Foro de InfoSpyware - Foro de Hijackthis - Foro de Virus

Buenas tardes amigos,
soy nuevo en esto y al intentar cargar el spybot me despliega una ventana de alerta y no puedo eliminar el virus command services, podrian ayudarme por favor.

hola, bueno al intentar cargar? , quieres decir, al escanear? o con el teatimer te bloquea alguna llave del registro, si puedes ser mas explicito por favor, para que te podamos ayudar mejor

tambien checa este tema a ver si te sirve de algo, si es a lo que te refieres:

Por que no me elimina el Command Service y ddayx.dll?

salu2

al ejecutar el spybot inmediatamente me muestra esta alerta, si hago caso omiso spybot comienza a escanera y detecta varios virus, elimina todos excepto uno que dice +command service

hola, te muestra la ubicacion de el archivo?

dale en detalles o algo asi, no recuerdo muy bien, bueno solo encuentra la ruta de el archivo que mencion el spybot si es que esta, en caso de no aparecer, escanea con el ewido online y nos pegas el reporte qeu este te genere


salu2

Creo que mi maquina parece laboratorio, te envio el reporte de ewido:
__________________________________________________
ewido anti-spyware online scanner
http://www.ewido.net
__________________________________________________


Name: TrackingCookie.Yieldmanager
Path: C:\Documents and Settings\administrador\Cookies\administrador@ad.yi eldmanager[2].txt
Risk: Medium

Name: TrackingCookie.Atdmt
Path: C:\Documents and Settings\administrador\Cookies\administrador@atdmt[2].txt
Risk: Medium

Name: TrackingCookie.2o7
Path: C:\Documents and Settings\administrador\Cookies\administrador@msnpo rtal.112.2o7[1].txt
Risk: Medium

Name: Hijacker.Small.jf
Path: C:\Archivos de programa\InstallShield Installation Information\xupyhah.html
Risk: High

Name: Hijacker.Small.jf
Path: C:\Archivos de programa\Synaptics\vimofufaz.html
Risk: High

Name: TrackingCookie.2o7
Path: C:\Documents and Settings\administrador\Cookies\administrador@2o7[2].txt
Risk: Medium

Name: TrackingCookie.Statcounter
Path: C:\Documents and Settings\administrador\Cookies\administrador@statc ounter[1].txt
Risk: Medium

Name: TrackingCookie.2o7
Path: :mozilla.7:C:\Documents and Settings\administrador\Datos de programa\Mozilla\Firefox\Profiles\jvpjzgt3.default \cookies.txt.old
Risk: Medium

Name: TrackingCookie.2o7
Path: :mozilla.8:C:\Documents and Settings\administrador\Datos de programa\Mozilla\Firefox\Profiles\jvpjzgt3.default \cookies.txt.old
Risk: Medium

Name: TrackingCookie.2o7
Path: :mozilla.9:C:\Documents and Settings\administrador\Datos de programa\Mozilla\Firefox\Profiles\jvpjzgt3.default \cookies.txt.old
Risk: Medium

Name: TrackingCookie.2o7
Path: :mozilla.10:C:\Documents and Settings\administrador\Datos de programa\Mozilla\Firefox\Profiles\jvpjzgt3.default \cookies.txt.old
Risk: Medium

Name: TrackingCookie.2o7
Path: :mozilla.11:C:\Documents and Settings\administrador\Datos de programa\Mozilla\Firefox\Profiles\jvpjzgt3.default \cookies.txt.old
Risk: Medium

Name: TrackingCookie.2o7
Path: :mozilla.12:C:\Documents and Settings\administrador\Datos de programa\Mozilla\Firefox\Profiles\jvpjzgt3.default \cookies.txt.old
Risk: Medium

Name: TrackingCookie.2o7
Path: :mozilla.13:C:\Documents and Settings\administrador\Datos de programa\Mozilla\Firefox\Profiles\jvpjzgt3.default \cookies.txt.old
Risk: Medium

