Ya pasé el Ewido on-line pero ahora no me detecta el adware. El problema es que sigo teniendolo y no consigo eliminarlo. He leído algo sobre el hijackthis así que lo he pasado. Si sirve de algo por favor comuníquenlo y se los paso. Ah! perdonen la tardanza pero llevo varios días sin conexión en casa. Gracias.

Bienvenido al foro

Realiza un escaneo con Ewido Online y nos pegas el reporte.

Salu2

ya tengo el reporte del karspersky, por lo visto hay varios objetos infectados que no me detectó Ewido ni Panda. Os lo pego para ver si me podéis ayudar. Muchas gracias.

-------------------------------------------------------------------------------
KASPERSKY ONLINE SCANNER REPORT
Thursday, December 14, 2006 5:17:48 AM
Operating System: Microsoft Windows XP Professional, Service Pack 2 (Build 2600)
Kaspersky Online Scanner version: 5.0.83.0
Kaspersky Anti-Virus database last update: 14/12/2006
Kaspersky Anti-Virus database records: 250593
-------------------------------------------------------------------------------

Scan Settings:
Scan using the following antivirus database: extended
Scan Archives: true
Scan Mail Bases: true

Scan Target - My Computer:
A:\
C:\
D:\
E:\
F:\

Scan Statistics:
Total number of scanned objects: 44731
Number of viruses found: 3
Number of infected objects: 5 / 0
Number of suspicious objects: 0
Duration of the scan process: 01:23:39

Infected Object Name / Virus Name / Last Action
C:\Archivos de programa\Alcohol Soft\Alcohol 120\StarWind\logs\starwind.2006-12-13.19-30-19.log Object is locked skipped
C:\Archivos de programa\NavExcel\NavHelper\v2.0.4b\NHelper.dll Infected: not-a-virus:AdWare.Win32.NavExcel.g skipped
C:\Documents and Settings\All Users\Datos de programa\Microsoft\Network\Downloader\qmgr0.dat Object is locked skipped
C:\Documents and Settings\All Users\Datos de programa\Microsoft\Network\Downloader\qmgr1.dat Object is locked skipped
C:\Documents and Settings\jesus\Configuración local\Archivos temporales de Internet\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\jesus\Configuración local\Datos de programa\Microsoft\Media Player\CurrentDatabase_360.wmdb Object is locked skipped
C:\Documents and Settings\jesus\Configuración local\Datos de programa\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\jesus\Configuración local\Datos de programa\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\jesus\Configuración local\Historial\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\jesus\Configuración local\Temp\Perflib_Perfdata_730.dat Object is locked skipped
C:\Documents and Settings\jesus\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\jesus\Datos de programa\Sun\Java\Deployment\cache\javapi\v1.0\jar \arr3.jar-44f46a27-2f4edb41.zip/Counter.class Infected: Trojan.Java.ClassLoader.i skipped
C:\Documents and Settings\jesus\Datos de programa\Sun\Java\Deployment\cache\javapi\v1.0\jar \arr3.jar-44f46a27-2f4edb41.zip/VerifierBug.class Infected: Trojan.Java.ClassLoader.k skipped
C:\Documents and Settings\jesus\Datos de programa\Sun\Java\Deployment\cache\javapi\v1.0\jar \arr3.jar-44f46a27-2f4edb41.zip/Beyond.class Infected: Trojan.Java.ClassLoader.k skipped
C:\Documents and Settings\jesus\Datos de programa\Sun\Java\Deployment\cache\javapi\v1.0\jar \arr3.jar-44f46a27-2f4edb41.zip ZIP: infected - 3 skipped
C:\Documents and Settings\jesus\ntuser.dat Object is locked skipped
C:\Documents and Settings\jesus\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\LocalService\Configuración local\Archivos temporales de Internet\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Configuración local\Datos de programa\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\LocalService\Configuración local\Datos de programa\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\LocalService\Configuración local\Historial\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\Configuración local\Datos de programa\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\NetworkService\Configuración local\Datos de programa\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked skipped
C:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped
C:\WINDOWS\CSC\00000001 Object is locked skipped
C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped
C:\WINDOWS\SchedLgU.Txt Object is locked skipped
C:\WINDOWS\SoftwareDistribution\EventCache\{B71FEE 1F-38A8-427A-B34B-63FD37B2DA44}.bin Object is locked skipped
C:\WINDOWS\SoftwareDistribution\ReportingEvents.lo g Object is locked skipped
C:\WINDOWS\Sti_Trace.log Object is locked skipped
C:\WINDOWS\system32\CatRoot2\edb.log Object is locked skipped
C:\WINDOWS\system32\CatRoot2\tmp.edb Object is locked skipped
C:\WINDOWS\system32\config\ACEEvent.evt Object is locked skipped
C:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\default Object is locked skipped
C:\WINDOWS\system32\config\default.LOG Object is locked skipped
C:\WINDOWS\system32\config\SAM Object is locked skipped
C:\WINDOWS\system32\config\SAM.LOG Object is locked skipped
C:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\SECURITY Object is locked skipped
C:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped
C:\WINDOWS\system32\config\software Object is locked skipped
C:\WINDOWS\system32\config\software.LOG Object is locked skipped
C:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\system Object is locked skipped
C:\WINDOWS\system32\config\system.LOG Object is locked skipped
C:\WINDOWS\system32\drivers\sptd.sys Object is locked skipped
C:\WINDOWS\system32\h323log.txt Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MA P Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MA P Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DAT A Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP Object is locked skipped
C:\WINDOWS\wiadebug.log Object is locked skipped
C:\WINDOWS\wiaservc.log Object is locked skipped
C:\WINDOWS\WindowsUpdate.log Object is locked skipped

