| |||||||
| Foro Oficial de HijackThis en español Analizamos tu log de HijackThis para eliminar Hijackers, Spyware, Adware, ToolBars, Virus, Troyanos y Malwares en gral. Antes lea las Políticas del Foro de HijackThis. |
 |
| | Enviar a: | Herramientas |
 | 
05/12/06, 21:46:13
|  |
| |||
 Estos son agujeros, y no lo de Marbella II Mi particular tema viene cuando detecto en dialer italiano, que aun con las instrucciones de la web no lo desalojo, y de momento lo bloqueo con Zone alarm me anuncia mensajes como "IDD****.tmp.exe ha sido bloqueado aceso a internet". Bueno hasta esto aun vale. Cuando paso los antivirus on line, me salen hasta las multas de trafico. A saber de Panda Acive scan, Karpersky, Ewido y Spy Sweeper, empiezo con el reporte del HijackThis despues los Antivirus Online y el Sweeper. Running processes: C:\WIN\System32\smss.exe C:\WIN\SYSTEM32\winlogon.exe C:\WIN\system32\services.exe C:\WIN\system32\lsass.exe C:\WIN\system32\Ati2evxx.exe C:\WIN\system32\svchost.exe C:\WIN\System32\svchost.exe C:\Archivos de programa\Archivos comunes\Symantec Shared\ccSvcHst.exe C:\Archivos de programa\Archivos comunes\Symantec Shared\AppCore\AppSvc32.exe C:\Archivos de programa\Symantec\LiveUpdate\ALUSchedulerSvc.exe C:\Archivos de programa\WIDCOMM\BTesys\bin\btwdins.exe C:\Archivos de programa\Archivos comunes\Symantec Shared\ccPwdSvc.exe C:\WIN\SYSTEM32\Ati2evxx.exe C:\WIN\Explorer.EXE C:\WIN\system32\svchost.exe C:\WIN\system32\rundll32.exe C:\Archivos de programa\Archivos comunes\Symantec Shared\ccApp.exe C:\Archivos de programa\ZoneAlarm\zlclient.exe C:\Archivos de programa\WIDCOMM\BTesys\BTTray.exe C:\WIN\system32\ZoneLabs\vsmon.exe C:\Archivos de programa\Webroot\Spy Sweeper\SpySweeper.exe C:\Archivos de programa\Internet Explorer\IEXPLORE.EXE C:\Archivos de programa\Internet Explorer\IEXPLORE.EXE C:\Archivos de programa\Internet Explorer\IEXPLORE.EXE C:\Archivos de programa\Archivos comunes\Symantec Shared\CCPD-LC\symlcsvc.exe C:\WIN\TEMP\win98.tmp.exe C:\ARCHIV~1\FIREFOX\FIREFOX.EXE C:\Documents and Settings\coy\Escritorio\Data\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Vínculos O2 - BHO: (no name) - {1E8A6170-7264-4D0F-BEAE-D42A53123C75} - C:\Archivos de programa\Archivos comunes\Symantec Shared\coShared\Browser\1.0\NppBho.dll O3 - Toolbar: Show Norton Toolbar - {90222687-F593-4738-B738-FBEE9C7B26DF} - C:\Archivos de programa\Archivos comunes\Symantec Shared\coShared\Browser\1.0\UIBHO.dll O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent O4 - HKLM\..\Run: [ccApp] "C:\Archivos de programa\Archivos comunes\Symantec Shared\ccApp.exe" O4 - HKLM\..\Run: [Zone Labs Client] C:\Archivos de programa\ZoneAlarm\zlclient.exe O4 - HKLM\..\Run: [ATICCC] "C:\Archivos de programa\ATI Technologies\ATI.ACE\cli.exe" runtime O4 - HKLM\..\Run: [SpySweeper] "C:\Archivos de programa\Webroot\Spy Sweeper\SpySweeperUI.exe" /startintray O4 - Global Startup: ATI CATALYST System Tray.lnk = C:\Archivos de programa\ATI Technologies\ATI.ACE\CLI.exe O4 - Global Startup: BTTray.lnk = ? O8 - Extra context menu item: Enviar a &Bluetooth - C:\Archivos de programa\WIDCOMM\BTesys\btsendto_ie_ctx.htm O12 - Plugin for .pdf: C:\Archivos de programa\Internet Explorer\PLUGINS\nppdf32.dll O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/english/kavwebscan_unicode.cab O16 - DPF: {193C772A-87BE-4B19-A7BB-445B226FE9A1} (ewidoOnlineScan Control) - http://download.ewido.net/ewidoOnlineScan.cab O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab O16 - DPF: {7F8C8173-AD80-4807-AA75-5672F22B4582} (ICSScanner Class) - http://download.zonelabs.com/bin/promotions/spywaredetector/ICSScanner37860.cab O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\ARCHIV~1\MSNMES~1\msgrapp.dll" (file missing) O20 - Winlogon Notify: winosz32 - C:\WIN\SYSTEM32\winosz32.dll O23 - Service: Adobe LM Service - Adobe Systems - C:\Archivos de programa\Archivos comunes\Adobe Systems Shared\Service\Adobelmsvc.exe O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WIN\system32\Ati2evxx.exe O23 - Service: ATI Smart - Unknown owner - C:\WIN\system32\ati2sgag.exe O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Archivos de programa\Symantec\LiveUpdate\ALUSchedulerSvc.exe O23 - Service: Bluetooth Service (btwdins) - WIDCOMM, Inc. - C:\Archivos de programa\WIDCOMM\BTesys\bin\btwdins.exe O23 - Service: Symantec Event Manager (ccEvtMgr) - Unknown owner - C:\Archivos de programa\Archivos comunes\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing) O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Archivos de programa\Archivos comunes\Symantec Shared\ccPwdSvc.exe O23 - Service: Symantec Settings Manager (ccSetMgr) - Unknown owner - C:\Archivos de programa\Archivos comunes\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing) O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Archivos de programa\Archivos comunes\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing) O23 - Service: COM Host (comHost) - Symantec Corporation - C:\Archivos de programa\Archivos comunes\Symantec Shared\VAScanner\comHost.exe O23 - Service: Symantec IS Password Validation (ISPwdSvc) - Symantec Corporation - C:\Archivos de programa\NIS\isPwdSvc.exe O23 - Service: LiveUpdate - Symantec Corporation - C:\ARCHIV~1\Symantec\LIVEUP~1\LUCOMS~1.EXE O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Archivos de programa\Archivos comunes\Symantec Shared\SPBBC\SPBBCSvc.exe O23 - Service: Symantec Core LC - Symantec Corporation - C:\Archivos de programa\Archivos comunes\Symantec Shared\CCPD-LC\symlcsvc.exe O23 - Service: Symantec AppCore Service (SymAppCore) - Symantec Corporation - C:\Archivos de programa\Archivos comunes\Symantec Shared\AppCore\AppSvc32.exe O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WIN\system32\ZoneLabs\vsmon.exe O23 - Service: Motor de Spy Sweeper de Webroot (WebrootSpySweeperService) - Webroot Software, Inc. - C:\Archivos de programa\Webroot\Spy Sweeper\SpySweeper.exe ----------------------------------------------------------------------------------------------------------------------------- Panda Incident Status Location Dialer:Dialer.IBW Not disinfected C:\WIN\TEMP\win9D0.tmp.exe Spyware:Spyware/Virtumonde Not disinfected C:\WIN\SYSTEM32\winosz32.dll Adware:adware/pornmagpass Not disinfected c:\win\system32\ishost.exe Dialer:Dialer.IBW Not disinfected C:\Documents and Settings\coy\Configuración local\Archivos temporales de Internet\Content.IE5\4DARWTIJ\srvris[1].exe Dialer:Dialer.IBW Not disinfected C:\Documents and Settings\coy\Configuración local\Archivos temporales de Internet\Content.IE5\8HQ7K1MZ\srvqjb[1].exe Dialer:Dialer.IBW Not disinfected C:\Documents and Settings\coy\Configuración local\Archivos temporales de Internet\Content.IE5\O9IJ4LQV\srvxxn[1].exe Spyware:Cookie/adultfriendfinder Not disinfected C:\Documents and Settings\coy\Datos de programa\Mozilla\Firefox\Profiles\z7ne2vw9.default \cookies.txt[.adultfriendfinder.com/] Spyware:Cookie/fe.lea.lycos Not disinfected C:\Documents and Settings\coy\Datos de programa\Mozilla\Firefox\Profiles\z7ne2vw9.default \cookies.txt[fe.lea.lycos.es/] Dialer:Dialer.GWG Not disinfected C:\RECYCLER\S-1-5-21-1202660629-1659004503-682003330-1003\Dc21.exe Dialer:Dialer.GWG Not disinfected C:\RECYCLER\S-1-5-21-1202660629-1659004503-682003330-1003\Dc22.exe Dialer:Dialer.GWG Not disinfected C:\RECYCLER\S-1-5-21-1202660629-1659004503-682003330-1003\Dc23.exe Dialer:Dialer.GWG Not disinfected C:\RECYCLER\S-1-5-21-1202660629-1659004503-682003330-1003\Dc24.exe Dialer:Dialer.GWG Not disinfected C:\RECYCLER\S-1-5-21-1202660629-1659004503-682003330-1003\Dc25.exe Dialer:Dialer.GWG Not disinfected C:\RECYCLER\S-1-5-21-1202660629-1659004503-682003330-1003\Dc26.exe Dialer:Dialer.GWG Not disinfected C:\RECYCLER\S-1-5-21-1202660629-1659004503-682003330-1003\Dc27.exe Dialer:Dialer.GWG Not disinfected C:\RECYCLER\S-1-5-21-1202660629-1659004503-682003330-1003\Dc28.exe Dialer:Dialer.GWG Not disinfected C:\RECYCLER\S-1-5-21-1202660629-1659004503-682003330-1003\Dc29.exe Dialer:Dialer.GWG Not disinfected C:\RECYCLER\S-1-5-21-1202660629-1659004503-682003330-1003\Dc30.exe Dialer:Dialer.GWG Not disinfected C:\RECYCLER\S-1-5-21-1202660629-1659004503-682003330-1003\Dc31.exe Dialer:Dialer.GWG Not disinfected C:\RECYCLER\S-1-5-21-1202660629-1659004503-682003330-1003\Dc32.exe Dialer:Dialer.GWG Not disinfected C:\RECYCLER\S-1-5-21-1202660629-1659004503-682003330-1003\Dc33.exe Dialer:Dialer.GWG Not disinfected