Name: TrackingCookie.2o7
Path: :mozilla.14:C:\Documents and Settings\administrador\Datos de programa\Mozilla\Firefox\Profiles\jvpjzgt3.default \cookies.txt.old
Risk: Medium

Name: TrackingCookie.2o7
Path: :mozilla.15:C:\Documents and Settings\administrador\Datos de programa\Mozilla\Firefox\Profiles\jvpjzgt3.default \cookies.txt.old
Risk: Medium

Name: TrackingCookie.2o7
Path: :mozilla.16:C:\Documents and Settings\administrador\Datos de programa\Mozilla\Firefox\Profiles\jvpjzgt3.default \cookies.txt.old
Risk: Medium

Name: TrackingCookie.2o7
Path: :mozilla.17:C:\Documents and Settings\administrador\Datos de programa\Mozilla\Firefox\Profiles\jvpjzgt3.default \cookies.txt.old
Risk: Medium

Name: TrackingCookie.Adbrite
Path: :mozilla.28:C:\Documents and Settings\administrador\Datos de programa\Mozilla\Firefox\Profiles\jvpjzgt3.default \cookies.txt.old
Risk: Medium

Name: TrackingCookie.Adbrite
Path: :mozilla.29:C:\Documents and Settings\administrador\Datos de programa\Mozilla\Firefox\Profiles\jvpjzgt3.default \cookies.txt.old
Risk: Medium

Name: TrackingCookie.Pointroll
Path: :mozilla.31:C:\Documents and Settings\administrador\Datos de programa\Mozilla\Firefox\Profiles\jvpjzgt3.default \cookies.txt.old
Risk: Medium

Name: TrackingCookie.Pointroll
Path: :mozilla.32:C:\Documents and Settings\administrador\Datos de programa\Mozilla\Firefox\Profiles\jvpjzgt3.default \cookies.txt.old
Risk: Medium

Name: TrackingCookie.Pointroll
Path: :mozilla.33:C:\Documents and Settings\administrador\Datos de programa\Mozilla\Firefox\Profiles\jvpjzgt3.default \cookies.txt.old
Risk: Medium

Name: TrackingCookie.Pointroll
Path: :mozilla.34:C:\Documents and Settings\administrador\Datos de programa\Mozilla\Firefox\Profiles\jvpjzgt3.default \cookies.txt.old
Risk: Medium

Name: TrackingCookie.Falkag
Path: :mozilla.39:C:\Documents and Settings\administrador\Datos de programa\Mozilla\Firefox\Profiles\jvpjzgt3.default \cookies.txt.old
Risk: Medium

Name: TrackingCookie.Falkag
Path: :mozilla.40:C:\Documents and Settings\administrador\Datos de programa\Mozilla\Firefox\Profiles\jvpjzgt3.default \cookies.txt.old
Risk: Medium

Name: TrackingCookie.Falkag
Path: :mozilla.41:C:\Documents and Settings\administrador\Datos de programa\Mozilla\Firefox\Profiles\jvpjzgt3.default \cookies.txt.old
Risk: Medium

Name: TrackingCookie.Falkag
Path: :mozilla.42:C:\Documents and Settings\administrador\Datos de programa\Mozilla\Firefox\Profiles\jvpjzgt3.default \cookies.txt.old
Risk: Medium

Name: TrackingCookie.Serving-sys
Path: :mozilla.53:C:\Documents and Settings\administrador\Datos de programa\Mozilla\Firefox\Profiles\jvpjzgt3.default \cookies.txt.old
Risk: Medium

Name: TrackingCookie.Com
Path: :mozilla.63:C:\Documents and Settings\administrador\Datos de programa\Mozilla\Firefox\Profiles\jvpjzgt3.default \cookies.txt.old
Risk: Medium

Name: TrackingCookie.Com
Path: :mozilla.64:C:\Documents and Settings\administrador\Datos de programa\Mozilla\Firefox\Profiles\jvpjzgt3.default \cookies.txt.old
Risk: Medium

