Hola buen dia.. es la primera vez q entro a este foro, necesito ayuda, mi computador esta infectado por un troyano, yo corri el antivirus norton 2005... y me dice q no lo puede reparar ni eliminar. Cada vez q abro cualquier ventana en window me sale una ventana con un mensaje.... ejemplo

dice:

High Risk

Norton Antivirus has detected a virus on your computer

Object Name: C:\Archivos de programa\PCODEC\isaddon.dll
Virus Name: Trojan Horse
Action Taken: Unable to repair this file

Si yo voy a Archivos de programa\PCODEC y trato de borrar esta carpeta no me deja. Adentro está ( isaddon.dll) (isamonitor.exe) (isauninst.exe)


Gracias espero ayuda.. esto me tiene loco.

Hola hood te doy la bienvenida al foro

Recuerda pasar por el windowsupdate.com regularmente y mantener tu sistema actualizado.

Generalmente los Trojan no vienen solos , así que sigue los primeros 9 pasos de Los 11 Pasos fundamentales de una buena eliminación(los scan del paso 7 realizalos con Ewido y Kaspersky)

Pega aquí el reporte que te genere Kaspersky



Nos cuentas como te fue...

hola gracias por tu orientacion, disculpa, cual es el kaspersky?? vi el ewido y lo baje junto con los demás recomendados en los 11 pasos fundamentales para una buena eliminacion.

Gracias de nuevo.

Hola:

Me refiero a Kaspersky Antivirus Online (Usa internet Explorer)

Salu2

no se como pegar el reporte de kaspersky... es que me guardo el reporte como pagina web

ahora si... sorry...

Este es el reporte de Kaspersky

Wednesday, September 13, 2006 9:04:50 AM
Operating System: Microsoft Windows XP Professional, Service Pack 2 (Build 2600)
Kaspersky Online Scanner version: 5.0.83.0
Kaspersky Anti-Virus database last update: 13/09/2006
Kaspersky Anti-Virus database records: 210041


Scan Settings
Scan using the following antivirus database standard
Scan Archives true
Scan Mail Bases true

Scan Target My Computer
A:\
C:\
D:\

Scan Statistics
Total number of scanned objects 108009
Number of viruses found 3
Number of infected objects 5 / 0
Number of suspicious objects 0
Duration of the scan process 0103

Infected Object Name Virus Name Last Action
C:\!KillBox\isaddon.dll Infected: Trojan-Downloader.Win32.Zlob.aiu skipped

C:\!KillBox\isaddon.dll( 1) Infected: Trojan-Downloader.Win32.Zlob.aiu skipped

C:\!KillBox\isamini.exe Infected: Trojan-Downloader.Win32.Zlob.ael skipped

C:\!KillBox\isamonitor.exe Infected: Trojan-Downloader.Win32.Zlob.ael skipped

C:\Documents and Settings\All Users\Datos de programa\Microsoft\Crypto\RSA\MachineKeys\511a0f3f 9e960fa97de3d0b74adfc574_95750950-3c6f-4625-9447-973a60e1c5d1 Object is locked skipped

C:\Documents and Settings\All Users\Datos de programa\Microsoft\Crypto\RSA\MachineKeys\9579725e 33dbc9ccb7bf0f359313cf35_95750950-3c6f-4625-9447-973a60e1c5d1 Object is locked skipped

C:\Documents and Settings\All Users\Datos de programa\Microsoft\Dr Watson\user.dmp Object is locked skipped

C:\Documents and Settings\Equipo3\Configuración local\Archivos temporales de Internet\Content.IE5\index.dat Object is locked skipped

C:\Documents and Settings\Equipo3\Configuración local\Datos de programa\Microsoft\Windows\UsrClass.dat Object is locked skipped

C:\Documents and Settings\Equipo3\Configuración local\Datos de programa\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped

C:\Documents and Settings\Equipo3\Configuración local\Historial\History.IE5\index.dat Object is locked skipped

C:\Documents and Settings\Equipo3\Configuración local\Historial\History.IE5\MSHist0120060913200609 14\index.dat Object is locked skipped

C:\Documents and Settings\Equipo3\Cookies\index.dat Object is locked skipped

C:\Documents and Settings\Equipo3\NTUSER.DAT Object is locked skipped

C:\Documents and Settings\Equipo3\ntuser.dat.LOG Object is locked skipped

C:\Documents and Settings\LocalService\Configuración local\Archivos temporales de Internet\Content.IE5\index.dat Object is locked skipped

C:\Documents and Settings\LocalService\Configuración local\Datos de programa\Microsoft\Windows\UsrClass.dat Object is locked skipped

