Hola a todos!!

No se q le ocurre a mi pc, pero llevo unos días q no puedo abrir el administrador de tareas ni el antivirus (tengo el Norton 2005). Supongo q se debe a un virus. He pasado los programas Spybot y Ad-Aware y he borrado todo lo q estaba mal, pero aún así sigo sin poder ejecutarlos.

He intentado actualizar el antivirus (el cuál sospechosamente ahora aparece como caducado) de hacer lo q decías,no he podido y sigo sin poder abrir el administrador de tareas. Pulso ctrl-alt-supr y no se abre la ventana, aunq en la parte inferior derecha de la pantalla aparece el icono del administrador.

Al darle a ctrl-alt-supr me sale una ventana que me dice El Administrador de tareas ha sido deshabilitado por un Administrador.

Necesito Ayuda!

holassss, has un escaneo online con el ewido y el kasperksy, en ese orden, nos pegas los reportes que ambos te generen, y los encuentras aki!!!!






salu2

Tras una ardua tarea (por lo que a tardado) aqui les dejo lo que me reportan cada uno:

KASPERSKY:

-------------------------------------------------------------------------------
KASPERSKY ONLINE SCANNER REPORT
Thursday, July 13, 2006 11:37:06 PM
Operating System: Microsoft Windows XP Professional, Service Pack 2 (Build 2600)
Kaspersky Online Scanner version: 5.0.83.0
Kaspersky Anti-Virus database last update: 13/07/2006
Kaspersky Anti-Virus database records: 194746
-------------------------------------------------------------------------------

Scan Settings:
Scan using the following antivirus database: standard
Scan Archives: true
Scan Mail Bases: true

Scan Target - My Computer:
A:\
C:\
D:\
E:\
F:\

Scan Statistics:
Total number of scanned objects: 228789
Number of viruses found: 7
Number of infected objects: 9 / 0
Number of suspicious objects: 0
Duration of the scan process: 02:44:46

Infected Object Name / Virus Name / Last Action
C:\Archivos de programa\eMule\Temp\001.part Object is locked skipped
C:\Archivos de programa\eMule\Temp\002.part Object is locked skipped
C:\Archivos de programa\ESET\cache\CACHE.NDB Object is locked skipped
C:\Archivos de programa\ESET\logs\virlog.dat Object is locked skipped
C:\Archivos de programa\ESET\logs\warnlog.dat Object is locked skipped
C:\Documents and Settings\LocalService\Configuración local\Archivos temporales de Internet\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Configuración local\Datos de programa\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\LocalService\Configuración local\Datos de programa\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\LocalService\Configuración local\Historial\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\Configuración local\Datos de programa\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\NetworkService\Configuración local\Datos de programa\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\usuario\Configuración local\Archivos temporales de Internet\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\usuario\Configuración local\Datos de programa\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\usuario\Configuración local\Datos de programa\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\usuario\Configuración local\Historial\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\usuario\Configuración local\Historial\History.IE5\MSHist0120060713200607 14\index.dat Object is locked skipped
C:\Documents and Settings\usuario\Configuración local\Temp\Acr176.tmp Object is locked skipped
C:\Documents and Settings\usuario\Configuración local\Temp\Perflib_Perfdata_41c.dat Object is locked skipped
C:\Documents and Settings\usuario\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\usuario\Escritorio\cordero\LOSTFILE\DIR31 39\0358452C.dll Infected: Trojan-Downloader.Win32.Zlob.cs skipped
C:\Documents and Settings\usuario\Escritorio\cordero\LOSTFILE\DIR31 39\204179EB.tmp Infected: Trojan-Downloader.Java.OpenConnection.aj skipped
C:\Documents and Settings\usuario\Escritorio\cordero\LOSTFILE\DIR31 39\2154130A.tmp Infected: Trojan.Java.ClassLoader.ak skipped
C:\Documents and Settings\usuario\Escritorio\cordero\LOSTFILE\DIR31 39\3B7D6A3F.tmp Infected: Trojan-Downloader.Java.OpenConnection.aj skipped
C:\Documents and Settings\usuario\Escritorio\cordero\LOSTFILE\DIR31 39\53546314.tmp Infected: Trojan-Downloader.Win32.Zlob.bv skipped
C:\Documents and Settings\usuario\Escritorio\cordero\LOSTFILE\DIR31 39\56372EE6.tmp Infected: Trojan-Downloader.Java.OpenConnection.ae skipped
C:\Documents and Settings\usuario\Escritorio\cordero\LOSTFILE\DIR31 39\5F545BEB.tmp Infected: Trojan-Downloader.Java.OpenConnection.ah skipped
C:\Documents and Settings\usuario\Escritorio\cordero\LOSTFILE\DIR31 39\6A827281.exe Infected: Trojan-Spy.Win32.Banker.ant skipped
C:\Documents and Settings\usuario\Escritorio\cordero\LOSTFILE\DIR31 39\6C200E86.tmp Infected: Trojan-Downloader.Java.OpenConnection.ae skipped
C:\Documents and Settings\usuario\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\usuario\ntuser.dat.LOG Object is locked skipped
C:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped
C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped
C:\WINDOWS\SchedLgU.Txt Object is locked skipped
C:\WINDOWS\SoftwareDistribution\EventCache\{81B635 BD-575F-4103-B07F-1573E332D8D9}.bin Object is locked skipped
C:\WINDOWS\SoftwareDistribution\ReportingEvents.lo g Object is locked skipped
C:\WINDOWS\system32\CatRoot2\edb.log Object is locked skipped
C:\WINDOWS\system32\CatRoot2\tmp.edb Object is locked skipped
C:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\default Object is locked skipped
C:\WINDOWS\system32\config\default.LOG Object is locked skipped
C:\WINDOWS\system32\config\SAM Object is locked skipped
C:\WINDOWS\system32\config\SAM.LOG Object is locked skipped
C:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\SECURITY Object is locked skipped
C:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped
C:\WINDOWS\system32\config\software Object is locked skipped
C:\WINDOWS\system32\config\software.LOG Object is locked skipped
C:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\system Object is locked skipped
C:\WINDOWS\system32\config\system.LOG Object is locked skipped
C:\WINDOWS\system32\h323log.txt Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MA P Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MA P Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DAT A Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP Object is locked skipped
C:\WINDOWS\WindowsUpdate.log Object is locked skipped

