Virus lollipop con anuncios.(Solucionado)

**nohusu** · 23/12/12, 11:10:41

Buenas queria comentaros q tengo un virus llamado lollipop el cual hace q me salgan ventanas de publicidad todo el rato y la verdad es q es un engorro he mirado en google como solucionarlo y me ha salido vuestro foro en el dabais como solucionarlo y me he descargado OTL tal y como poniais he copiado y pegado lo q mostrabais para analizarlo pero ya no se como continuar soy muy torpe para todo esto me podeis ayudar por favor un saludo.

**Raudron** · 23/12/12, 11:16:08

Hola Susana

Bienvenida a ForoSpyware.

Temas de interés:
Políticas del foro de InfoSpyware.
Consejos para antes de publicar un nuevo mensaje.
Se aceptan DONACIONES.

No pegues el reporte de OTL. Por el momento vamos a intentar con lo siguiente:

Realiza los pasos indicados en la siguiente guía:

Eliminar Adware Navipromo

Recuerda leer atentamente el manual de NAVILOG1, y ejecutarlo como se menciona allí.

En tu próxima respuesta, pega los reportes de NAVILOG1, SUPERAntiSpyware, y Panda ActiveScan 2.0.
Y nos comentas si siguen apareciendo los popups publicitarios.
Saludos

**nohusu** · 23/12/12, 11:29:52

Fix Navipromo version 4.1.1 se inicio el 23/12/2012 17:28:13,09

!!! Peligro, este reporte incluye archivos/programas legitimos!!!
!!! Postee este reporte, en el foro donde esta recibiendo ayuda !!!

Fix, ejecutado desde C:\navilog1

Actualizado el 07.04.2012 a las 20h00 por IL-MAFIOSO

Microsoft Windows XP Home Edition ( v5.1.2600 ) Service Pack 3
X86-based PC ( Uniprocessor Free : AMD Athlon(tm) 64 Processor 3500+ )
BIOS : Phoenix - Award BIOS v6.00PG
USER : javi ( Administrator )
BOOT : Normal boot

Antivirus : avast! Antivirus 5.0.117441986 (Activated)

C:\ (Local Disk) - NTFS - Total:83 Go (Free:19 Go)
F:\ (CD or DVD) - CDFS - Total:0 Go (Free:0 Go)
G:\ (CD or DVD) - CDFS - Total:0 Go (Free:0 Go)

Busqueda efectuada en Modo Normal

Ninguna Infección Navipromo/Egdaccess encontrado

*** Scan completado 23/12/2012 17:28:48,06 ***

**Raudron** · 23/12/12, 11:36:33

Hola,

Bien

Aunque en la guía pide ejecutar NAVILOG1 en Modo Seguro, no te preocupes... segui con los siguientes pasos

Esperamos los reportes de SAS y de Panda ActiveScan.
Recuerda comentarnos cómo funciona tu ordenador

Saludos

**nohusu** · 23/12/12, 11:46:55

Buenas de momento no me ha saltado ningun anuncio aun asi,os mando los informes dl escaneo del panda?El sas no le tengo instalado

**Raudron** · 23/12/12, 11:53:46

Hola,

Sí, realiza el escaneo online con Panda ActiveScan 2.0 y traenos su reporte (Guarda el reporte presionando Exportar a)
Instala SAS y realiza un escaneo completo, no va a haber ningún problema