C:\RECYCLER\S-1-5-21-1202660629-1659004503-682003330-1003\Dc34.exe Dialer:Dialer.GWG Not disinfected C:\RECYCLER\S-1-5-21-1202660629-1659004503-682003330-1003\Dc35.exe Dialer:Dialer.GWG Not disinfected C:\RECYCLER\S-1-5-21-1202660629-1659004503-682003330-1003\Dc36.exe Dialer:Dialer.GWG Not disinfected C:\RECYCLER\S-1-5-21-1202660629-1659004503-682003330-1003\Dc37.exe Dialer:Dialer.GWG Not disinfected C:\RECYCLER\S-1-5-21-1202660629-1659004503-682003330-1003\Dc38.exe Dialer:Dialer.GWG Not disinfected C:\RECYCLER\S-1-5-21-1202660629-1659004503-682003330-1003\Dc39.exe Dialer:Dialer.GWG Not disinfected C:\RECYCLER\S-1-5-21-1202660629-1659004503-682003330-1003\Dc40.exe Dialer:Dialer.GWG Not disinfected C:\RECYCLER\S-1-5-21-1202660629-1659004503-682003330-1003\Dc41.exe Dialer:Dialer.GWG Not disinfected C:\RECYCLER\S-1-5-21-1202660629-1659004503-682003330-1003\Dc42.exe Dialer:Dialer.GWG Not disinfected C:\RECYCLER\S-1-5-21-1202660629-1659004503-682003330-1003\Dc43.exe Dialer:Dialer.GWG Not disinfected C:\RECYCLER\S-1-5-21-1202660629-1659004503-682003330-1003\Dc44.exe Dialer:Dialer.GWG Not disinfected C:\RECYCLER\S-1-5-21-1202660629-1659004503-682003330-1003\Dc45.exe Dialer:Dialer.GWG Not disinfected C:\RECYCLER\S-1-5-21-1202660629-1659004503-682003330-1003\Dc46.exe Dialer:Dialer.GWG Not disinfected C:\RECYCLER\S-1-5-21-1202660629-1659004503-682003330-1003\Dc47.exe Dialer:Dialer.IBW Not disinfected C:\RECYCLER\S-1-5-21-1202660629-1659004503-682003330-1003\Dc48.exe Spyware:Spyware/Virtumonde Not disinfected C:\RECYCLER\S-1-5-21-1202660629-1659004503-682003330-1003\Dc49.exe Adware:Adware/Maxifiles Not disinfected C:\RECYCLER\S-1-5-21-1202660629-1659004503-682003330-1003\Dc50.exe Adware:Adware/SuperSpider Not disinfected C:\RECYCLER\S-1-5-21-1202660629-1659004503-682003330-1003\Dc51.exe Dialer:Dialer.HLD Not disinfected C:\RECYCLER\S-1-5-21-1202660629-1659004503-682003330-1003\Dc52.exe Dialer:Dialer.IBW Not disinfected C:\RECYCLER\S-1-5-21-1202660629-1659004503-682003330-1003\Dc53.exe Dialer:Dialer.IBW Not disinfected C:\RECYCLER\S-1-5-21-1202660629-1659004503-682003330-1003\Dc54.exe Dialer:Dialer.IBW Not disinfected C:\RECYCLER\S-1-5-21-1202660629-1659004503-682003330-1003\Dc55.exe Dialer:Dialer.HLD Not disinfected C:\RECYCLER\S-1-5-21-1202660629-1659004503-682003330-1003\Dc56.exe Adware:Adware/Yazzle Not disinfected C:\RECYCLER\S-1-5-21-1202660629-1659004503-682003330-1003\Dc57.exe Adware:Adware/SecurityError Not disinfected C:\RECYCLER\S-1-5-21-1202660629-1659004503-682003330-1003\Dc58.exe Dialer:Dialer.IBW Not disinfected C:\RECYCLER\S-1-5-21-1202660629-1659004503-682003330-1003\Dc60.exe Dialer:Dialer.IBW Not disinfected C:\RECYCLER\S-1-5-21-1202660629-1659004503-682003330-1003\Dc61.exe Adware:Adware/Adservice Not disinfected C:\RECYCLER\S-1-5-21-1202660629-1659004503-682003330-1003\Dc62.dll Adware:Adware/SBSoft Not disinfected C:\System Volume Information\_restore{21DC0CA4-787E-4EF8-87A4-565F27528EEC}\RP36\A0010579.dll Possible Virus. Not disinfected C:\WIN\system32\1164814876.exe Spyware:Spyware/Virtumonde Not disinfected C:\WIN\system32\ddccdec.dll Adware:Adware/DriveCleaner Not disinfected C:\WIN\system32\drvvol.dll Spyware:Spyware/Virtumonde Not disinfected C:\WIN\system32\rqrsstt.dll Dialer:Dialer.GWG Not disinfected C:\WIN\Temp\idd221A.tmp.exe Dialer:Dialer.GWG Not disinfected C:\WIN\Temp\idd2651.tmp.exe Dialer:Dialer.GWG Not disinfected C:\WIN\Temp\idd6C.tmp.exe Dialer:Dialer.GWG Not disinfected C:\WIN\Temp\idd9A.tmp.exe Dialer:Dialer.GWG Not disinfected C:\WIN\Temp\idd9D1.tmp.exe Dialer:Dialer.GWG Not disinfected C:\WIN\Temp\iddBD8.tmp.exe Dialer:Dialer.GWG Not disinfected C:\WIN\Temp\iddCB6.tmp.exe Adware:Adware/DriveCleaner Not disinfected C:\WIN\Temp\mst540.tmp Dialer:Dialer.IBW Not disinfected C:\WIN\Temp\win98.tmp.exe Dialer:Dialer.IBW Not disinfected C:\WIN\Temp\winBD7.tmp.exe Dialer:Dialer.HLD Not disinfected C:\WIN\Temp\winC8E.tmp.exe Dialer:Dialer.IBW Not disinfected C:\WIN\Temp\winCB5.tmp.exe Possible Virus. Not disinfected C:\~tmp.ins ------------------------------------------------------------------------------------------------------------------------------ SIGUE en el siguiente POST |
| InfoSpyware | ||
| |
|
05/12/06, 21:52:05
| |
| |||
| Estos son agujeros, y no lo de Marbella II Ewido Name: Adware.WinAntiVirus Path: HKLM\SYSTEM\CurrentControlSet\Services\vspf Risk: Medium Name: Adware.WinAntiVirus Path: HKLM\SYSTEM\CurrentControlSet\Services\vspf\Securi ty Risk: Medium Name: Adware.WinAntiVirus Path: HKLM\SYSTEM\CurrentControlSet\Services\vspf\Enum Risk: Medium Name: Adware.WinAntiVirus Path: HKLM\SYSTEM\CurrentControlSet\Services\vspf_hk Risk: Medium Name: Adware.WinAntiVirus Path: HKLM\SYSTEM\CurrentControlSet\Services\vspf_hk\Sec urity Risk: Medium Name: Adware.WinAntiVirus Path: HKLM\SYSTEM\CurrentControlSet\Services\vspf_hk\Enu m Risk: Medium Name: Adware.BHO Path: [972] C:\WIN\system32\dspvfx.dll Risk: Medium Name: Adware.BHO Path: [1940] C:\WIN\system32\dspvfx.dll Risk: Medium Name: Adware.BHO Path: [1256] C:\WIN\system32\dspvfx.dll Risk: Medium Name: Adware.BHO Path: [3460] C:\WIN\system32\dspvfx.dll Risk: Medium Name: Adware.Universa Path: C:\Documents and Settings\coy\Configuración local\Archivos temporales de Internet\Content.IE5\O9IJ4LQV\srvxxn[1].exe Risk: Medium Name: Dialer.Agent.z Path: C:\RECYCLER\S-1-5-21-1202660629-1659004503-682003330-1003\Dc21.exe Risk: High Name: Dialer.Agent.z Path: C:\RECYCLER\S-1-5-21-1202660629-1659004503-682003330-1003\Dc22.exe Risk: High Name: Dialer.Agent.z Path: C:\RECYCLER\S-1-5-21-1202660629-1659004503-682003330-1003\Dc23.exe Risk: High Name: Dialer.Agent.z Path: C:\RECYCLER\S-1-5-21-1202660629-1659004503-682003330-1003\Dc24.exe Risk: High Name: Dialer.Agent.z Path: C:\RECYCLER\S-1-5-21-1202660629-1659004503-682003330-1003\Dc25.exe Risk: High Name: Dialer.Agent.z Path: C:\RECYCLER\S-1-5-21-1202660629-1659004503-682003330-1003\Dc26.exe Risk: High Name: Dialer.Agent.z Path: C:\RECYCLER\S-1-5-21-1202660629-1659004503-682003330-1003\Dc27.exe Risk: High Name: Dialer.Agent.z Path: C:\RECYCLER\S-1-5-21-1202660629-1659004503-682003330-1003\Dc28.exe Risk: High Name: Dialer.Agent.z Path: C:\RECYCLER\S-1-5-21-1202660629-1659004503-682003330-1003\Dc29.exe Risk: High Name: Dialer.Agent.z Path: C:\RECYCLER\S-1-5-21-1202660629-1659004503-682003330-1003\Dc30.exe Risk: High Name: Dialer.Agent.z Path: C:\RECYCLER\S-1-5-21-1202660629-1659004503-682003330-1003\Dc31.exe Risk: High Name: Dialer.Agent.z Path: C:\RECYCLER\S-1-5-21-1202660629-1659004503-682003330-1003\Dc32.exe Risk: High Name: Dialer.Agent.z Path: C:\RECYCLER\S-1-5-21-1202660629-1659004503-682003330-1003\Dc33.exe Risk: High Name: Dialer.Agent.z Path: C:\RECYCLER\S-1-5-21-1202660629-1659004503-682003330-1003\Dc34.exe Risk: High Name: Dialer.Agent.z Path: C:\RECYCLER\S-1-5-21-1202660629-1659004503-682003330-1003\Dc35.exe Risk: High Name: Dialer.Agent.z Path: C:\RECYCLER\S-1-5-21-1202660629-1659004503-682003330-1003\Dc36.exe Risk: High Name: Dialer.Agent.z Path: C:\RECYCLER\S-1-5-21-1202660629-1659004503-682003330-1003\Dc37.exe Risk: High Name: Dialer.Agent.z Path: C:\RECYCLER\S-1-5-21-1202660629-1659004503-682003330-1003\Dc38.exe Risk: High Name: Dialer.Agent.z Path: C:\RECYCLER\S-1-5-21-1202660629-1659004503-682003330-1003\Dc39.exe Risk: High Name: Dialer.Agent.z Path: C:\RECYCLER\S-1-5-21-1202660629-1659004503-682003330-1003\Dc40.exe Risk: High Name: Dialer.Agent.z Path: C:\RECYCLER\S-1-5-21-1202660629-1659004503-682003330-1003\Dc41.exe Risk: High Name: Dialer.Agent.z Path: C:\RECYCLER\S-1-5-21-1202660629-1659004503-682003330-1003\Dc42.exe Risk: High Name: Dialer.Agent.z Path: C:\RECYCLER\S-1-5-21-1202660629-1659004503-682003330-1003\Dc43.exe Risk: High Name: Dialer.Agent.z Path: C:\RECYCLER\S-1-5-21-1202660629-1659004503-682003330-1003\Dc44.exe Risk: High Name: Dialer.Agent.z Path: C:\RECYCLER\S-1-5-21-1202660629-1659004503-682003330-1003\Dc45.exe Risk: High Name: Dialer.Agent.z Path: C:\RECYCLER\S-1-5-21-1202660629-1659004503-682003330-1003\Dc46.exe Risk: High Name: Dialer.Agent.z Path: C:\RECYCLER\S-1-5-21-1202660629-1659004503-682003330-1003\Dc47.exe Risk: High Name: Adware.Universa Path: C:\RECYCLER\S-1-5-21-1202660629-1659004503-682003330-1003\Dc48.exe Risk: Medium Name: Downloader.Agent.bca Path: C:\RECYCLER\S-1-5-21-1202660629-1659004503-682003330-1003\Dc50.exe Risk: High Name: Trojan.Agent.vg Path: C:\RECYCLER\S-1-5-21-1202660629-1659004503-682003330-1003\Dc51.exe Risk: High