Name: TrackingCookie.Com
Path: :mozilla.65:C:\Documents and Settings\administrador\Datos de programa\Mozilla\Firefox\Profiles\jvpjzgt3.default \cookies.txt.old
Risk: Medium

Name: TrackingCookie.Adbutler
Path: :mozilla.134:C:\Documents and Settings\administrador\Datos de programa\Mozilla\Firefox\Profiles\jvpjzgt3.default \cookies.txt.old
Risk: Medium

Name: TrackingCookie.Adbutler
Path: :mozilla.135:C:\Documents and Settings\administrador\Datos de programa\Mozilla\Firefox\Profiles\jvpjzgt3.default \cookies.txt.old
Risk: Medium

Name: TrackingCookie.2o7
Path: :mozilla.187:C:\Documents and Settings\administrador\Datos de programa\Mozilla\Firefox\Profiles\jvpjzgt3.default \cookies.txt.old
Risk: Medium

Name: TrackingCookie.Oewabox
Path: :mozilla.203:C:\Documents and Settings\administrador\Datos de programa\Mozilla\Firefox\Profiles\jvpjzgt3.default \cookies.txt.old
Risk: Medium

Name: TrackingCookie.2o7
Path: :mozilla.207:C:\Documents and Settings\administrador\Datos de programa\Mozilla\Firefox\Profiles\jvpjzgt3.default \cookies.txt.old
Risk: Medium

Name: TrackingCookie.Qksrv
Path: :mozilla.220:C:\Documents and Settings\administrador\Datos de programa\Mozilla\Firefox\Profiles\jvpjzgt3.default \cookies.txt.old
Risk: Medium

Name: TrackingCookie.Qksrv
Path: :mozilla.221:C:\Documents and Settings\administrador\Datos de programa\Mozilla\Firefox\Profiles\jvpjzgt3.default \cookies.txt.old
Risk: Medium

Name: TrackingCookie.Revenue
Path: :mozilla.244:C:\Documents and Settings\administrador\Datos de programa\Mozilla\Firefox\Profiles\jvpjzgt3.default \cookies.txt.old
Risk: Medium

Name: TrackingCookie.Serving-sys
Path: :mozilla.252:C:\Documents and Settings\administrador\Datos de programa\Mozilla\Firefox\Profiles\jvpjzgt3.default \cookies.txt.old
Risk: Medium

Name: TrackingCookie.Serving-sys
Path: :mozilla.253:C:\Documents and Settings\administrador\Datos de programa\Mozilla\Firefox\Profiles\jvpjzgt3.default \cookies.txt.old
Risk: Medium

Name: TrackingCookie.Serving-sys
Path: :mozilla.254:C:\Documents and Settings\administrador\Datos de programa\Mozilla\Firefox\Profiles\jvpjzgt3.default \cookies.txt.old
Risk: Medium

Name: TrackingCookie.Serving-sys
Path: :mozilla.255:C:\Documents and Settings\administrador\Datos de programa\Mozilla\Firefox\Profiles\jvpjzgt3.default \cookies.txt.old
Risk: Medium

Name: TrackingCookie.Serving-sys
Path: :mozilla.256:C:\Documents and Settings\administrador\Datos de programa\Mozilla\Firefox\Profiles\jvpjzgt3.default \cookies.txt.old
Risk: Medium

Name: TrackingCookie.Spylog
Path: :mozilla.261:C:\Documents and Settings\administrador\Datos de programa\Mozilla\Firefox\Profiles\jvpjzgt3.default \cookies.txt.old
Risk: Medium

Name: TrackingCookie.Tribalfusion
Path: :mozilla.277:C:\Documents and Settings\administrador\Datos de programa\Mozilla\Firefox\Profiles\jvpjzgt3.default \cookies.txt.old
Risk: Medium