Saludos

**nohusu** · 24/12/12, 03:11:37

;***********************************************************************************************************************************************************************************
ANALYSIS: 2012-12-24 09:09:24
PROTECTIONS: 1
MALWARE: 17
SUSPECTS: 0
;***********************************************************************************************************************************************************************************
PROTECTIONS
Description Version Active Updated
;===================================================================================================================================================================================
avast! Antivirus 5.0.117441986 No Yes
;===================================================================================================================================================================================
MALWARE
Id Description Type Active Severity Disinfectable Disinfected Location
;===================================================================================================================================================================================
00139061 Cookie/Doubleclick TrackingCookie No 0 Yes No c:\documents and settings\javi.javi-\cookies\wxifluhk.txt
00139061 Cookie/Doubleclick TrackingCookie No 0 Yes No c:\documents and settings\javi\cookies\javi@doubleclick[1].txt
00145731 Cookie/Tribalfusion TrackingCookie No 0 Yes No c:\documents and settings\javi\cookies\javi@tribalfusion[1].txt
00145738 Cookie/Mediaplex TrackingCookie No 0 Yes No c:\documents and settings\javi\cookies\javi@mediaplex[2].txt
00145758 Cookie/Mysearch TrackingCookie No 0 Yes No c:\documents and settings\javi\cookies\javi@mysearch[2].txt
00168056 Cookie/YieldManager TrackingCookie No 0 Yes No c:\documents and settings\javi\cookies\[email protected][2].txt
00168061 Cookie/Apmebf TrackingCookie No 0 Yes No c:\documents and settings\javi\cookies\javi@apmebf[1].txt
00168090 Cookie/Serving-sys TrackingCookie No 0 Yes No c:\documents and settings\javi\cookies\javi@serving-sys[1].txt
00168093 Cookie/Serving-sys TrackingCookie No 0 Yes No c:\documents and settings\javi\cookies\[email protected][2].txt
00168106 Cookie/Weborama TrackingCookie No 0 Yes No c:\documents and settings\javi\cookies\javi@weborama[1].txt
00169190 Cookie/Advertising TrackingCookie No 0 Yes No c:\documents and settings\javi\cookies\javi@advertising[2].txt
00170304 Cookie/WebtrendsLive TrackingCookie No 0 Yes No c:\documents and settings\javi\cookies\[email protected][2].txt
00173520 Cookie/Bluestreak TrackingCookie No 0 Yes No c:\documents and settings\javi\cookies\javi@bluestreak[2].txt
00191644 Cookie/adultfriendfinder TrackingCookie No 0 Yes No c:\documents and settings\javi\cookies\javi@adultfriendfinder[1].txt
00273339 Cookie/Smartadserver TrackingCookie No 0 Yes No c:\documents and settings\javi\cookies\javi@smartadserver[1].txt
00624454 Trj/Genetic.gen Virus/Trojan No 0 Yes No c:\system volume information\_restore{0b411404-2479-4043-bbbd-6642d3d3b33a}\rp128\a0015596.exe
03919098 Generic Malware Virus/Trojan No 0 Yes No c:\documents and settings\javi\mis documentos\mis archivos recibidos\aio_activadores_2008_by_razor911_.exe
09059027 Exploit/Lotoor.B SecRisk No 0 Yes No c:\documents and settings\javi.javi-\escritorio\i9000\superoneclickv2.1.1-shortfuse.zip[exploits/psneuter]
09059027 Exploit/Lotoor.B SecRisk No 0 Yes No c:\documents and settings\javi.javi-\escritorio\i9000\exploits\psneuter
;===================================================================================================================================================================================
SUSPECTS
Sent Location
;===================================================================================================================================================================================
;===================================================================================================================================================================================
VULNERABILITIES
Id Severity Description
;===================================================================================================================================================================================
;===================================================================================================================================================================================

**nohusu** · 24/12/12, 03:52:38

Buenos dias os he mandado el reporte dl panda ,el SASlo he instalado y ejecutado pero no se como mandar el reporte.Muchas gracias por la ayuda que me estas prestando.

Un saludo.

**Raudron** · 24/12/12, 09:49:09

Hola,

De nada amiga

El reporte de SAS lo podés encontrar presionando el botón View Scan Logs

Luego eliminaremos algunas cosas que detectó Panda ActiveScan.

Saludos

**nohusu** · 25/12/12, 14:49:26

SUPERAntiSpyware Scan Log
http://www.superantispyware.com

Generated 12/24/2012 at 09:46 AM

Application Version : 5.6.1014

Core Rules Database Version : 9784
Trace Rules Database Version: 7596

Scan type : Quick Scan
Total Scan Time : 00:04:27

Operating System Information
Windows XP Home Edition 32-bit, Service Pack 3 (Build 5.01.2600)
Administrator

Memory items scanned : 509
Memory threats detected : 0
Registry items scanned : 31705
Registry threats detected : 0
File items scanned : 6087
File threats detected : 59