Name: Trojan.Dialer.qs Path: C:\RECYCLER\S-1-5-21-1202660629-1659004503-682003330-1003\Dc52.exe Risk: High Name: Adware.Universa Path: C:\RECYCLER\S-1-5-21-1202660629-1659004503-682003330-1003\Dc53.exe Risk: Medium Name: Adware.Universa Path: C:\RECYCLER\S-1-5-21-1202660629-1659004503-682003330-1003\Dc54.exe Risk: Medium Name: Adware.Universa Path: C:\RECYCLER\S-1-5-21-1202660629-1659004503-682003330-1003\Dc55.exe Risk: Medium Name: Trojan.Dialer.qs Path: C:\RECYCLER\S-1-5-21-1202660629-1659004503-682003330-1003\Dc56.exe Risk: High Name: Downloader.PurityScan.dc Path: C:\RECYCLER\S-1-5-21-1202660629-1659004503-682003330-1003\Dc57.exe Risk: High Name: Adware.Universa Path: C:\RECYCLER\S-1-5-21-1202660629-1659004503-682003330-1003\Dc60.exe Risk: Medium Name: Adware.Universa Path: C:\RECYCLER\S-1-5-21-1202660629-1659004503-682003330-1003\Dc61.exe Risk: Medium Name: Not-A-Virus.Hoax.Win32.Renos.ge Path: C:\RECYCLER\S-1-5-21-1202660629-1659004503-682003330-1003\Dc62.dll Risk: Low Name: Adware.SBSoft Path: C:\System Volume Information\_restore{21DC0CA4-787E-4EF8-87A4-565F27528EEC}\RP36\A0010579.dll Risk: Medium Name: Adware.BHO Path: C:\WIN\system32\dspvfx.dll Risk: Medium Name: Adware.Virtumonde Path: C:\WIN\system32\rqrsstt.dll Risk: Medium Name: Not-A-Virus.Monitor.Win32.Ardamax Path: C:\WIN\system32\Sys\norton.exe Risk: Low Name: Trojan.Agent.vg Path: C:\WIN\system32\winosz32.dll Risk: High Name: Adware.VB Path: C:\WIN\system32\~fdgrr.tmp Risk: Medium Name: Adware.BHO Path: C:\WIN\system32\~isdet.tmp Risk: Medium Name: Dialer.Agent.z Path: C:\WIN\Temp\idd221A.tmp.exe Risk: High Name: Dialer.Agent.z Path: C:\WIN\Temp\idd6C.tmp.exe Risk: High Name: Dialer.Agent.z Path: C:\WIN\Temp\idd9A.tmp.exe Risk: High Name: Dialer.Agent.z Path: C:\WIN\Temp\idd9D1.tmp.exe Risk: High Name: Dialer.Agent.z Path: C:\WIN\Temp\iddBD8.tmp.exe Risk: High Name: Dialer.Agent.z Path: C:\WIN\Temp\iddCB6.tmp.exe Risk: High Name: Adware.Universa Path: C:\WIN\Temp\win98.tmp.exe Risk: Medium Name: Adware.Universa Path: C:\WIN\Temp\win9D0.tmp.exe Risk: Medium Name: Adware.Universa Path: C:\WIN\Temp\winBD7.tmp.exe Risk: Medium Name: Trojan.Dialer.qs Path: C:\WIN\Temp\winC8E.tmp.exe Risk: High Name: Adware.Universa Path: C:\WIN\Temp\winCB5.tmp.exe Risk: Medium --------------------------------------------------------------------------------------------------------------------------------- Sigue mas Karpersky C:\Archivos de programa\Archivos comunes\Symantec Shared\EENGINE\EPERSIST.DAT Object is locked skipped C:\Archivos de programa\Archivos comunes\Symantec Shared\NFWEVT.LOG Object is locked skipped C:\Archivos de programa\Archivos comunes\Symantec Shared\SNDALRT.log Object is locked skipped C:\Archivos de programa\Archivos comunes\Symantec Shared\SNDCON.log Object is locked skipped C:\Archivos de programa\Archivos comunes\Symantec Shared\SNDDBG.log Object is locked skipped C:\Archivos de programa\Archivos comunes\Symantec Shared\SNDFW.log Object is locked skipped C:\Archivos de programa\Archivos comunes\Symantec Shared\SNDIDS.log Object is locked skipped C:\Archivos de programa\Archivos comunes\Symantec Shared\SNDSYS.log Object is locked skipped C:\Archivos de programa\DAP\History\Administrador\_lasthist.dat Object is locked skipped C:\Archivos de programa\NIS\Norton AntiVirus\AVApp.log Object is locked skipped C:\Archivos de programa\NIS\Norton AntiVirus\AVError.log Object is locked skipped C:\Archivos de programa\NIS\Norton AntiVirus\AVVirus.log Object is locked skipped C:\Archivos de programa\Webroot\Spy Sweeper\Masters\masters.bak Object is locked skipped C:\Archivos de programa\Webroot\Spy Sweeper\Masters\Masters.const Object is locked skipped C:\Archivos de programa\Webroot\Spy Sweeper\Masters\masters.mst Object is locked skipped C:\Archivos de programa\Webroot\Spy Sweeper\Masters.base Object is locked skipped C:\Documents and Settings\All Users\Datos de programa\Microsoft\Dr Watson\user.dmp Object is locked skipped C:\Documents and Settings\All Users.WIN\Datos de programa\Symantec\Common Client\settings.dat Object is locked skipped C:\Documents and Settings\All Users.WIN\Datos de programa\Symantec\LiveUpdate\2006-12-05_Log.ALUSchedulerSvc.LiveUpdate Object is locked skipped C:\Documents and Settings\All Users.WIN\Datos de programa\Symantec\Norton AntiVirus\Quarantine\29D95DCD.htm Infected: Exploit.HTML.Mht skipped C:\Documents and Settings\All Users.WIN\Datos de programa\Symantec\Norton AntiVirus\Quarantine\29DC07C9.php Infected: Exploit.HTML.Mht skipped C:\Documents and Settings\All Users.WIN\Datos de programa\Symantec\SPBBC\BBConfig.log Object is locked skipped C:\Documents and Settings\All Users.WIN\Datos de programa\Symantec\SPBBC\BBDebug.log Object is locked skipped C:\Documents and Settings\All Users.WIN\Datos de programa\Symantec\SPBBC\BBDetect.log Object is locked skipped C:\Documents and Settings\All Users.WIN\Datos de programa\Symantec\SPBBC\BBNotify.log Object is locked skipped C:\Documents and Settings\All Users.WIN\Datos de programa\Symantec\SPBBC\BBRefr.log Object is locked skipped C:\Documents and Settings\All Users.WIN\Datos de programa\Symantec\SPBBC\BBSetCfg.log Object is locked skipped C:\Documents and Settings\All Users.WIN\Datos de programa\Symantec\SPBBC\BBSetCfg2.log Object is locked skipped C:\Documents and Settings\All Users.WIN\Datos de programa\Symantec\SPBBC\BBSetDev.log Object is locked skipped C:\Documents and Settings\All Users.WIN\Datos de programa\Symantec\SPBBC\BBSetLoc.log Object is locked skipped C:\Documents and Settings\All Users.WIN\Datos de programa\Symantec\SPBBC\BBSetUsr.log Object is locked skipped C:\Documents and Settings\All Users.WIN\Datos de programa\Symantec\SPBBC\BBStHash.log Object is locked skipped C:\Documents and Settings\All Users.WIN\Datos de programa\Symantec\SPBBC\BBValid.log Object is locked skipped C:\Documents and Settings\All Users.WIN\Datos de programa\Symantec\SPBBC\SPPolicy.log Object is locked skipped C:\Documents and Settings\All Users.WIN\Datos de programa\Symantec\SPBBC\SPStart.log Object is locked skipped C:\Documents and Settings\All Users.WIN\Datos de programa\Symantec\SPBBC\SPStop.log Object is locked skipped C:\Documents and Settings\All Users.WIN\Datos de programa\Symantec\SRTSP\SrtErEvt.log Object is locked skipped C:\Documents and Settings\All Users.WIN\Datos de programa\Symantec\SRTSP\SrtETmp\61936102.TMP Object is locked skipped C:\Documents and Settings\All Users.WIN\Datos de programa\Symantec\SRTSP\SrtETmp\CD708E34.TMP Object is locked skipped C:\Documents and Settings\All Users.WIN\Datos de programa\Symantec\SRTSP\SrtMoEvt.log Object is locked skipped C:\Documents and Settings\All Users.WIN\Datos de programa\Symantec\SRTSP\SrtNvEvt.log Object is locked skipped C:\Documents and Settings\All Users.WIN\Datos de programa\Symantec\SRTSP\SrtScEvt.log Object is locked skipped C:\Documents and Settings\All Users.WIN\Datos de programa\Symantec\SRTSP\SrtTxFEvt.log Object is locked skipped C:\Documents and Settings\All Users.WIN\Datos de programa\Symantec\SRTSP\SrtViEvt.log Object is locked skipped C:\Documents and Settings\All Users.WIN\Datos de programa\Symantec\SubEng\submissions.idx Object is locked skipped C:\Documents and Settings\All Users.WINDOWS\Datos de programa\Microsoft\Dr Watson\user.dmp Object is locked skipped C:\Documents and Settings\coy\Configuración local\Archivos temporales de Internet\Content.IE5\index.dat Object is locked skipped C:\Documents and Settings\coy\Configuración local\Archivos temporales de Internet\Content.IE5\O9IJ4LQV\srvxxn[1].exe Infected: Packed.Win32.Klone.g skipped C:\Documents and Settings\coy\Configuración local\Datos de programa\Microsoft\Windows\UsrClass.dat Object is locked skipped C:\Documents and Settings\coy\Configuración local\Datos de programa\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped C:\Documents and Settings\coy\Configuración local\Historial\History.IE5\index.dat Object is locked skipped C:\Documents and Settings\coy\Configuración local\Historial\History.IE5\MSHist0120061205200612 06\index.dat Object is locked skipped C:\Documents and Settings\coy\Configuración local\Temp\Perflib_Perfdata_adc.dat Object is locked skipped C:\Documents and Settings\coy\Configuración local\Temp\~DF49E.tmp Object is locked skipped C:\Documents and Settings\coy\Configuración local\Temp\~DF65D7.tmp Object is locked skipped C:\Documents and Settings\coy\Cookies\index.dat Object is locked skipped C:\Documents