Name: TrackingCookie.Yadro
Path: :mozilla.302:C:\Documents and Settings\administrador\Datos de programa\Mozilla\Firefox\Profiles\jvpjzgt3.default \cookies.txt.old
Risk: Medium

Name: TrackingCookie.Yadro
Path: :mozilla.303:C:\Documents and Settings\administrador\Datos de programa\Mozilla\Firefox\Profiles\jvpjzgt3.default \cookies.txt.old
Risk: Medium

Name: TrackingCookie.Yieldmanager
Path: :mozilla.318:C:\Documents and Settings\administrador\Datos de programa\Mozilla\Firefox\Profiles\jvpjzgt3.default \cookies.txt.old
Risk: Medium

Name: TrackingCookie.Yieldmanager
Path: :mozilla.319:C:\Documents and Settings\administrador\Datos de programa\Mozilla\Firefox\Profiles\jvpjzgt3.default \cookies.txt.old
Risk: Medium

Name: TrackingCookie.Yieldmanager
Path: :mozilla.320:C:\Documents and Settings\administrador\Datos de programa\Mozilla\Firefox\Profiles\jvpjzgt3.default \cookies.txt.old
Risk: Medium

Name: TrackingCookie.Yieldmanager
Path: :mozilla.321:C:\Documents and Settings\administrador\Datos de programa\Mozilla\Firefox\Profiles\jvpjzgt3.default \cookies.txt.old
Risk: Medium

Name: TrackingCookie.Yieldmanager
Path: :mozilla.322:C:\Documents and Settings\administrador\Datos de programa\Mozilla\Firefox\Profiles\jvpjzgt3.default \cookies.txt.old
Risk: Medium

Name: TrackingCookie.Sitestat
Path: :mozilla.381:C:\Documents and Settings\administrador\Datos de programa\Mozilla\Firefox\Profiles\jvpjzgt3.default \cookies.txt.old
Risk: Medium

Name: TrackingCookie.Sitestat
Path: :mozilla.382:C:\Documents and Settings\administrador\Datos de programa\Mozilla\Firefox\Profiles\jvpjzgt3.default \cookies.txt.old
Risk: Medium

Name: TrackingCookie.Cqcounter
Path: :mozilla.388:C:\Documents and Settings\administrador\Datos de programa\Mozilla\Firefox\Profiles\jvpjzgt3.default \cookies.txt.old
Risk: Medium

Name: TrackingCookie.Reliablestats
Path: :mozilla.399:C:\Documents and Settings\administrador\Datos de programa\Mozilla\Firefox\Profiles\jvpjzgt3.default \cookies.txt.old
Risk: Medium

Name: TrackingCookie.Reliablestats
Path: :mozilla.400:C:\Documents and Settings\administrador\Datos de programa\Mozilla\Firefox\Profiles\jvpjzgt3.default \cookies.txt.old
Risk: Medium

Name: TrackingCookie.Reliablestats
Path: :mozilla.401:C:\Documents and Settings\administrador\Datos de programa\Mozilla\Firefox\Profiles\jvpjzgt3.default \cookies.txt.old
Risk: Medium

Name: TrackingCookie.Reliablestats
Path: :mozilla.402:C:\Documents and Settings\administrador\Datos de programa\Mozilla\Firefox\Profiles\jvpjzgt3.default \cookies.txt.old
Risk: Medium

Name: TrackingCookie.Reliablestats
Path: :mozilla.403:C:\Documents and Settings\administrador\Datos de programa\Mozilla\Firefox\Profiles\jvpjzgt3.default \cookies.txt.old
Risk: Medium

Name: TrackingCookie.Reliablestats
Path: :mozilla.404:C:\Documents and Settings\administrador\Datos de programa\Mozilla\Firefox\Profiles\jvpjzgt3.default \cookies.txt.old
Risk: Medium

Name: TrackingCookie.Reliablestats
Path: :mozilla.405:C:\Documents and Settings\administrador\Datos de programa\Mozilla\Firefox\Profiles\jvpjzgt3.default \cookies.txt.old
Risk: Medium