Adware.Tracking Cookie
C:\Documents and Settings\javi.JAVI-\Cookies\UC3K3UM3.txt [ /mediaplex.com ]
C:\Documents and Settings\javi.JAVI-\Cookies\C8HRMEZ1.txt [ /serving-sys.com ]
C:\Documents and Settings\javi.JAVI-\Cookies\WMMY1370.txt [ /adfarm1.adition.com ]
C:\Documents and Settings\javi.JAVI-\Cookies\5YJYWHWM.txt [ /clickpoint.com ]
C:\Documents and Settings\javi.JAVI-\Cookies\ZVABYFZW.txt [ /display.clickpoint.com ]
C:\Documents and Settings\javi.JAVI-\Cookies\I8UR84DE.txt [ /doubleclick.net ]
C:\Documents and Settings\javi.JAVI-\Cookies\7DARBKEQ.txt [ /ad.yieldmanager.com ]
C:\Documents and Settings\javi.JAVI-\Cookies\DSMC38SC.txt [ /questionmarket.com ]
C:\Documents and Settings\javi.JAVI-\Cookies\4AL0O62M.txt [ /apmebf.com ]
C:\Documents and Settings\javi.JAVI-\Cookies\5SA947BP.txt [ /ad2.adfarm1.adition.com ]
C:\Documents and Settings\javi.JAVI-\Cookies\W2VDHX7Z.txt [ /media6degrees.com ]
C:\Documents and Settings\javi.JAVI-\Cookies\XA8YJFQK.txt [ /www.googleadservices.com ]
C:\Documents and Settings\javi.JAVI-\Cookies\DVJ280QD.txt [ /invitemedia.com ]
C:\Documents and Settings\javi.JAVI-\Cookies\1YWO0J9B.txt [ /zanox.com ]
C:\Documents and Settings\javi.JAVI-\Cookies\AFE1UC1C.txt [ /imrworldwide.com ]
C:\Documents and Settings\javi.JAVI-\Cookies\GA491J22.txt [ /ad.zanox.com ]
C:\DOCUMENTS AND SETTINGS\JAVI\Cookies\javi@mediaplex[2].txt [ Cookie:[email protected]/ ]
C:\DOCUMENTS AND SETTINGS\JAVI\Cookies\javi@serving-sys[1].txt [ Cookie:[email protected]/ ]
C:\DOCUMENTS AND SETTINGS\JAVI\Cookies\[email protected][2].txt [ Cookie:[email protected]/ ]
C:\DOCUMENTS AND SETTINGS\JAVI\Cookies\javi@doubleclick[1].txt [ Cookie:[email protected]/ ]
C:\DOCUMENTS AND SETTINGS\JAVI\Cookies\[email protected][1].txt [ Cookie:[email protected]/ ]
C:\DOCUMENTS AND SETTINGS\JAVI\Cookies\[email protected][2].txt [ Cookie:[email protected]/ ]
C:\DOCUMENTS AND SETTINGS\JAVI\Cookies\[email protected][1].txt [ Cookie:[email protected]/ ]
C:\DOCUMENTS AND SETTINGS\JAVI\Cookies\javi@advertising[2].txt [ Cookie:[email protected]/ ]
C:\DOCUMENTS AND SETTINGS\JAVI\Cookies\javi@tradedoubler[1].txt [ Cookie:[email protected]/ ]
C:\DOCUMENTS AND SETTINGS\JAVI\Cookies\javi@2o7[1].txt [ Cookie:[email protected]/ ]
C:\DOCUMENTS AND SETTINGS\JAVI\Cookies\[email protected][1].txt [ Cookie:[email protected]/ ]
C:\DOCUMENTS AND SETTINGS\JAVI\Cookies\javi@smartadserver[1].txt [ Cookie:[email protected]/ ]
C:\DOCUMENTS AND SETTINGS\JAVI\Cookies\[email protected][1].txt [ Cookie:[email protected]/ ]
C:\DOCUMENTS AND SETTINGS\JAVI\Cookies\javi@media6degrees[2].txt [ Cookie:[email protected]/ ]
C:\DOCUMENTS AND SETTINGS\JAVI\Cookies\[email protected][2].txt [ Cookie:[email protected]/ ]
C:\DOCUMENTS AND SETTINGS\JAVI\Cookies\[email protected][2].txt [ Cookie:[email protected]/ ]
C:\DOCUMENTS AND SETTINGS\JAVI\Cookies\javi@weborama[1].txt [ Cookie:[email protected]/ ]
C:\DOCUMENTS AND SETTINGS\JAVI\Cookies\javi@cgi-bin[2].txt [ Cookie:[email protected]/cgi-bin ]
C:\DOCUMENTS AND SETTINGS\JAVI\Cookies\[email protected][2].txt [ Cookie:[email protected]/ ]
C:\DOCUMENTS AND SETTINGS\JAVI\Cookies\[email protected][2].txt [ Cookie:[email protected]/ ]
C:\DOCUMENTS AND SETTINGS\JAVI\Cookies\[email protected][2].txt [ Cookie:[email protected]/repsolypf/ ]
C:\DOCUMENTS AND SETTINGS\JAVI\Cookies\javi@bluestreak[2].txt [ Cookie:[email protected]/ ]
.doubleclick.net [ C:\DOCUMENTS AND SETTINGS\JAVI.JAVI-\CONFIGURACIóN LOCAL\DATOS DE PROGRAMA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