and Settings\coy\Escritorio\Data\t51098_files\ads_002. htm Object is locked skipped C:\Documents and Settings\coy\Escritorio\Data\t51098_files\collapse _tcat.gif Object is locked skipped C:\Documents and Settings\coy\Escritorio\Data\t51098_files\dialer.p ng Object is locked skipped C:\Documents and Settings\coy\Escritorio\Data\t51098_files\urchin.j s Object is locked skipped C:\Documents and Settings\coy\Escritorio\FxVMonde.log Object is locked skipped C:\Documents and Settings\coy\Escritorio\Nueva carpeta\Thumbs.db Object is locked skipped C:\Documents and Settings\coy\Escritorio\Nueva carpeta\Volver [RatDvd][Spanish 5.1][Sub.Spanish][www.newpct.com]\Volver [RatDvd][Spanish 5.1][Sub.Spanish][www.newpct.com].ratDVD Object is locked skipped C:\Documents and Settings\coy\Mis documentos\200Gb.fss Object is locked skipped C:\Documents and Settings\coy\NTUSER.DAT Object is locked skipped C:\Documents and Settings\coy\ntuser.dat.LOG Object is locked skipped C:\Documents and Settings\coy\UserData\index.dat Object is locked skipped C:\Documents and Settings\COYOTEZ\Cookies\coyotez@www.adictobt.dynu[1].txt Object is locked skipped C:\Documents and Settings\COYOTEZ\Cookies\coyotez@www.antro[2].txt Object is locked skipped C:\Documents and Settings\COYOTEZ\Cookies\coyotez@www.aputasadas[1].txt Object is locked skipped C:\Documents and Settings\COYOTEZ\Cookies\coyotez@www.coleccionxxx[2].txt Object is locked skipped C:\Documents and Settings\COYOTEZ\Cookies\coyotez@www.forsamplesex[1].txt Object is locked skipped C:\Documents and Settings\COYOTEZ\Cookies\coyotez@www.guarris[1].txt Object is locked skipped C:\Documents and Settings\COYOTEZ\Cookies\coyotez@www.netfilia[1].txt Object is locked skipped C:\Documents and Settings\COYOTEZ\Cookies\coyotez@www.pumbo[1].txt Object is locked skipped C:\Documents and Settings\COYOTEZ\Cookies\coyotez@www.xxxvogue[1].txt Object is locked skipped C:\Documents and Settings\COYOTEZ\Datos de programa\Ahead\NeroVision\NVFACache\NVFACIndex.bin Object is locked skipped C:\Documents and Settings\COYOTEZ\Datos de programa\InstallShield Installation Information\{4B35F00C-E63D-40DC-9839-DF15A33EAC46}\data1.cab Object is locked skipped C:\Documents and Settings\COYOTEZ\Datos de programa\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\sett ings.sol Object is locked skipped C:\Documents and Settings\COYOTEZ\Datos de programa\Microsoft\Internet Explorer\Quick Launch\desktop.ini Object is locked skipped C:\Documents and Settings\COYOTEZ\Datos de programa\SBSoft\dating1.ico Object is locked skipped C:\Documents and Settings\COYOTEZ\Datos de programa\SBSoft\switch.ico Object is locked skipped C:\Documents and Settings\COYOTEZ\Escritorio\Systema\Ad-aware 6.0.lnk Object is locked skipped C:\Documents and Settings\COYOTEZ\Favoritos\Vínculos\Hotmail gratuito.url Object is locked skipped C:\Documents and Settings\COYOTEZ\Favoritos\www.mamejar.com Ver tema - Como se utilizan los trucos.url Object is locked skipped C:\Documents and Settings\COYOTEZ\Menú Inicio\Programas\Accesorios\Accesibilidad\Administ rador de utilidades.lnk Object is locked skipped C:\Documents and Settings\COYOTEZ\Menú Inicio\Programas\Rockstar Games\Grand Theft Auto Vice City\Play GTA Vice City.lnk Object is locked skipped C:\Documents and Settings\COYOTEZ\Menú Inicio\Programas\Soldier of Fortune II - Double Helix GOLD - Help\PunkBuster For Players.lnk Object is locked skipped C:\Documents and Settings\COYOTEZ\Mis documentos\ac3 a map3_archivos\ad.php Object is locked skipped C:\Documents and Settings\COYOTEZ\Mis documentos\GTA Vice City User Files\GTAVCsf1.b Object is locked skipped C:\Documents and Settings\COYOTEZ\Mis documentos\Mi música\Desktop.ini Object is locked skipped C:\Documents and Settings\COYOTEZ\Mis documentos\Mis imágenes\005a.jpg Object is locked skipped C:\Documents and Settings\COYOTEZ\Reciente\028.part.met.lnk Object is locked skipped C:\Documents and Settings\COYOTEZ\Reciente\CarsB.big.lnk Object is locked skipped C:\Documents and Settings\COYOTEZ\UserData\A9X2N6X8\undefined[1].xml Object is locked skipped C:\Documents and Settings\COYOTEZ.EQUIPO\Configuración local\Archivos temporales de Internet\Content.IE5\85OT89AX\7px[1].gif Object is locked skipped C:\Documents and Settings\COYOTEZ.EQUIPO\Configuración local\Archivos temporales de Internet\Content.IE5\85OT89AX\cabecera_01[1].gif Object is locked skipped C:\Documents and Settings\COYOTEZ.EQUIPO\Configuración local\Archivos temporales de Internet\Content.IE5\85OT89AX\Carmageddon2[1].jpg Object is locked skipped C:\Documents and Settings\COYOTEZ.EQUIPO\Configuración local\Archivos temporales de Internet\Content.IE5\85OT89AX\Chaser[1].jpg Object is locked skipped C:\Documents and Settings\COYOTEZ.EQUIPO\Configuración local\Archivos temporales de Internet\Content.IE5\85OT89AX\desc_re_1[1].gif Object is locked skipped C:\Documents and Settings\COYOTEZ.EQUIPO\Configuración local\Archivos temporales de Internet\Content.IE5\85OT89AX\dimpleplain[1].js Object is locked skipped C:\Documents and Settings\COYOTEZ.EQUIPO\Configuración local\Archivos temporales de Internet\Content.IE5\85OT89AX\fiche2_bas[1].gif Object is locked skipped C:\Documents and Settings\COYOTEZ.EQUIPO\Configuración local\Archivos temporales de Internet\Content.IE5\85OT89AX\fiche2_haut[1].gif Object is locked skipped C:\Documents and Settings\COYOTEZ.EQUIPO\Configuración local\Archivos temporales de Internet\Content.IE5\85OT89AX\HoTMaiL[1] Object is locked skipped C:\Documents and Settings\COYOTEZ.EQUIPO\Configuración local\Archivos temporales de Internet\Content.IE5\85OT89AX\imesh_ico[1].gif Object is locked skipped C:\Documents and Settings\COYOTEZ.EQUIPO\Configuración local\Archivos temporales de Internet\Content.IE5\85OT89AX\infomoviles_01[1].jpg Object is locked skipped C:\Documents and Settings\COYOTEZ.EQUIPO\Configuración local\Archivos temporales de Internet\Content.IE5\85OT89AX\safri_duo_3.5[1].jpg Object is locked skipped C:\Documents and Settings\COYOTEZ.EQUIPO\Configuración local\Archivos temporales de Internet\Content.IE5\GHIF2LIJ\0000000001_000000000 000000091094[1].gif Object is locked skipped C:\Documents and Settings\COYOTEZ.EQUIPO\Configuración local\Archivos temporales de Internet\Content.IE5\GHIF2LIJ\0000007991_000000000 000000116534[1].swf Object is locked skipped C:\Documents and Settings\COYOTEZ.EQUIPO\Configuración local\Archivos temporales de Internet\Content.IE5\GHIF2LIJ\4Excalibur[1].jpg Object is locked skipped C:\Documents and Settings\COYOTEZ.EQUIPO\Configuración local\Archivos temporales de Internet\Content.IE5\GHIF2LIJ\5[1].gif Object is locked skipped C:\Documents and Settings\COYOTEZ.EQUIPO\Configuración local\Archivos temporales de Internet\Content.IE5\GHIF2LIJ\cabecera[1].swf Object is locked skipped C:\Documents and Settings\COYOTEZ.EQUIPO\Configuración local\Archivos temporales de Internet\Content.IE5\GHIF2LIJ\calendario[1].gif Object is locked skipped C:\Documents and Settings\COYOTEZ.EQUIPO\Configuración local\Archivos temporales de Internet\Content.IE5\GHIF2LIJ\getacro[1].gif Object is locked skipped C:\Documents and Settings\COYOTEZ.EQUIPO\Configuración local\Archivos temporales de Internet\Content.IE5\GHIF2LIJ\ico_2[1].gif Object is locked skipped C:\Documents and Settings\COYOTEZ.EQUIPO\Configuración local\Archivos temporales de Internet\Content.IE5\GHIF2LIJ\img_16[1].gif Object is locked skipped C:\Documents and Settings\COYOTEZ.EQUIPO\Configuración local\Archivos temporales de Internet\Content.IE5\GHIF2LIJ\search[1].htm Object is locked skipped C:\Documents and Settings\COYOTEZ.EQUIPO\Configuración local\Archivos temporales de Internet\Content.IE5\GHIF2LIJ\search[4] Object is locked skipped C:\Documents and Settings\COYOTEZ.EQUIPO\Configuración local\Archivos temporales de Internet\Content.IE5\GHIF2LIJ\stiloff[1].css Object is locked skipped C:\Documents and Settings\COYOTEZ.EQUIPO\Configuración local\Archivos temporales de Internet\Content.IE5\KL89S7QR\0000011712_000000000 000000113853[1].gif Object is locked skipped C:\Documents and Settings\COYOTEZ.EQUIPO\Configuración local\Archivos temporales de Internet\Content.IE5\KL89S7QR\0000054103_000000000 000000120346[1].gif Object is locked skipped C:\Documents and Settings\COYOTEZ.EQUIPO\Configuración local\Archivos temporales de Internet\Content.IE5\KL89S7QR\bullet_31[1].gif Object is locked skipped C:\Documents and Settings\COYOTEZ.EQUIPO\Configuración local\Archivos temporales de