Name: TrackingCookie.Belstat
Path: :mozilla.416:C:\Documents and Settings\administrador\Datos de programa\Mozilla\Firefox\Profiles\jvpjzgt3.default \cookies.txt.old
Risk: Medium

Name: TrackingCookie.Belstat
Path: :mozilla.417:C:\Documents and Settings\administrador\Datos de programa\Mozilla\Firefox\Profiles\jvpjzgt3.default \cookies.txt.old
Risk: Medium

Name: TrackingCookie.Belstat
Path: :mozilla.418:C:\Documents and Settings\administrador\Datos de programa\Mozilla\Firefox\Profiles\jvpjzgt3.default \cookies.txt.old
Risk: Medium

Name: TrackingCookie.Epilot
Path: :mozilla.429:C:\Documents and Settings\administrador\Datos de programa\Mozilla\Firefox\Profiles\jvpjzgt3.default \cookies.txt.old
Risk: Medium

Name: TrackingCookie.Googleadservices
Path: :mozilla.434:C:\Documents and Settings\administrador\Datos de programa\Mozilla\Firefox\Profiles\jvpjzgt3.default \cookies.txt.old
Risk: Medium

Name: Logger.KeyLogger.jb
Path: C:\Documents and Settings\administrador\Mis documentos\compaq\ocx\MBShSpy.zip/MBShSpy.cab/MBShSpy.ocx
Risk: High

Name: Downloader.Small
Path: C:\Documents and Settings\LocalService.NT AUTHORITY\Configuración local\Archivos temporales de Internet\Content.IE5\FDZUA8IM\ac3_0010[1].exe
Risk: High

Name: Downloader.Adload.hl
Path: C:\Documents and Settings\LocalService.NT AUTHORITY\Configuración local\Archivos temporales de Internet\Content.IE5\FDZUA8IM\dfndrff_e_uit[1].exe
Risk: High

Name: Adware.DollarRevenue
Path: C:\Documents and Settings\LocalService.NT AUTHORITY\Configuración local\Archivos temporales de Internet\Content.IE5\GHIJKLMN\nwnmff_e[1].exe
Risk: Medium

Name: Downloader.Adload.hg
Path: C:\Documents and Settings\LocalService.NT AUTHORITY\Configuración local\Archivos temporales de Internet\Content.IE5\OPQRSTUV\loader[1].exe
Risk: High

Name: Trojan.Small
Path: C:\Documents and Settings\LocalService.NT AUTHORITY\Configuración local\Archivos temporales de Internet\Content.IE5\OPQRSTUV\teller2[1].htm
Risk: High

Name: TrackingCookie.Searchingbooth
Path: C:\Documents and Settings\LocalService.NT AUTHORITY\Cookies\system@banners.searchingbooth[1].txt
Risk: Medium

Name: TrackingCookie.Top-banners
Path: C:\Documents and Settings\LocalService.NT AUTHORITY\Cookies\system@media.top-banners[1].txt
Risk: Medium

Name: Downloader.Small.dxm
Path: C:\dollarrev.exe
Risk: High

Name: Downloader.Adload.fy
Path: C:\RECYCLER\S-1-5-21-4203365137-2997810623-1618903349-500\Dc375.exe
Risk: High

Name: Downloader.Adload.fk
Path: C:\RECYCLER\S-1-5-21-4203365137-2997810623-1618903349-500\Dc388.exe
Risk: High

Name: Downloader.Adload.hl
Path: C:\RECYCLER\S-1-5-21-4203365137-2997810623-1618903349-500\Dc389.exe
Risk: High

Name: Downloader.Adload.fk
Path: C:\RECYCLER\S-1-5-21-4203365137-2997810623-1618903349-500\Dc390.exe
Risk: High

Name: Adware.DollarRevenue
Path: C:\RECYCLER\S-1-5-21-4203365137-2997810623-1618903349-500\Dc391.exe
Risk: Medium