Scan process completed.

EWIDO:

__________________________________________________
ewido anti-spyware online scanner
http://www.ewido.net
__________________________________________________


Name: TrackingCookie.Yieldmanager
Path: C:\Documents and Settings\usuario\Cookies\usuario@ad.yieldmanager[2].txt
Risk: Medium

Name: TrackingCookie.Clickhype
Path: C:\Documents and Settings\usuario\Cookies\usuario@ad1.clickhype[1].txt
Risk: Medium

Name: TrackingCookie.Revenue
Path: C:\Documents and Settings\usuario\Cookies\usuario@ads0.revenue[1].txt
Risk: Medium

Name: TrackingCookie.Revenue
Path: C:\Documents and Settings\usuario\Cookies\usuario@ads1.revenue[1].txt
Risk: Medium

Name: TrackingCookie.Falkag
Path: C:\Documents and Settings\usuario\Cookies\usuario@as-eu.falkag[2].txt
Risk: Medium

Name: TrackingCookie.Atdmt
Path: C:\Documents and Settings\usuario\Cookies\usuario@atdmt[2].txt
Risk: Medium

Name: TrackingCookie.Burstnet
Path: C:\Documents and Settings\usuario\Cookies\usuario@burstnet[2].txt
Risk: Medium

Name: TrackingCookie.Doubleclick
Path: C:\Documents and Settings\usuario\Cookies\usuario@doubleclick[1].txt
Risk: Medium

Name: TrackingCookie.Masterstats
Path: C:\Documents and Settings\usuario\Cookies\usuario@image.masterstats[1].txt
Risk: Medium

Name: TrackingCookie.2o7
Path: C:\Documents and Settings\usuario\Cookies\usuario@metacafe.122.2o7[1].txt
Risk: Medium

Name: TrackingCookie.Adjuggler
Path: C:\Documents and Settings\usuario\Cookies\usuario@rotator.adjuggler[1].txt
Risk: Medium

Name: TrackingCookie.Webtrendslive
Path: C:\Documents and Settings\usuario\Cookies\usuario@statse.webtrendsl ive[1].txt
Risk: Medium

Name: TrackingCookie.Tacoda
Path: C:\Documents and Settings\usuario\Cookies\usuario@tacoda[1].txt
Risk: Medium

Name: TrackingCookie.Burstnet
Path: C:\Documents and Settings\usuario\Cookies\usuario@www.burstnet[2].txt
Risk: Medium

Name: TrackingCookie.2o7
Path: C:\Documents and Settings\usuario\Escritorio\cordero\LOSTFILE\DIR24 \borja@112.2o7[2].txt
Risk: Medium

Name: TrackingCookie.Realcastmedia
Path: C:\Documents and Settings\usuario\Escritorio\cordero\LOSTFILE\DIR24 \borja@ads.realcastmedia[1].txt
Risk: Medium

Name: TrackingCookie.Bpath
Path: C:\Documents and Settings\usuario\Escritorio\cordero\LOSTFILE\DIR24 \borja@ads50.bpath[2].txt
Risk: Medium

Name: TrackingCookie.Com
Path: C:\Documents and Settings\usuario\Escritorio\cordero\LOSTFILE\DIR24 \borja@com[1].txt
Risk: Medium