Internet\Content.IE5\KL89S7QR\cabecera_03[1].gif Object is locked skipped C:\Documents and Settings\COYOTEZ.EQUIPO\Configuración local\Archivos temporales de Internet\Content.IE5\KL89S7QR\doom3[1].jpg Object is locked skipped C:\Documents and Settings\COYOTEZ.EQUIPO\Configuración local\Archivos temporales de Internet\Content.IE5\KL89S7QR\f_puntos[1].gif Object is locked skipped C:\Documents and Settings\COYOTEZ.EQUIPO\Configuración local\Archivos temporales de Internet\Content.IE5\KL89S7QR\ganador_1060[1].jpg Object is locked skipped C:\Documents and Settings\COYOTEZ.EQUIPO\Configuración local\Archivos temporales de Internet\Content.IE5\KL89S7QR\go[2].gif Object is locked skipped C:\Documents and Settings\COYOTEZ.EQUIPO\Configuración local\Archivos temporales de Internet\Content.IE5\KL89S7QR\informatica_personal ;subcat=Hardware;cat=Inform%C3%A1tica_personal;sec =Microconsultas;artid=20031125022;page=article[1] Object is locked skipped C:\Documents and Settings\COYOTEZ.EQUIPO\Configuración local\Archivos temporales de Internet\Content.IE5\KL89S7QR\mon_gra_der[1].gif Object is locked skipped C:\Documents and Settings\COYOTEZ.EQUIPO\Configuración local\Archivos temporales de Internet\Content.IE5\KL89S7QR\pixel[2].gif Object is locked skipped C:\Documents and Settings\COYOTEZ.EQUIPO\Configuración local\Archivos temporales de Internet\Content.IE5\KL89S7QR\ps2-off[1].gif Object is locked skipped C:\Documents and Settings\COYOTEZ.EQUIPO\Configuración local\Archivos temporales de Internet\Content.IE5\KL89S7QR\rating_2[1].gif Object is locked skipped C:\Documents and Settings\COYOTEZ.EQUIPO\Configuración local\Archivos temporales de Internet\Content.IE5\KL89S7QR\rating_4[1].gif Object is locked skipped C:\Documents and Settings\COYOTEZ.EQUIPO\Configuración local\Archivos temporales de Internet\Content.IE5\KL89S7QR\stuartlittle2[1].jpg Object is locked skipped C:\Documents and Settings\COYOTEZ.EQUIPO\Configuración local\Archivos temporales de Internet\Content.IE5\KL89S7QR\true_crime-box[1].jpg Object is locked skipped C:\Documents and Settings\COYOTEZ.EQUIPO\Configuración local\Archivos temporales de Internet\Content.IE5\WFKL0JOP\0000000001_000000000 000000096874[1].swf Object is locked skipped C:\Documents and Settings\COYOTEZ.EQUIPO\Configuración local\Archivos temporales de Internet\Content.IE5\WFKL0JOP\0000006025_000000000 000000118410[1].gif Object is locked skipped C:\Documents and Settings\COYOTEZ.EQUIPO\Configuración local\Archivos temporales de Internet\Content.IE5\WFKL0JOP\0000055014_000000000 000000116475[1].gif Object is locked skipped C:\Documents and Settings\COYOTEZ.EQUIPO\Configuración local\Archivos temporales de Internet\Content.IE5\WFKL0JOP\ayuda_of[1].gif Object is locked skipped C:\Documents and Settings\COYOTEZ.EQUIPO\Configuración local\Archivos temporales de Internet\Content.IE5\WFKL0JOP\a_c2[1].gif Object is locked skipped C:\Documents and Settings\COYOTEZ.EQUIPO\Configuración local\Archivos temporales de Internet\Content.IE5\WFKL0JOP\CAD40J15 Object is locked skipped C:\Documents and Settings\COYOTEZ.EQUIPO\Configuración local\Archivos temporales de Internet\Content.IE5\WFKL0JOP\CAMVUZEH Object is locked skipped C:\Documents and Settings\COYOTEZ.EQUIPO\Configuración local\Archivos temporales de Internet\Content.IE5\WFKL0JOP\CAPOSB9X Object is locked skipped C:\Documents and Settings\COYOTEZ.EQUIPO\Configuración local\Archivos temporales de Internet\Content.IE5\WFKL0JOP\cdz1[1].gif Object is locked skipped C:\Documents and Settings\COYOTEZ.EQUIPO\Configuración local\Archivos temporales de Internet\Content.IE5\WFKL0JOP\firewall[1].jpg Object is locked skipped C:\Documents and Settings\COYOTEZ.EQUIPO\Configuración local\Archivos temporales de Internet\Content.IE5\WFKL0JOP\home[2] Object is locked skipped C:\Documents and Settings\COYOTEZ.EQUIPO\Configuración local\Archivos temporales de Internet\Content.IE5\WFKL0JOP\horosocopo_120_4[1].gif Object is locked skipped C:\Documents and Settings\COYOTEZ.EQUIPO\Configuración local\Archivos temporales de Internet\Content.IE5\WFKL0JOP\h_06[1].jpg Object is locked skipped C:\Documents and Settings\COYOTEZ.EQUIPO\Configuración local\Archivos temporales de Internet\Content.IE5\WFKL0JOP\minibaner[1].gif Object is locked skipped C:\Documents and Settings\COYOTEZ.EQUIPO\Configuración local\Archivos temporales de Internet\Content.IE5\WFKL0JOP\programa[2].php Object is locked skipped C:\Documents and Settings\COYOTEZ.EQUIPO\Configuración local\Archivos temporales de Internet\Content.IE5\WFKL0JOP\prohibido[1].gif Object is locked skipped C:\Documents and Settings\COYOTEZ.EQUIPO\Configuración local\Archivos temporales de Internet\Content.IE5\WFKL0JOP\supene_120x90_4[1].gif Object is locked skipped C:\Documents and Settings\COYOTEZ.EQUIPO\Configuración local\Archivos temporales de Internet\Content.IE5\WFKL0JOP\tricon_email[1].gif Object is locked skipped C:\Documents and Settings\COYOTEZ.EQUIPO\Configuración local\Datos de programa\Identities\{F28C4058-BE08-4530-8DFA-794C1C1EEA77}\Microsoft\Outlook Express\Bandeja de entrada.dbx Object is locked skipped C:\Documents and Settings\COYOTEZ.EQUIPO\Configuración local\Datos de programa\Identities\{F28C4058-BE08-4530-8DFA-794C1C1EEA77}\Microsoft\Outlook Express\Folders.dbx Object is locked skipped C:\Documents and Settings\COYOTEZ.EQUIPO\Configuración local\Datos de programa\Microsoft\Internet Explorer\MSIMGSIZ.DAT Object is locked skipped C:\Documents and Settings\COYOTEZ.EQUIPO\Configuración local\Historial\History.IE5\desktop.ini Object is locked skipped C:\Documents and Settings\COYOTEZ.EQUIPO\Configuración local\Historial\History.IE5\MSHist0120041108200411 09\index.dat Object is locked skipped C:\Documents and Settings\COYOTEZ.EQUIPO\Configuración local\Temp\_is3\MindSoft Utilities XP 8.1.msi Object is locked skipped C:\Documents and Settings\COYOTEZ.EQUIPO\Configuración local\Temp\{76542ee3-5849-11d2-9c18-00609707c0ff}\ICEinstall.dll Object is locked skipped C:\Documents and Settings\COYOTEZ.EQUIPO\Configuración local\Temp\{76542ee3-5849-11d2-9c18-00609707c0ff}\updateini.dll Object is locked skipped C:\Documents and Settings\COYOTEZ.EQUIPO\Cookies\coyotez@120[2].txt Object is locked skipped C:\Documents and Settings\LocalService.NT AUTHORITY.000\Configuración local\Archivos temporales de Internet\Content.IE5\index.dat Object is locked skipped CONTINUA |
|
05/12/06, 21:53:18
| |
| |||
| Estos son agujeros, y no lo de Marbella III C:\Documents and Settings\LocalService.NT AUTHORITY.000\Configuración local\Datos de programa\Microsoft\Windows\UsrClass.dat Object is locked skipped C:\Documents and Settings\LocalService.NT AUTHORITY.000\Configuración local\Datos de programa\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped C:\Documents and Settings\LocalService.NT AUTHORITY.000\Configuración local\Historial\History.IE5\index.dat Object is locked skipped C:\Documents and Settings\LocalService.NT AUTHORITY.000\Cookies\index.dat Object is locked skipped C:\Documents and Settings\LocalService.NT AUTHORITY.000\Datos de programa\Webroot\Spy Sweeper\Data\settings.dat Object is locked skipped C:\Documents and Settings\LocalService.NT AUTHORITY.000\Datos de programa\Webroot\Spy Sweeper\Temp\SSCS03DF65AB-97F6-4D06-89C1-8EA330FFF101.tmp Object is locked skipped C:\Documents and Settings\LocalService.NT AUTHORITY.000\Datos de programa\Webroot\Spy Sweeper\Temp\SSCS06D868A3-E7C9-4516-BD72-F0349B295CFB.tmp Object is locked skipped C:\Documents and Settings\LocalService.NT AUTHORITY.000\Datos de programa\Webroot\Spy Sweeper\Temp\SSCS0CFAEDFB-E5B2-4436-9E17-64E11CECF91A.tmp Object is locked skipped C:\Documents and Settings\LocalService.NT AUTHORITY.000\Datos de programa\Webroot\Spy Sweeper\Temp\SSCS1255B019-4139-4D37-BF37-3474F6EC5E75.tmp Object is locked skipped C:\Documents and Settings\LocalService.NT AUTHORITY.000\Datos de programa\Webroot\Spy Sweeper\Temp\SSCS1AA30919-2E22-46CF-8652-EE0E50EE67D0.tmp Object is locked skipped C:\Documents and Settings\LocalService.NT AUTHORITY.000\Datos de programa\Webroot\Spy Sweeper\Temp\SSCS1E597383-0C2E-439C-84AB-9F3E48437523.tmp Object is locked skipped C:\Documents and Settings\LocalService.NT AUTHORITY.000\Datos de programa\Webroot\Spy Sweeper\Temp\SSCS2A420715-DCFB-4BEE-881D-371171443304.tmp Object is locked skipped C:\Documents and Settings\LocalService.NT AUTHORITY.000\Datos de programa\Webroot\Spy Sweeper\Temp\SSCS2FB21D55-FDE9-4367-A24D-90B36D83FD37.tmp Object is locked