Scan process completed.

Hola

Hacé lo siguiente:
1. - Activá la opción ver archivos ocultos.
2. - Reiniciá en Modo Seguro (Modo a prueba de fallos).
3. - Borrá las siguientes archivos:
C:\Archivos de programa\NavExcel\ ==> carpeta entera
C:\Documents and Settings\jesus\Datos de programa\Sun\Java\Deployment\cache\javapi\v1.0\jar \arr3.jar-44f46a27-2f4edb41.zip
4. - Analizá con Ad-aware 1.06 SE Personal.
5. - Limpiá cookies y temporales con Disk Cleaner 1.5.7 y el registro con RegSeeker 1.52.
6. - Reiniciá Windows normalmente y deshacé el paso 1.
7. - Analizá con "Ewido Online Scanner" y "Kaspersky Antivirus Online" en ese orden, guardá sus reportes, y pegá ambos aquí.

Nos contas resultados

Salu2

ya hice los pasos que me dijistes. Ewido no me encontró nada, en cambio Kaspersky me ha encontrado un virus. Te paso el log. Muchas gracias por la ayuda.

-------------------------------------------------------------------------------
KASPERSKY ONLINE SCANNER REPORT
Thursday, December 14, 2006 3:29:10 PM
Operating System: Microsoft Windows XP Professional, Service Pack 2 (Build 2600)
Kaspersky Online Scanner version: 5.0.83.0
Kaspersky Anti-Virus database last update: 14/12/2006
Kaspersky Anti-Virus database records: 250698
-------------------------------------------------------------------------------

Scan Settings:
Scan using the following antivirus database: extended
Scan Archives: true
Scan Mail Bases: true

Scan Target - My Computer:
A:\
C:\
D:\
E:\
F:\

Scan Statistics:
Total number of scanned objects: 45430
Number of viruses found: 1
Number of infected objects: 1 / 0
Number of suspicious objects: 0
Duration of the scan process: 0101