C:\Documents and Settings\LocalService\Configuración local\Datos de programa\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped

C:\Documents and Settings\LocalService\Configuración local\Historial\History.IE5\index.dat Object is locked skipped

C:\Documents and Settings\LocalService\Cookies\index.dat Object is locked skipped

C:\Documents and Settings\LocalService\NTUSER.DAT Object is locked skipped

C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked skipped

C:\Documents and Settings\NetworkService\Configuración local\Archivos temporales de Internet\Content.IE5\index.dat Object is locked skipped

C:\Documents and Settings\NetworkService\Configuración local\Datos de programa\Microsoft\Windows\UsrClass.dat Object is locked skipped

C:\Documents and Settings\NetworkService\Configuración local\Datos de programa\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped

C:\Documents and Settings\NetworkService\Configuración local\Historial\History.IE5\index.dat Object is locked skipped

C:\Documents and Settings\NetworkService\Cookies\index.dat Object is locked skipped

C:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked skipped

C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked skipped

C:\WINDOWS\$NtUninstallKB824141$\user32.dll Object is locked skipped

C:\WINDOWS\$NtUninstallKB824141$\win32k.sys Object is locked skipped

C:\WINDOWS\$NtUninstallKB826939$\srrstr.dll Object is locked skipped

C:\WINDOWS\$NtUninstallKB828035$\msgsvc.dll Object is locked skipped

C:\WINDOWS\$NtUninstallKB828035$\wkssvc.dll Object is locked skipped

C:\WINDOWS\$NtUninstallKB828741$\catsrv.dll Object is locked skipped

C:\WINDOWS\$NtUninstallKB828741$\catsrvut.dll Object is locked skipped

C:\WINDOWS\$NtUninstallKB828741$\clbcatex.dll Object is locked skipped

C:\WINDOWS\$NtUninstallKB828741$\clbcatq.dll Object is locked skipped

C:\WINDOWS\$NtUninstallKB828741$\colbact.dll Object is locked skipped

C:\WINDOWS\$NtUninstallKB828741$\comadmin.dll Object is locked skipped

C:\WINDOWS\$NtUninstallKB828741$\comrepl.exe Object is locked skipped

C:\WINDOWS\$NtUninstallKB828741$\comsvcs.dll Object is locked skipped

C:\WINDOWS\$NtUninstallKB828741$\comuid.dll Object is locked skipped

C:\WINDOWS\$NtUninstallKB828741$\es.dll Object is locked skipped

C:\WINDOWS\$NtUninstallKB828741$\msdtcprx.dll Object is locked skipped

C:\WINDOWS\$NtUninstallKB828741$\msdtctm.dll Object is locked skipped

C:\WINDOWS\$NtUninstallKB828741$\msdtcuiu.dll Object is locked skipped

C:\WINDOWS\$NtUninstallKB828741$\mtxclu.dll Object is locked skipped

C:\WINDOWS\$NtUninstallKB828741$\mtxoci.dll Object is locked skipped

C:\WINDOWS\$NtUninstallKB828741$\ole32.dll Object is locked skipped

C:\WINDOWS\$NtUninstallKB828741$\rpcrt4.dll Object is locked skipped

C:\WINDOWS\$NtUninstallKB828741$\rpcss.dll Object is locked skipped

C:\WINDOWS\$NtUninstallKB828741$\txflog.dll Object is locked skipped

C:\WINDOWS\$NtUninstallKB835732$\callcont.dll Object is locked skipped

C:\WINDOWS\$NtUninstallKB835732$\cmdevtgprov.dll Object is locked skipped

C:\WINDOWS\$NtUninstallKB835732$\gdi32.dll Object is locked skipped

C:\WINDOWS\$NtUninstallKB835732$\h323.tsp Object is locked skipped

C:\WINDOWS\$NtUninstallKB835732$\h323msp.dll Object is locked skipped

C:\WINDOWS\$NtUninstallKB835732$\helpctr.exe Object is locked skipped

C:\WINDOWS\$NtUninstallKB835732$\ipnathlp.dll Object is locked skipped

C:\WINDOWS\$NtUninstallKB835732$\lsasrv.dll Object is locked skipped

C:\WINDOWS\$NtUninstallKB835732$\mf3216.dll Object is locked skipped

C:\WINDOWS\$NtUninstallKB835732$\msasn1.dll Object is locked skipped

C:\WINDOWS\$NtUninstallKB835732$\msgina.dll Object is locked skipped

C:\WINDOWS\$NtUninstallKB835732$\mst120.dll Object is locked skipped

C:\WINDOWS\$NtUninstallKB835732$\netapi32.dll Object is locked skipped

C:\WINDOWS\$NtUninstallKB835732$\nmcom.dll Object is locked skipped

C:\WINDOWS\$NtUninstallKB835732$\rtcdll.dll Object is locked skipped

C:\WINDOWS\$NtUninstallKB835732$\schannel.dll Object is locked skipped

C:\WINDOWS\$NtUninstallKB835732$\xpsp2res.dll Object is locked skipped