skipped C:\Documents and Settings\LocalService.NT AUTHORITY.000\Datos de programa\Webroot\Spy Sweeper\Temp\SSCS3120703F-1C24-4B60-88B8-BE55C08336DA.tmp Object is locked skipped C:\Documents and Settings\LocalService.NT AUTHORITY.000\Datos de programa\Webroot\Spy Sweeper\Temp\SSCS34733FF7-1D79-4BEA-BBAC-656B966FD4C9.tmp Object is locked skipped C:\Documents and Settings\LocalService.NT AUTHORITY.000\Datos de programa\Webroot\Spy Sweeper\Temp\SSCS35D93C7B-21D9-404B-8DE2-CB8641808284.tmp Object is locked skipped C:\Documents and Settings\LocalService.NT AUTHORITY.000\Datos de programa\Webroot\Spy Sweeper\Temp\SSCS378378B3-92A0-4655-AA38-03B91C3124BC.tmp Object is locked skipped C:\Documents and Settings\LocalService.NT AUTHORITY.000\Datos de programa\Webroot\Spy Sweeper\Temp\SSCS3DCA321C-5B61-46C4-B464-6F8DC21918E5.tmp Object is locked skipped C:\Documents and Settings\LocalService.NT AUTHORITY.000\Datos de programa\Webroot\Spy Sweeper\Temp\SSCS3F2D6B45-33AE-4292-BAB3-5AF1DEB3DE3E.tmp Object is locked skipped C:\Documents and Settings\LocalService.NT AUTHORITY.000\Datos de programa\Webroot\Spy Sweeper\Temp\SSCS3F43FDC5-61CD-45AB-8F4E-EED133344A7D.tmp Object is locked skipped C:\Documents and Settings\LocalService.NT AUTHORITY.000\Datos de programa\Webroot\Spy Sweeper\Temp\SSCS468EBBA5-2948-4A5F-B9CE-1C28BB6EF69E.tmp Object is locked skipped C:\Documents and Settings\LocalService.NT AUTHORITY.000\Datos de programa\Webroot\Spy Sweeper\Temp\SSCS46D59A66-3DD3-4BA0-A9BA-863984F3C9A4.tmp Object is locked skipped C:\Documents and Settings\LocalService.NT AUTHORITY.000\Datos de programa\Webroot\Spy Sweeper\Temp\SSCS49169CD3-1F2C-43E1-8A84-2B43BF7F1AC9.tmp Object is locked skipped C:\Documents and Settings\LocalService.NT AUTHORITY.000\Datos de programa\Webroot\Spy Sweeper\Temp\SSCS4AC603CA-1511-4CB5-BB61-7FEAD0890320.tmp Object is locked skipped C:\Documents and Settings\LocalService.NT AUTHORITY.000\Datos de programa\Webroot\Spy Sweeper\Temp\SSCS4C776A78-74D6-4702-BD1C-5AC954DB21A0.tmp Object is locked skipped C:\Documents and Settings\LocalService.NT AUTHORITY.000\Datos de programa\Webroot\Spy Sweeper\Temp\SSCS4FE5D14C-F4CB-4583-BDB1-148812970D5A.tmp Object is locked skipped C:\Documents and Settings\LocalService.NT AUTHORITY.000\Datos de programa\Webroot\Spy Sweeper\Temp\SSCS52A020A8-3162-4B46-84D5-7945B0924ABD.tmp Object is locked skipped C:\Documents and Settings\LocalService.NT AUTHORITY.000\Datos de programa\Webroot\Spy Sweeper\Temp\SSCS5A8018E2-5F59-4CAC-9A40-AFCFA538974D.tmp Object is locked skipped C:\Documents and Settings\LocalService.NT AUTHORITY.000\Datos de programa\Webroot\Spy Sweeper\Temp\SSCS5D3AA805-1B57-4BD4-9E7A-54F70843D02A.tmp Object is locked skipped C:\Documents and Settings\LocalService.NT AUTHORITY.000\Datos de programa\Webroot\Spy Sweeper\Temp\SSCS60DB890A-BE75-47CF-81D3-99BBFFDC33ED.tmp Object is locked skipped C:\Documents and Settings\LocalService.NT AUTHORITY.000\Datos de programa\Webroot\Spy Sweeper\Temp\SSCS631604CF-3F9F-441E-A155-49D4993C93BE.tmp Object is locked skipped C:\Documents and Settings\LocalService.NT AUTHORITY.000\Datos de programa\Webroot\Spy Sweeper\Temp\SSCS64B96165-143B-4177-8F65-BB122934F537.tmp Object is locked skipped C:\Documents and Settings\LocalService.NT AUTHORITY.000\Datos de programa\Webroot\Spy Sweeper\Temp\SSCS64E47C22-2E13-4483-8566-F252D18C5D3A.tmp Object is locked skipped C:\Documents and Settings\LocalService.NT AUTHORITY.000\Datos de programa\Webroot\Spy Sweeper\Temp\SSCS661A7207-9465-45D2-92C9-4526E22B1981.tmp Object is locked skipped C:\Documents and Settings\LocalService.NT AUTHORITY.000\Datos de programa\Webroot\Spy Sweeper\Temp\SSCS70DE6952-0A66-4D06-8A13-9E28366F0EB4.tmp Object is locked skipped C:\Documents and Settings\LocalService.NT AUTHORITY.000\Datos de programa\Webroot\Spy Sweeper\Temp\SSCS77C0ED6E-648B-4D67-866F-A3C57DC429A9.tmp Object is locked skipped C:\Documents and Settings\LocalService.NT AUTHORITY.000\Datos de programa\Webroot\Spy Sweeper\Temp\SSCS791C2D07-16DC-402D-A44A-A29FDC12AABD.tmp Object is locked skipped C:\Documents and Settings\LocalService.NT AUTHORITY.000\Datos de programa\Webroot\Spy Sweeper\Temp\SSCS7A04A84A-276E-4E48-8232-84066315215C.tmp Object is locked skipped C:\Documents and Settings\LocalService.NT AUTHORITY.000\Datos de programa\Webroot\Spy Sweeper\Temp\SSCS7B1CE130-3E4C-4218-8BB0-9BD341648E10.tmp Object is locked skipped C:\Documents and Settings\LocalService.NT AUTHORITY.000\Datos de programa\Webroot\Spy Sweeper\Temp\SSCS7BE466D9-67B5-4810-AE88-FD42196A1E0C.tmp Object is locked skipped C:\Documents and Settings\LocalService.NT AUTHORITY.000\Datos de programa\Webroot\Spy Sweeper\Temp\SSCS7DBDF483-A588-40FB-9AB0-25E4BDE3323E.tmp Object is locked skipped C:\Documents and Settings\LocalService.NT AUTHORITY.000\Datos de programa\Webroot\Spy Sweeper\Temp\SSCS81723E0F-6162-4F4B-B674-B2A754D2FA69.tmp Object is locked skipped C:\Documents and Settings\LocalService.NT AUTHORITY.000\Datos de programa\Webroot\Spy Sweeper\Temp\SSCS8346513A-260C-41C8-90ED-93CDEEA59A78.tmp Object is locked skipped C:\Documents and Settings\LocalService.NT AUTHORITY.000\Datos de programa\Webroot\Spy Sweeper\Temp\SSCS83A09E12-9566-408D-9BCD-9EA8A7AEB942.tmp Object is locked skipped C:\Documents and Settings\LocalService.NT AUTHORITY.000\Datos de programa\Webroot\Spy Sweeper\Temp\SSCS89946B7C-C657-4888-AD09-B78E77D7D86A.tmp Object is locked skipped C:\Documents and Settings\LocalService.NT AUTHORITY.000\Datos de programa\Webroot\Spy Sweeper\Temp\SSCS8A49CD28-BA87-4E5D-9C0F-D190C1E58777.tmp Object is locked skipped C:\Documents and Settings\LocalService.NT AUTHORITY.000\Datos de programa\Webroot\Spy Sweeper\Temp\SSCS8AFC499F-B94D-412D-AA44-5078AC61BD1E.tmp Object is locked skipped C:\Documents and Settings\LocalService.NT AUTHORITY.000\Datos de programa\Webroot\Spy Sweeper\Temp\SSCS978C817E-67CC-45E0-8D22-5CB923F637D4.tmp Object is locked skipped C:\Documents and Settings\LocalService.NT AUTHORITY.000\Datos de programa\Webroot\Spy Sweeper\Temp\SSCS979FC50B-33AF-40B1-9FAF-0B40113548FA.tmp Object is locked skipped C:\Documents and Settings\LocalService.NT AUTHORITY.000\Datos de programa\Webroot\Spy Sweeper\Temp\SSCS9BB043C4-527B-4002-8732-A6A1060EEFBC.tmp Object is locked skipped C:\Documents and Settings\LocalService.NT AUTHORITY.000\Datos de programa\Webroot\Spy Sweeper\Temp\SSCS9D1B6291-A0B3-4022-B71F-966381300582.tmp Object is locked skipped C:\Documents and Settings\LocalService.NT AUTHORITY.000\Datos de programa\Webroot\Spy Sweeper\Temp\SSCS9E4AB09A-FD0C-4A38-8287-FE7E1AA94547.tmp Object is locked skipped C:\Documents and Settings\LocalService.NT AUTHORITY.000\Datos de programa\Webroot\Spy Sweeper\Temp\SSCSA501BC44-9372-4326-8957-EE3866CECCCD.tmp Object is locked skipped C:\Documents and Settings\LocalService.NT AUTHORITY.000\Datos de programa\Webroot\Spy Sweeper\Temp\SSCSA6C869D7-0266-460D-9727-EA277828B9CA.tmp Object is locked skipped C:\Documents and Settings\LocalService.NT AUTHORITY.000\Datos de programa\Webroot\Spy Sweeper\Temp\SSCSA8EAB5DF-1865-4A9C-9DC3-74F56B289706.tmp Object is locked skipped C:\Documents and Settings\LocalService.NT AUTHORITY.000\Datos de programa\Webroot\Spy Sweeper\Temp\SSCSAB589FDF-778B-44DE-9DD0-3B85CF7A4572.tmp Object is locked skipped C:\Documents and Settings\LocalService.NT AUTHORITY.000\Datos de programa\Webroot\Spy Sweeper\Temp\SSCSACB68CDF-EDEE-4768-A72F-EECDBF2CE98B.tmp Object is locked skipped C:\Documents and Settings\LocalService.NT AUTHORITY.000\Datos de programa\Webroot\Spy Sweeper\Temp\SSCSB54B594F-383A-4A8B-A55F-4B589A7735D7.tmp Object is locked skipped C:\Documents and Settings\LocalService.NT AUTHORITY.000\Datos de programa\Webroot\Spy Sweeper\Temp\SSCSBCB33A44-F3CA-415B-A53E-012436A373A0.tmp Object is locked skipped C:\Documents and Settings\LocalService.NT AUTHORITY.000\Datos de programa\Webroot\Spy Sweeper\Temp\SSCSBEAC4753-5911-4A76-8C92-09293D82BE18.tmp Object is locked skipped C:\Documents and Settings\LocalService.NT AUTHORITY.000\Datos de programa\Webroot\Spy Sweeper\Temp\SSCSC3B0AFA9-509F-42EE-ADE9-8E182CCD2D79.tmp Object is locked skipped C:\Documents and Settings\LocalService.NT AUTHORITY.000\Datos de programa\Webroot\Spy Sweeper\Temp\SSCSC5B520A2-F497-473A-A46D-3164E9EE14B1.tmp Object is locked skipped C:\Documents and Settings\LocalService.NT AUTHORITY.000\Datos de programa\Webroot\Spy Sweeper\Temp\SSCSC817E378-944A-4E1B-BB38-4B5183F3964A.tmp Object is locked