ad.yieldmanager.com [ C:\DOCUMENTS AND SETTINGS\JAVI.JAVI-\CONFIGURACIóN LOCAL\DATOS DE PROGRAMA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
ad.yieldmanager.com [ C:\DOCUMENTS AND SETTINGS\JAVI.JAVI-\CONFIGURACIóN LOCAL\DATOS DE PROGRAMA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
ad.yieldmanager.com [ C:\DOCUMENTS AND SETTINGS\JAVI.JAVI-\CONFIGURACIóN LOCAL\DATOS DE PROGRAMA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.serving-sys.com [ C:\DOCUMENTS AND SETTINGS\JAVI.JAVI-\CONFIGURACIóN LOCAL\DATOS DE PROGRAMA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.serving-sys.com [ C:\DOCUMENTS AND SETTINGS\JAVI.JAVI-\CONFIGURACIóN LOCAL\DATOS DE PROGRAMA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.weborama.fr [ C:\DOCUMENTS AND SETTINGS\JAVI.JAVI-\CONFIGURACIóN LOCAL\DATOS DE PROGRAMA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.telepizzaes.solution.weborama.fr [ C:\DOCUMENTS AND SETTINGS\JAVI.JAVI-\CONFIGURACIóN LOCAL\DATOS DE PROGRAMA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.telepizzaes.solution.weborama.fr [ C:\DOCUMENTS AND SETTINGS\JAVI.JAVI-\CONFIGURACIóN LOCAL\DATOS DE PROGRAMA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.telepizzaes.solution.weborama.fr [ C:\DOCUMENTS AND SETTINGS\JAVI.JAVI-\CONFIGURACIóN LOCAL\DATOS DE PROGRAMA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.telepizzaes.solution.weborama.fr [ C:\DOCUMENTS AND SETTINGS\JAVI.JAVI-\CONFIGURACIóN LOCAL\DATOS DE PROGRAMA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
ad.yieldmanager.com [ C:\DOCUMENTS AND SETTINGS\JAVI.JAVI-\CONFIGURACIóN LOCAL\DATOS DE PROGRAMA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.serving-sys.com [ C:\DOCUMENTS AND SETTINGS\JAVI.JAVI-\CONFIGURACIóN LOCAL\DATOS DE PROGRAMA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.serving-sys.com [ C:\DOCUMENTS AND SETTINGS\JAVI.JAVI-\CONFIGURACIóN LOCAL\DATOS DE PROGRAMA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.serving-sys.com [ C:\DOCUMENTS AND SETTINGS\JAVI.JAVI-\CONFIGURACIóN LOCAL\DATOS DE PROGRAMA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
ad.yieldmanager.com [ C:\DOCUMENTS AND SETTINGS\JAVI.JAVI-\CONFIGURACIóN LOCAL\DATOS DE PROGRAMA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
ad.yieldmanager.com [ C:\DOCUMENTS AND SETTINGS\JAVI.JAVI-\CONFIGURACIóN LOCAL\DATOS DE PROGRAMA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
ad.yieldmanager.com [ C:\DOCUMENTS AND SETTINGS\JAVI.JAVI-\CONFIGURACIóN LOCAL\DATOS DE PROGRAMA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.lfstmedia.com [ C:\DOCUMENTS AND SETTINGS\JAVI.JAVI-\CONFIGURACIóN LOCAL\DATOS DE PROGRAMA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.naiadsystems.com [ C:\DOCUMENTS AND SETTINGS\JAVI.JAVI-\CONFIGURACIóN LOCAL\DATOS DE PROGRAMA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.naiadsystems.com [ C:\DOCUMENTS AND SETTINGS\JAVI.JAVI-\CONFIGURACIóN LOCAL\DATOS DE PROGRAMA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

Virus lollipop con anuncios.(Solucionado)

Herramientas

Virus lollipop con anuncios.(Solucionado)

re: Virus lollipop con anuncios.(Solucionado)

re: Virus lollipop con anuncios.(Solucionado)

re: Virus lollipop con anuncios.(Solucionado)

re: Virus lollipop con anuncios.(Solucionado)

re: Virus lollipop con anuncios.(Solucionado)

re: Virus lollipop con anuncios.(Solucionado)

re: Virus lollipop con anuncios.(Solucionado)

re: Virus lollipop con anuncios.(Solucionado)

re: Virus lollipop con anuncios.(Solucionado)