Name: Hijacker.VB.kc
Path: C:\RECYCLER\S-1-5-21-4203365137-2997810623-1618903349-500\Dc393.exe
Risk: High

Name: Downloader.Adload.fy
Path: C:\RECYCLER\S-1-5-21-4203365137-2997810623-1618903349-500\Dc394.exe
Risk: High

Name: Downloader.Adload.hx
Path: C:\RECYCLER\S-1-5-21-4203365137-2997810623-1618903349-500\Dc395.exe
Risk: High

Name: Adware.DollarRevenue
Path: C:\RECYCLER\S-1-5-21-4203365137-2997810623-1618903349-500\Dc396.exe
Risk: Medium

Name: Downloader.Adload.ik
Path: C:\RECYCLER\S-1-5-21-4203365137-2997810623-1618903349-500\Dc397.exe
Risk: High

Name: Downloader.Adload.ix
Path: C:\RECYCLER\S-1-5-21-4203365137-2997810623-1618903349-500\Dc398.exe
Risk: High

Name: Adware.DollarRevenue
Path: C:\RECYCLER\S-1-5-21-4203365137-2997810623-1618903349-500\Dc399.exe
Risk: Medium

Name: Downloader.Adload.hp
Path: C:\RECYCLER\S-1-5-21-4203365137-2997810623-1618903349-500\Dc401.exe
Risk: High

Name: Downloader.Adload.fy
Path: C:\RECYCLER\S-1-5-21-4203365137-2997810623-1618903349-500\Dc402.exe
Risk: High

Name: Downloader.Adload.hx
Path: C:\RECYCLER\S-1-5-21-4203365137-2997810623-1618903349-500\Dc403.exe
Risk: High

Name: Downloader.Adload.ic
Path: C:\RECYCLER\S-1-5-21-4203365137-2997810623-1618903349-500\Dc404.exe
Risk: High

Name: Downloader.Adload.is
Path: C:\RECYCLER\S-1-5-21-4203365137-2997810623-1618903349-500\Dc406.exe
Risk: High

Name: Downloader.Adload.fy
Path: C:\RECYCLER\S-1-5-21-4203365137-2997810623-1618903349-500\Dc407.exe
Risk: High

Name: Downloader.Adload.hk
Path: C:\RECYCLER\S-1-5-21-4203365137-2997810623-1618903349-500\Dc409.exe
Risk: High

Name: Downloader.Adload.fk
Path: C:\RECYCLER\S-1-5-21-4203365137-2997810623-1618903349-500\Dc412.exe
Risk: High

Name: Downloader.Adload.hm
Path: C:\RECYCLER\S-1-5-21-4203365137-2997810623-1618903349-500\Dc413.exe
Risk: High

Name: Downloader.Adload.fk
Path: C:\RECYCLER\S-1-5-21-4203365137-2997810623-1618903349-500\Dc414.exe
Risk: High

Name: Adware.DollarRevenue
Path: C:\RECYCLER\S-1-5-21-4203365137-2997810623-1618903349-500\Dc415.exe
Risk: Medium

Name: Downloader.Adload.fy
Path: C:\RECYCLER\S-1-5-21-4203365137-2997810623-1618903349-500\Dc416.exe
Risk: High

Name: Downloader.Adload.if
Path: C:\RECYCLER\S-1-5-21-4203365137-2997810623-1618903349-500\Dc417.exe
Risk: High

Name: Downloader.Adload.iq
Path: C:\RECYCLER\S-1-5-21-4203365137-2997810623-1618903349-500\Dc419.exe
Risk: High

Name: Downloader.Small.ajc
Path: C:\System Volume Information\_restore{C6BF5683-9760-4105-B3A5-B4EEAF082279}\RP54\A0008210.exe
Risk: High

Name: Adware.Look2Me
Path: C:\System Volume Information\_restore{C6BF5683-9760-4105-B3A5-B4EEAF082279}\RP54\A0008236.dll
Risk: Medium