skipped C:\Documents and Settings\LocalService.NT AUTHORITY.000\Datos de programa\Webroot\Spy Sweeper\Temp\SSCSC859758C-18A5-4E04-9BC9-D0807C0F8EA2.tmp Object is locked skipped C:\Documents and Settings\LocalService.NT AUTHORITY.000\Datos de programa\Webroot\Spy Sweeper\Temp\SSCSCCBC58BA-A256-471A-B606-60E64975B08F.tmp Object is locked skipped C:\Documents and Settings\LocalService.NT AUTHORITY.000\Datos de programa\Webroot\Spy Sweeper\Temp\SSCSCD58A141-8331-4097-AAAF-697034EFEE9F.tmp Object is locked skipped C:\Documents and Settings\LocalService.NT AUTHORITY.000\Datos de programa\Webroot\Spy Sweeper\Temp\SSCSCF1279EC-0CC3-454A-A8D9-8B712CB928B8.tmp Object is locked skipped C:\Documents and Settings\LocalService.NT AUTHORITY.000\Datos de programa\Webroot\Spy Sweeper\Temp\SSCSDAA00474-9BD7-4CE1-8C0A-93F8DDC609B3.tmp Object is locked skipped C:\Documents and Settings\LocalService.NT AUTHORITY.000\Datos de programa\Webroot\Spy Sweeper\Temp\SSCSDBD8605F-1084-4E28-947E-EA75B104717E.tmp Object is locked skipped C:\Documents and Settings\LocalService.NT AUTHORITY.000\Datos de programa\Webroot\Spy Sweeper\Temp\SSCSDEA9DA38-DD42-4870-AFF8-E8CE3E929A4D.tmp Object is locked skipped C:\Documents and Settings\LocalService.NT AUTHORITY.000\Datos de programa\Webroot\Spy Sweeper\Temp\SSCSEC7C8CB4-4B91-40E5-A495-F01E446940B1.tmp Object is locked skipped C:\Documents and Settings\LocalService.NT AUTHORITY.000\Datos de programa\Webroot\Spy Sweeper\Temp\SSCSECE261C0-51FA-4CB2-A83B-4399D3402AEA.tmp Object is locked skipped C:\Documents and Settings\LocalService.NT AUTHORITY.000\Datos de programa\Webroot\Spy Sweeper\Temp\SSCSF062A771-3E72-4619-94B6-15391F2D026B.tmp Object is locked skipped C:\Documents and Settings\LocalService.NT AUTHORITY.000\Datos de programa\Webroot\Spy Sweeper\Temp\SSCSF5565411-3A2C-46E7-9D77-BEE6290EA5CE.tmp Object is locked skipped C:\Documents and Settings\LocalService.NT AUTHORITY.000\NTUSER.DAT Object is locked skipped C:\Documents and Settings\LocalService.NT AUTHORITY.000\ntuser.dat.LOG Object is locked skipped C:\Documents and Settings\NetworkService.NT AUTHORITY.000\Configuración local\Datos de programa\Microsoft\Windows\UsrClass.dat Object is locked skipped C:\Documents and Settings\NetworkService.NT AUTHORITY.000\Configuración local\Datos de programa\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped C:\Documents and Settings\NetworkService.NT AUTHORITY.000\NTUSER.DAT Object is locked skipped C:\Documents and Settings\NetworkService.NT AUTHORITY.000\ntuser.dat.LOG Object is locked skipped C:\RECYCLER\S-1-5-21-1202660629-1659004503-682003330-1003\Dc48.exe Infected: Packed.Win32.Klone.g skipped C:\RECYCLER\S-1-5-21-1202660629-1659004503-682003330-1003\Dc50.exe Infected: Trojan-Downloader.Win32.Agent.bca skipped C:\RECYCLER\S-1-5-21-1202660629-1659004503-682003330-1003\Dc51.exe Infected: Trojan-Dropper.Win32.Agent.azn skipped C:\RECYCLER\S-1-5-21-1202660629-1659004503-682003330-1003\Dc52.exe Infected: Trojan.Win32.Dialer.qs skipped C:\RECYCLER\S-1-5-21-1202660629-1659004503-682003330-1003\Dc53.exe Infected: Packed.Win32.Klone.g skipped C:\RECYCLER\S-1-5-21-1202660629-1659004503-682003330-1003\Dc54.exe Infected: Packed.Win32.Klone.g skipped C:\RECYCLER\S-1-5-21-1202660629-1659004503-682003330-1003\Dc55.exe Infected: Packed.Win32.Klone.g skipped C:\RECYCLER\S-1-5-21-1202660629-1659004503-682003330-1003\Dc56.exe Infected: Trojan.Win32.Dialer.qs skipped C:\RECYCLER\S-1-5-21-1202660629-1659004503-682003330-1003\Dc57.exe/data0002 Infected: Trojan-Downloader.Win32.PurityScan.dc skipped C:\RECYCLER\S-1-5-21-1202660629-1659004503-682003330-1003\Dc57.exe NSIS: infected - 1 skipped C:\RECYCLER\S-1-5-21-1202660629-1659004503-682003330-1003\Dc60.exe Infected: Packed.Win32.Klone.g skipped C:\RECYCLER\S-1-5-21-1202660629-1659004503-682003330-1003\Dc61.exe Infected: Packed.Win32.Klone.g skipped C:\RECYCLER\S-1-5-21-1202660629-1659004503-682003330-1003\Dc62.dll Infected: not-virus:Hoax.Win32.Renos.ge skipped C:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped C:\WIN\Debug\PASSWD.LOG Object is locked skipped C:\WIN\Internet Logs\ACME.ldb Object is locked skipped C:\WIN\Internet Logs\fwdbglog.txt Object is locked skipped C:\WIN\Internet Logs\fwpktlog.txt Object is locked skipped C:\WIN\Internet Logs\IAMDB.RDB Object is locked skipped C:\WIN\Internet Logs\tvDebug.log Object is locked skipped C:\WIN\SchedLgU.Txt Object is locked skipped C:\WIN\Sti_Trace.log Object is locked skipped C:\WIN\system32\ActiveScan\Panda ActiveScanPSK_NAMES Object is locked skipped C:\WIN\system32\ActiveScan\Panda ActiveScanPSK_NAMES2 Object is locked skipped C:\WIN\system32\asfiles.txt Object is locked skipped C:\WIN\system32\CatRoot2\edb.log Object is locked skipped C:\WIN\system32\CatRoot2\tmp.edb Object is locked skipped C:\WIN\system32\config\ACEEvent.evt Object is locked skipped C:\WIN\system32\config\AppEvent.Evt Object is locked skipped C:\WIN\system32\config\default Object is locked skipped C:\WIN\system32\config\default.LOG Object is locked skipped C:\WIN\system32\config\SAM Object is locked skipped C:\WIN\system32\config\SAM.LOG Object is locked skipped C:\WIN\system32\config\SecEvent.Evt Object is locked skipped C:\WIN\system32\config\SECURITY Object is locked skipped C:\WIN\system32\config\SECURITY.LOG Object is locked skipped C:\WIN\system32\config\software Object is locked skipped C:\WIN\system32\config\software.LOG Object is locked skipped C:\WIN\system32\config\SysEvent.Evt Object is locked skipped C:\WIN\system32\config\system Object is locked skipped C:\WIN\system32\config\system.LOG Object is locked skipped C:\WIN\system32\drivers\dtscsi.sys Object is locked skipped C:\WIN\system32\drivers\sptd.sys Object is locked skipped C:\WIN\system32\drivers\sptd9261.sys Object is locked skipped C:\WIN\system32\wbem\Repository\FS\INDEX.BTR Object is locked skipped C:\WIN\system32\wbem\Repository\FS\INDEX.MAP Object is locked skipped C:\WIN\system32\wbem\Repository\FS\MAPPING.VER Object is locked skipped C:\WIN\system32\wbem\Repository\FS\MAPPING1.MAP Object is locked skipped C:\WIN\system32\wbem\Repository\FS\MAPPING2.MAP Object is locked skipped C:\WIN\system32\wbem\Repository\FS\OBJECTS.DATA Object is locked skipped C:\WIN\system32\wbem\Repository\FS\OBJECTS.MAP Object is locked skipped C:\WIN\system32\winosz32.dll Infected: Trojan.Win32.Agent.vg skipped C:\WIN\Temp\win98.tmp.exe Infected: Packed.Win32.Klone.g skipped C:\WIN\Temp\win9D0.tmp.exe Infected: Packed.Win32.Klone.g skipped C:\WIN\Temp\winBD7.tmp.exe Infected: Packed.Win32.Klone.g skipped C:\WIN\Temp\winC8E.tmp.exe Infected: Trojan.Win32.Dialer.qs skipped C:\WIN\Temp\winCB5.tmp.exe Infected: Packed.Win32.Klone.g skipped C:\WIN\Temp\ZLT0083b.TMP Object is locked skipped C:\WIN\wiadebug.log Object is locked skipped C:\WIN\wiaservc.log Object is locked skipped ------------------------------------------------------------------------------------------------------------------------------ Spy Sweeper 19:39: Indicios encontrados: 16 19:39: Barrido completo finalizado. Tiempo transcurrido 00:07:56 19:39: Barrido de archivos finalizado, tiempo transcurrido: 00:06:10 19:38: rundlg32.inf (ID = 64760) 19:38: Encontrado Adware: iwantsearch 19:38: Advertencia: Failed to open file "c:\documents and settings\coy\datos de programa\mozilla\firefox\profiles\z7ne2vw9.default \parent.lock". La operación se ha completado correctamente 19:38: Advertencia: PerformFileOffsetMatch Failed to check file "c:\archivos de programa\archivos comunes\symantec shared\eengine\eraser.sys". "c:\archivos de programa\archivos comunes\symantec shared\eengine\eraser.sys": File not found 19:34: radlight.lnk (ID = 275740) 19:33: radlight.lnk (ID = 275740) 19:33: Encontrado Adware: radlight divx player 19:32: Iniciando barrido de archivos 19:32: Advertencia: Failed to access drive A: 19:32: Barrido de cookies finalizado, tiempo transcurrido: 00:00:02 19:32: coy@tracking[2].txt (ID = 3571) 19:32: Encontrado Spy Cookie: tracking cookie 19:32: coy@toyota.touchclarity[1].txt (ID = 3566) 19:32: coy@renault.touchclarity[1].txt (ID = 3566) 19:32: coy@m.webtrends[2].txt (ID = 3669) 19:32: Encontrado Spy Cookie: webtrends cookie 19:32: coy@honda.touchclarity[1].txt (ID = 3566) 19:32: coy@hits.clickandtrack[2].txt (ID = 2397) 19:32: Encontrado Spy Cookie: clickandtrack cookie 19:32: coy@ford.touchclarity[1].txt (ID = 3566) 19:32: Encontrado Spy Cookie: touchclarity cookie 19:32: coy@espndeportes.espn.go[1].txt (ID = 2729) 19:32: Encontrado Spy Cookie: go.com cookie 19:32: Iniciando barrido de cookies 19:32: Barrido de registro finalizado, tiempo transcurrido:00:00:26 19:32: HKLM\software\classes\vsenchancer.chl\ (ID = 1519792) 19:32: HKCR\vsenchancer.chl\ (ID = 1519747) 19:32: HKLM\software\classes\media-codec.chl\ (ID = 1247793) 19:32: HKCR\media-codec.chl\ (ID = 1247790) 19:32: Encontrado Trojan Horse: trojan-downloader-zlob 19:32: HKLM\software\microsoft\mssmgr\ (ID = 937101) 19:32: Encontrado Trojan Horse: trojan agent winlogonhook 19:32: Iniciando barrido de registro 19:32: Barrido de memoria finalizado, tiempo transcurrido: 00:01:10 19:31: Iniciando barrido de memoria 19:31: Barrido iniciado utilizando la versión de las definiciones 723 19:31: Spy Sweeper 5.0.7.1608 iniciado 19:31: | Inicio de sesión, lunes, 04 de diciembre de 2006 | ******** Acceso denegado 20:51: Advertencia: System Error. Code: 5. Acceso denegado 20:47: Advertencia: System Error. Code: 5. Acceso denegado 20:47: Advertencia: System Error. Code: 5. 