Infected Object Name / Virus Name / Last Action
C:\Archivos de programa\Alcohol Soft\Alcohol 120\StarWind\logs\starwind.2006-12-14.07-10-54.log Object is locked skipped
C:\Archivos de programa\eMule\Temp\001.part Object is locked skipped
C:\Archivos de programa\eMule\Temp\002.part Object is locked skipped
C:\Archivos de programa\eMule\Temp\003.part Object is locked skipped
C:\Archivos de programa\eMule\Temp\004.part Object is locked skipped
C:\Archivos de programa\eMule\Temp\005.part Object is locked skipped
C:\Archivos de programa\eMule\Temp\007.part Object is locked skipped
C:\Archivos de programa\eMule\Temp\008.part Object is locked skipped
C:\Archivos de programa\eMule\Temp\011.part Object is locked skipped
C:\Archivos de programa\eMule\Temp\013.part Object is locked skipped
C:\Archivos de programa\eMule\Temp\014.part Object is locked skipped
C:\Documents and Settings\All Users\Datos de programa\Microsoft\Network\Downloader\qmgr0.dat Object is locked skipped
C:\Documents and Settings\All Users\Datos de programa\Microsoft\Network\Downloader\qmgr1.dat Object is locked skipped
C:\Documents and Settings\jesus\Configuración local\Archivos temporales de Internet\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\jesus\Configuración local\Datos de programa\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\jesus\Configuración local\Datos de programa\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\jesus\Configuración local\Historial\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\jesus\Configuración local\Temp\Perflib_Perfdata_85c.dat Object is locked skipped
C:\Documents and Settings\jesus\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\jesus\ntuser.dat Object is locked skipped
C:\Documents and Settings\jesus\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\LocalService\Configuración local\Archivos temporales de Internet\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Configuración local\Datos de programa\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\LocalService\Configuración local\Datos de programa\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\LocalService\Configuración local\Historial\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\Configuración local\Datos de programa\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\NetworkService\Configuración local\Datos de programa\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked skipped
C:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped
C:\System Volume Information\_restore{AEF1296A-137B-4BD7-AC16-BA20781089AD}\RP645\A0163517.dll Infected: not-a-virus:AdWare.Win32.NavExcel.g skipped
C:\System Volume Information\_restore{AEF1296A-137B-4BD7-AC16-BA20781089AD}\RP645\change.log Object is locked skipped
C:\WINDOWS\CSC\00000001 Object is locked skipped
C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped
C:\WINDOWS\SchedLgU.Txt Object is locked skipped
C:\WINDOWS\SoftwareDistribution\EventCache\{4B41EF EF-A676-4EB0-ACEC-52C9C0B096D0}.bin Object is locked skipped
C:\WINDOWS\SoftwareDistribution\ReportingEvents.lo g Object is locked skipped
C:\WINDOWS\Sti_Trace.log Object is locked skipped
C:\WINDOWS\system32\config\ACEEvent.evt Object is locked skipped
C:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\default Object is locked skipped
C:\WINDOWS\system32\config\default.LOG Object is locked skipped
C:\WINDOWS\system32\config\SAM Object is locked skipped
C:\WINDOWS\system32\config\SAM.LOG Object is locked skipped
C:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\SECURITY Object is locked skipped
C:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped
C:\WINDOWS\system32\config\software Object is locked skipped
C:\WINDOWS\system32\config\software.LOG Object is locked skipped
C:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\system Object is locked skipped
C:\WINDOWS\system32\config\system.LOG Object is locked skipped
C:\WINDOWS\system32\drivers\sptd.sys Object is locked skipped
C:\WINDOWS\system32\h323log.txt Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MA P Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MA P Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DAT A Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP Object is locked skipped
C:\WINDOWS\wiadebug.log Object is locked skipped
C:\WINDOWS\wiaservc.log Object is locked skipped
C:\WINDOWS\WindowsUpdate.log Object is locked skipped

Scan process completed.

Hola...

Tu reporte no presenta nada anómalo...

Virus no tienes.

Solo realiza el siguiente paso:

Apagar Restaurar Sistema.

Y lo vuelves a activar.

Que síntomas presenta en este momento tu Pc.

Nos comentas.

Saludos.

Gracias. Pues creo que nada llamativo... sin embargo escaneo mi pc con el Panda y me detecta más de 20 spyware!! pero Ewildo y Kaspersky no me detectan nada!! Tampoco el Ad-aware SE personal!!! no sé que es lo que detectará...de todas maneras muchas gracias a todos!!

Bueno, si tu Pc no presenta problemas, puede que se haya tratado de un "Falso Positivo"...

Que síntomas anómalos presenta tu Pc, en estos momentos.

Nos comentas.

Saludos.

Pues creo que ninguno...tan sólo me quedaba la duda del análisis del Panda...Creo que el pc ya está curado!! Muchas Gracias Saludos

Hola...

Bueno, en ese caso podemos dar el Tema por Solucionado.

Si tienes algún otro problema o alguna duda, no dudes en crear un Nuevo Tema y Postearlo.

Saludos.