Name: TrackingCookie.2o7
Path: C:\Documents and Settings\usuario\Escritorio\cordero\LOSTFILE\DIR24 \borja@finishline.122.2o7[1].txt
Risk: Medium

Name: TrackingCookie.Starware
Path: C:\Documents and Settings\usuario\Escritorio\cordero\LOSTFILE\DIR24 \borja@starware[2].txt
Risk: Medium

Name: TrackingCookie.Myaffiliateprogram
Path: C:\Documents and Settings\usuario\Escritorio\cordero\LOSTFILE\DIR24 \borja@www.myaffiliateprogram[2].txt
Risk: Medium

Name: TrackingCookie.Realcastmedia
Path: C:\Documents and Settings\usuario\Escritorio\cordero\LOSTFILE\DIR24 \borja@www.realcastmedia[2].txt
Risk: Medium

Name: TrackingCookie.Yadro
Path: C:\Documents and Settings\usuario\Escritorio\cordero\LOSTFILE\DIR24 \borja@yadro[1].txt
Risk: Medium

Name: Downloader.Delf.qz
Path: C:\Documents and Settings\usuario\Escritorio\cordero\LOSTFILE\DIR28 44\Morph.aep
Risk: High

Name: TrackingCookie.2o7
Path: C:\Documents and Settings\usuario\Escritorio\cordero\LOSTFILE\DIR29 46\borja@112.2o7[2].txt
Risk: Medium

Name: TrackingCookie.Euroclick
Path: C:\Documents and Settings\usuario\Escritorio\cordero\LOSTFILE\DIR29 46\borja@adopt.euroclick[2].txt
Risk: Medium

Name: TrackingCookie.Realcastmedia
Path: C:\Documents and Settings\usuario\Escritorio\cordero\LOSTFILE\DIR29 46\borja@ads.realcastmedia[1].txt
Risk: Medium

Name: TrackingCookie.Bpath
Path: C:\Documents and Settings\usuario\Escritorio\cordero\LOSTFILE\DIR29 46\borja@ads41.bpath[1].txt
Risk: Medium

Name: TrackingCookie.Bpath
Path: C:\Documents and Settings\usuario\Escritorio\cordero\LOSTFILE\DIR29 46\borja@ads43.bpath[1].txt
Risk: Medium

Name: TrackingCookie.Bpath
Path: C:\Documents and Settings\usuario\Escritorio\cordero\LOSTFILE\DIR29 46\borja@ads44.bpath[1].txt
Risk: Medium

Name: TrackingCookie.Bpath
Path: C:\Documents and Settings\usuario\Escritorio\cordero\LOSTFILE\DIR29 46\borja@ads46.bpath[1].txt
Risk: Medium

Name: TrackingCookie.Burstnet
Path: C:\Documents and Settings\usuario\Escritorio\cordero\LOSTFILE\DIR29 46\borja@burstnet[2].txt
Risk: Medium

Name: TrackingCookie.Com
Path: C:\Documents and Settings\usuario\Escritorio\cordero\LOSTFILE\DIR29 46\borja@com[2].txt
Risk: Medium

Name: TrackingCookie.Clickzs
Path: C:\Documents and Settings\usuario\Escritorio\cordero\LOSTFILE\DIR29 46\borja@cz3.clickzs[2].txt
Risk: Medium

Name: TrackingCookie.Clickzs
Path: C:\Documents and Settings\usuario\Escritorio\cordero\LOSTFILE\DIR29 46\borja@cz6.clickzs[1].txt
Risk: Medium

Name: TrackingCookie.Overture
Path: C:\Documents and Settings\usuario\Escritorio\cordero\LOSTFILE\DIR29 46\borja@data3.perf.overture[1].txt
Risk: Medium

Name: TrackingCookie.Masterstats
Path: C:\Documents and Settings\usuario\Escritorio\cordero\LOSTFILE\DIR29 46\borja@image.masterstats[1].txt
Risk: Medium

Name: TrackingCookie.Ivwbox
Path: C:\Documents and Settings\usuario\Escritorio\cordero\LOSTFILE\DIR29 46\borja@ivwbox[1].txt
Risk: Medium

Name: TrackingCookie.2o7
Path: C:\Documents and Settings\usuario\Escritorio\cordero\LOSTFILE\DIR29 46\borja@metacafe.122.2o7[1].txt
Risk: Medium

Name: TrackingCookie.2o7
Path: C:\Documents and Settings\usuario\Escritorio\cordero\LOSTFILE\DIR29 46\borja@microsofteup.112.2o7[1].txt
Risk: Medium

Name: TrackingCookie.2o7
Path: C:\Documents and Settings\usuario\Escritorio\cordero\LOSTFILE\DIR29 46\borja@microsoftwga.112.2o7[1].txt
Risk: Medium