Name: Downloader.Adload.hg
Path: C:\System Volume Information\_restore{C6BF5683-9760-4105-B3A5-B4EEAF082279}\RP54\A0008246.exe
Risk: High

Name: Downloader.Adload.hg
Path: C:\System Volume Information\_restore{C6BF5683-9760-4105-B3A5-B4EEAF082279}\RP54\A0008259.exe
Risk: High

Name: Downloader.Adload.hg
Path: C:\System Volume Information\_restore{C6BF5683-9760-4105-B3A5-B4EEAF082279}\RP54\A0008295.exe
Risk: High

Name: Downloader.Adload.hg
Path: C:\System Volume Information\_restore{C6BF5683-9760-4105-B3A5-B4EEAF082279}\RP55\A0009363.exe
Risk: High

Name: Trojan.Small
Path: C:\WINDOWS\c2lzdGVtYXM\wZ5Wx3pQsrg.vbs
Risk: High

Name: Adware.Look2Me
Path: C:\WINDOWS\system32\aisnt.dll
Risk: Medium

Name: Adware.Look2Me
Path: C:\WINDOWS\system32\irjsl5171.dll
Risk: Medium

Name: Adware.Look2Me
Path: C:\WINDOWS\system32\kt24l7fq1.dll
Risk: Medium

Name: Adware.Look2Me
Path: C:\WINDOWS\system32\MBSTKPRP.DLL
Risk: Medium

Name: Backdoor.IRCBot.od
Path: C:\WINDOWS\system32\shehalxx.dll
Risk: High

Name: Trojan.Small
Path: C:\WINDOWS\system32\wintsvsu.exe
Risk: High

saludos

hola, bueno comienza por realizar lo siguiente:

descarga estas herramientas, pero no las ejecutes aun:

-Look2Me-Destroyer.exe
-regseeker+manual
-disk cleaner
-killbox

apaga restaurar el sistema

ver archivos ocultos

reinicia en modo a prueba de fallos

busca y elimina:

C:\Documents and Settings\administrador\Mis documentos\compaq\ocx\MBShSpy.zip/MBShSpy.cab/MBShSpy.ocx

C:\Documents and Settings\LocalService.NT AUTHORITY\Configuración local\Archivos temporales de Internet\Content.IE5\FDZUA8IM\ac3_0010[1].exe

C:\Documents and Settings\LocalService.NT AUTHORITY\Configuración local\Archivos temporales de Internet\Content.IE5\FDZUA8IM\dfndrff_e_uit[1].exe

C:\Documents and Settings\LocalService.NT AUTHORITY\Configuración local\Archivos temporales de Internet\Content.IE5\GHIJKLMN\nwnmff_e[1].exe

C:\Documents and Settings\LocalService.NT AUTHORITY\Configuración local\Archivos temporales de Internet\Content.IE5\OPQRSTUV\loader[1].exe

C:\Documents and Settings\LocalService.NT AUTHORITY\Configuración local\Archivos temporales de Internet\Content.IE5\OPQRSTUV\teller2[1].htm

C:\dollarrev.exe

C:\WINDOWS\c2lzdGVtYXM\wZ5Wx3pQsrg.vbs

C:\WINDOWS\system32\aisnt.dll

C:\WINDOWS\system32\irjsl5171.dll

C:\WINDOWS\system32\kt24l7fq1.dll

C:\WINDOWS\system32\MBSTKPRP.DLL

C:\WINDOWS\system32\shehalxx.dll

C:\WINDOWS\system32\wintsvsu.exe

-si no se deja, utiliza killbox

Ejecuta el Look2Me-Destroyer.exe

pasa el disk cleaner para limpiar cookies y temporales (con tus navegadores cerrados)

pasa el regseeker para limpiar el registro

reinicia en modo normal y escanea tu pc con el ewido y el kaspersky online, en ese orden, y peganos el reporte del kaspersky y de lo que el ewido no te elimine, tambien cuentanos como sigue tu pc




salu2