20:47: El protector de comunicación de espías ha bloqueado el acceso a: HERE4SEARCH.BIZ 20:47: El protector de comunicación de espías ha bloqueado el acceso a: SMART-SECURITY.BIZ 20:47: El protector de comunicación de espías ha bloqueado el acceso a: HERE4SEARCH.BIZ 20:47: El protector de comunicación de espías ha bloqueado el acceso a: SMART-SECURITY.BIZ Acceso denegado 20:45: Advertencia: System Error. Code: 5. Acceso denegado 20:45: Advertencia: System Error. Code: 5. Acceso denegado 20:45: Advertencia: System Error. Code: 5. Acceso denegado 20:45: Advertencia: System Error. Code: 5. Acceso denegado 20:43: Advertencia: System Error. Code: 5. Acceso denegado 20:43: Advertencia: System Error. Code: 5. Acceso denegado 20:43: Advertencia: System Error. Code: 5. Acceso denegado 20:43: Advertencia: System Error. Code: 5. Acceso denegado 20:42: Advertencia: System Error. Code: 5. Acceso denegado 20:42: Advertencia: System Error. Code: 5. Acceso denegado 20:42: Advertencia: System Error. Code: 5. Acceso denegado 20:42: Advertencia: System Error. Code: 5. Acceso denegado 20:42: Advertencia: System Error. Code: 5. Acceso denegado 20:42: Advertencia: System Error. Code: 5. Acceso denegado 20:42: Advertencia: System Error. Code: 5. Acceso denegado 20:38: Advertencia: System Error. Code: 5. Acceso denegado 20:37: Advertencia: System Error. Code: 5. Acceso denegado 20:37: Advertencia: System Error. Code: 5. Acceso denegado 20:36: Advertencia: System Error. Code: 5. Acceso denegado 20:36: Advertencia: System Error. Code: 5. Acceso denegado 20:36: Advertencia: System Error. Code: 5. Acceso denegado 20:36: Advertencia: System Error. Code: 5. Acceso denegado 20:36: Advertencia: System Error. Code: 5. Acceso denegado 20:36: Advertencia: System Error. Code: 5. Acceso denegado 20:36: Advertencia: System Error. Code: 5. Acceso denegado 20:36: Advertencia: System Error. Code: 5. 20:35: Estado del barrido: 7 elementos encontrados 20:35: Indicios encontrados: 13 20:35: Barrido de archivos finalizado, tiempo transcurrido: 00:02:10 20:35: Barrido cancelado Acceso denegado 20:35: Advertencia: System Error. Code: 5. Acceso denegado 20:35: Advertencia: System Error. Code: 5. Acceso denegado 20:35: Advertencia: System Error. Code: 5. Acceso denegado 20:35: Advertencia: System Error. Code: 5. Acceso denegado 20:35: Advertencia: System Error. Code: 5. Acceso denegado 20:35: Advertencia: System Error. Code: 5. Acceso denegado 20:35: Advertencia: System Error. Code: 5. Acceso denegado 20:35: Advertencia: System Error. Code: 5. Acceso denegado 20:35: Advertencia: System Error. Code: 5. Acceso denegado 20:35: Advertencia: System Error. Code: 5. Acceso denegado 20:35: Advertencia: System Error. Code: 5. Acceso denegado 20:35: Advertencia: System Error. Code: 5. Acceso denegado 20:35: Advertencia: System Error. Code: 5. Acceso denegado 20:35: Advertencia: System Error. Code: 5. Acceso denegado 20:35: Advertencia: System Error. Code: 5. Acceso denegado 20:35: Advertencia: System Error. Code: 5. Acceso denegado 20:35: Advertencia: System Error. Code: 5. Acceso denegado 20:35: Advertencia: System Error. Code: 5. Acceso denegado 20:35: Advertencia: System Error. Code: 5. Acceso denegado 20:35: Advertencia: System Error. Code: 5. Acceso denegado 20:35: Advertencia: System Error. Code: 5. Acceso denegado 20:35: Advertencia: System Error. Code: 5. Acceso denegado 20:35: Advertencia: System Error. Code: 5. Acceso denegado 20:35: Advertencia: System Error. Code: 5. Acceso denegado 20:34: Advertencia: System Error. Code: 5. Acceso denegado 20:34: Advertencia: System Error. Code: 5. Acceso denegado 20:34: Advertencia: System Error. Code: 5. Acceso denegado 20:34: Advertencia: System Error. Code: 5. Acceso denegado 20:34: Advertencia: System Error. Code: 5. Acceso denegado 20:34: Advertencia: System Error. Code: 5. Acceso denegado 20:34: Advertencia: System Error. Code: 5. Acceso denegado 20:34: Advertencia: System Error. Code: 5. Acceso denegado 20:34: Advertencia: System Error. Code: 5. Acceso denegado 20:34: Advertencia: System Error. Code: 5. Acceso denegado 20:34: Advertencia: System Error. Code: 5. Acceso denegado 20:34: Advertencia: System Error. Code: 5. Acceso denegado 20:34: Advertencia: System Error. Code: 5. Acceso denegado 20:34: Advertencia: System Error. Code: 5. Acceso denegado 20:34: Advertencia: System Error. Code: 5. Acceso denegado 20:34: Advertencia: System Error. Code: 5. Acceso denegado 20:34: Advertencia: System Error. Code: 5. Acceso denegado 20:34: Advertencia: System Error. Code: 5. Acceso denegado 20:34: Advertencia: System Error. Code: 5. Acceso denegado 20:34: Advertencia: System Error. Code: 5. Acceso denegado 20:34: Advertencia: System Error. Code: 5. 20:33: Iniciando barrido de archivos 20:33: Advertencia: Failed to access drive A: 20:33: Barrido de cookies finalizado, tiempo transcurrido: 00:00:01 20:33: c:\documents and settings\coy\cookies\coy@tracking[2].txt (ID = 3571) 20:33: Encontrado Spy Cookie: tracking cookie 20:33: c:\documents and settings\coy\cookies\coy@toyota.touchclarity[1].txt (ID = 3566) 20:33: c:\documents and settings\coy\cookies\coy@renault.touchclarity[1].txt (ID = 3566) 20:33: c:\documents and settings\coy\cookies\coy@m.webtrends[2].txt (ID = 3669) 20:33: Encontrado Spy Cookie: webtrends cookie 20:33: c:\documents and settings\coy\cookies\coy@honda.touchclarity[1].txt (ID = 3566) 20:33: c:\documents and settings\coy\cookies\coy@hits.clickandtrack[2].txt (ID = 2397) 20:33: Encontrado Spy Cookie: clickandtrack cookie 20:33: c:\documents and settings\coy\cookies\coy@ford.touchclarity[1].txt (ID = 3566) 20:33: Encontrado Spy Cookie: touchclarity cookie 20:33: c:\documents and settings\coy\cookies\coy@espndeportes.espn.go[1].txt (ID = 2729) 20:33: Encontrado Spy Cookie: go.com cookie 20:33: Iniciando barrido de cookies 20:33: Barrido de registro finalizado, tiempo transcurrido:00:00:10 20:33: HKLM\software\classes\vsenchancer.chl\ (ID = 1519792) 20:33: HKCR\vsenchancer.chl\ (ID = 1519747) 20:33: HKLM\software\classes\media-codec.chl\ (ID = 1247793) 20:33: HKCR\media-codec.chl\ (ID = 1247790) 20:33: Encontrado Trojan Horse: trojan-downloader-zlob 20:33: HKLM\software\microsoft\mssmgr\ (ID = 937101) 20:33: Encontrado Trojan Horse: trojan agent winlogonhook Me queda claro que tengo un dialer, pero no me entero de cual, por que cada scan me dice uno diferente y con las herramientas de eliminacion no los detecta. El Norton 2007 no encuentra mas que las cokies, y en el registro ni trazas de las cadenas que mencionan los post de foros que se deben eliminar. Bueno si alguien me recomienda alguna alternativa al formateo radikal, procuraré no estirarme de todos los pelos. Saludos y que "el DOS reparta suerte". |
|
« Tema Anterior
|
Próximo Tema »
| Herramientas | |
| |
| 
Temas Similares | |
| Tema | Autor | Foro | Respuestas | Último mensaje |
| Dialer italiano (Solucionado) | naranski | Temas Solucionados | 6 | 25/07/06 15:05:25 |
| Dialer en italiano (Terminado) | ERETI | Temas Solucionados | 3 | 20/07/06 15:16:04 |
| dialer con mensaje en italiano | mayana | Foro Oficial de HijackThis en español | 3 | 11/05/06 20:26:44 |
| Mi PC esta muy lenta y con problemas varios (Solucionado) | villasol | Temas Solucionados | 11 | 12/02/06 14:56:15 |
| Os Lo Suplico Ayuda (solucionado) | CALOBRA | Temas Solucionados | 5 | 04/08/05 08:45:43 |
Todas las horas son GMT -4. La hora es 05:27:28.
