni rastro del Dialer... eternamente agradecido ¡Qué gusto da trabajar sin que salga la ventanita de marras!