C:\WINDOWS\$NtUninstallKB837001$\dao360.dll Object is locked skipped

C:\WINDOWS\$NtUninstallKB837001$\msexcl40.dll Object is locked skipped

C:\WINDOWS\$NtUninstallKB837001$\msjet40.dll Object is locked skipped

C:\WINDOWS\$NtUninstallKB837001$\msjetoledb40.dll Object is locked skipped

C:\WINDOWS\$NtUninstallKB837001$\msjtes40.dll Object is locked skipped

C:\WINDOWS\$NtUninstallKB837001$\mspbde40.dll Object is locked skipped

C:\WINDOWS\$NtUninstallKB837001$\msrepl40.dll Object is locked skipped

C:\WINDOWS\$NtUninstallKB837001$\mstext40.dll Object is locked skipped

C:\WINDOWS\$NtUninstallKB837001$\msxbde40.dll Object is locked skipped

C:\WINDOWS\$NtUninstallQ828026$\msdxm.ocx Object is locked skipped

C:\WINDOWS\$NtUninstallQ828026$\wmp.dll Object is locked skipped

C:\WINDOWS\CSC\00000001 Object is locked skipped

C:\WINDOWS\Debug\Netlogon.log Object is locked skipped

C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped

C:\WINDOWS\SchedLgU.Txt Object is locked skipped

C:\WINDOWS\SoftwareDistribution\EventCache\{DB40E0 EA-8D20-4F82-A2AF-B0264612AD1B}.bin Object is locked skipped

C:\WINDOWS\SoftwareDistribution\ReportingEvents.lo g Object is locked skipped

C:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped

C:\WINDOWS\system32\config\DEFAULT Object is locked skipped

C:\WINDOWS\system32\config\default.LOG Object is locked skipped

C:\WINDOWS\system32\config\SAM Object is locked skipped

C:\WINDOWS\system32\config\SAM.LOG Object is locked skipped

C:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped

C:\WINDOWS\system32\config\SECURITY Object is locked skipped

C:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped

C:\WINDOWS\system32\config\SOFTWARE Object is locked skipped

C:\WINDOWS\system32\config\software.LOG Object is locked skipped

C:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped

C:\WINDOWS\system32\config\SYSTEM Object is locked skipped

C:\WINDOWS\system32\config\system.LOG Object is locked skipped

C:\WINDOWS\system32\cswnr.exe Infected: Trojan-Downloader.Win32.Agent.uj skipped

C:\WINDOWS\system32\dmbtl.exe Object is locked skipped

C:\WINDOWS\system32\LogFiles\HTTPERR\httperr1.log Object is locked skipped

C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked skipped

C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP Object is locked skipped

C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER Object is locked skipped

C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MA P Object is locked skipped

C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MA P Object is locked skipped

C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DAT A Object is locked skipped

C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP Object is locked skipped

C:\WINDOWS\WindowsUpdate.log Object is locked skipped

Scan process completed.


aun persiste mi problema.... no se q hacer!!!!

Hola:

Pues la mayoría de los archivos detectados los detecta en la cuarentena de Killbox.

Realiza lo siguiente:

Apaga restaurar el sistema

Entra en modo seguro al sistema

Y elimina el siguiente archivo con Killbox(con la opción Delete on reboot)
C:\WINDOWS\system32\cswnr.exe

C:\Archivos de programa\PCODEC\isaddon.dll ---> si lo encuentras borralo

Se reiniciara el sistema después limpia los temporales del sistema , Internet y cookies con disk cleaner , limpia el registro de Windows con RegSeeker(paso 9 de su manual )...pasalo hasta que ya no te salga nada por borrar.

Reinicia el sistema nuevamente y Vacia la cuarentena de Killbox de esta manera:

Abre KillBox , en el menú de File da click sobre "open !KillBox Backups" , se abrirá la carpeta que contiene las copias de seguridad , eliminalas manualmente.

posteriormente realiza otro scan online con Panda.

Si tu problema persiste descarga HijackThis y pega tu log en este mismo tema.

Para ejecutar HijackThis:

Descarga HijackThis, guardarlo en archivos del programa, descomprimelo y dale doble click al icono y le das click a Do a system scan and save log.

Si tienes dudas de como generar un log , mira este flash


Salu2