Name: TrackingCookie.2o7
Path: C:\Documents and Settings\usuario\Escritorio\cordero\LOSTFILE\DIR29 46\borja@msninvite.112.2o7[1].txt
Risk: Medium

Name: TrackingCookie.2o7
Path: C:\Documents and Settings\usuario\Escritorio\cordero\LOSTFILE\DIR29 46\borja@msnportal.112.2o7[1].txt
Risk: Medium

Name: TrackingCookie.2o7
Path: C:\Documents and Settings\usuario\Escritorio\cordero\LOSTFILE\DIR29 46\borja@pinnaclesystems.122.2o7[1].txt
Risk: Medium

Name: TrackingCookie.Adjuggler
Path: C:\Documents and Settings\usuario\Escritorio\cordero\LOSTFILE\DIR29 46\borja@rotator.adjuggler[2].txt
Risk: Medium

Name: TrackingCookie.Serving-sys
Path: C:\Documents and Settings\usuario\Escritorio\cordero\LOSTFILE\DIR29 46\borja@serving-sys[1].txt
Risk: Medium

Name: TrackingCookie.2o7
Path: C:\Documents and Settings\usuario\Escritorio\cordero\LOSTFILE\DIR29 46\borja@sonymediasoftware.122.2o7[1].txt
Risk: Medium

Name: TrackingCookie.Adbrite
Path: C:\Documents and Settings\usuario\Escritorio\cordero\LOSTFILE\DIR29 46\borja@stats.adbrite[1].txt
Risk: Medium

Name: TrackingCookie.Tacoda
Path: C:\Documents and Settings\usuario\Escritorio\cordero\LOSTFILE\DIR29 46\borja@tacoda[1].txt
Risk: Medium

Name: TrackingCookie.2o7
Path: C:\Documents and Settings\usuario\Escritorio\cordero\LOSTFILE\DIR29 46\borja@vodafonees.122.2o7[1].txt
Risk: Medium

Name: TrackingCookie.Burstnet
Path: C:\Documents and Settings\usuario\Escritorio\cordero\LOSTFILE\DIR29 46\borja@www.burstnet[2].txt
Risk: Medium

Name: TrackingCookie.Myaffiliateprogram
Path: C:\Documents and Settings\usuario\Escritorio\cordero\LOSTFILE\DIR29 46\borja@www.myaffiliateprogram[1].txt
Risk: Medium

Name: TrackingCookie.Yadro
Path: C:\Documents and Settings\usuario\Escritorio\cordero\LOSTFILE\DIR29 46\borja@yadro[2].txt
Risk: Medium

Name: Trojan.Susear.a
Path: C:\Documents and Settings\usuario\Escritorio\cordero\LOSTFILE\DIR32 31\flash1\dic\atokl0.dat
Risk: High

PD: sigo teniendo el mismo problema, Help Me Please!

holasss, realiza estos pasos, intenta seguirlos tal y como te los escribo:

-apaga restaura el sistema

-ver archivos ocultos

-reinicia en modo apreuba de fallos

-busca y elimina:

C:\Documents and Settings\usuario\Escritorio\cordero\LOSTFILE\DIR31 39\0358452C.dll

C:\Documents and Settings\usuario\Escritorio\cordero\LOSTFILE\DIR31 39\204179EB.tmp

C:\Documents and Settings\usuario\Escritorio\cordero\LOSTFILE\DIR31 39\2154130A.tmp

C:\Documents and Settings\usuario\Escritorio\cordero\LOSTFILE\DIR31 39\3B7D6A3F.tmp

C:\Documents and Settings\usuario\Escritorio\cordero\LOSTFILE\DIR31 39\53546314.tmp

C:\Documents and Settings\usuario\Escritorio\cordero\LOSTFILE\DIR31 39\56372EE6.tmp

C:\Documents and Settings\usuario\Escritorio\cordero\LOSTFILE\DIR31 \5F545BEB.tmp

C:\Documents and Settings\usuario\Escritorio\cordero\LOSTFILE\DIR31 39\6A827281.exe

C:\Documents and Settings\usuario\Escritorio\cordero\LOSTFILE\DIR31 39\6C200E86.tmp

C:\Documents and Settings\usuario\Escritorio\cordero\LOSTFILE\DIR28 44\Morph.aep

C:\Documents and Settings\usuario\Escritorio\cordero\LOSTFILE\DIR32 31\flash1\dic\atokl0.dat

si no se dejan utiliza killbox,
y una duda, que es eso de cordero, si es un programa, eliminalo, o si es una carpeta que contenga nada importante tambien eliminala, que es la cuasante de tus infecciones

-pasa el disk cleaner para limpiar el cookies y temporales

-pasa el regseeker para limpiar el registro

-utiliza el ewido anti-malware

-nos cuentas como te fue...



salu2