Hola, me entro un troyano en el ordenador, tenia activado mi Mc afee y este me mostro la alarma, pero en el mensaje salia q no era posible eliminar, me parece q usa un archivo o nombre algo como ntuser.dat, he tratado de borrar pero no lo consigo.. he tratado de seguir algunos de vuestros consejos de mostrar archivos ocultos, he pasado el ewido y me salio el reporte q os pegare a continuacion,tambien pase el kasperskyon line, luego trate de eliminar, voilvi a escanear y ya no salia.. pero... aparece en la ruta mas o menos asi: c:\documenttsand settings\usuario\ntuser.dat o con la terminacion ini.. y ahora en otros sub archivos.. que no se pueden borrar, no se q es si es un troyano si se clona o q pasa y lo mas importante como lo puedo eliminar??... os agradeceria mucho que me ayudaras... gracias

______________________________________________
ewido anti-spyware online scanner
http://www.ewido.net
__________________________________________________


Name: TrackingCookie.2o7
Path: C:\Documents and Settings\usuario\Cookies\usuario@112.2o7[2].txt
Risk: Medium

Name: TrackingCookie.247realmedia
Path: C:\Documents and Settings\usuario\Cookies\usuario@247realmedia[2].txt
Risk: Medium

Name: TrackingCookie.2o7
Path: C:\Documents and Settings\usuario\Cookies\usuario@2o7[1].txt
Risk: Medium

Name: TrackingCookie.Adocean
Path: C:\Documents and Settings\usuario\Cookies\usuario@ad.adocean[2].txt
Risk: Medium

Name: TrackingCookie.Yieldmanager
Path: C:\Documents and Settings\usuario\Cookies\usuario@ad.yieldmanager[1].txt
Risk: Medium

Name: TrackingCookie.Pointroll
Path: C:\Documents and Settings\usuario\Cookies\usuario@ads.pointroll[2].txt
Risk: Medium

Name: TrackingCookie.Revenue
Path: C:\Documents and Settings\usuario\Cookies\usuario@ads01.revenue[1].txt
Risk: Medium

Name: TrackingCookie.Bpath
Path: C:\Documents and Settings\usuario\Cookies\usuario@ads41.bpath[2].txt
Risk: Medium

Name: TrackingCookie.Advertising
Path: C:\Documents and Settings\usuario\Cookies\usuario@advertising[1].txt
Risk: Medium

Name: TrackingCookie.Falkag
Path: C:\Documents and Settings\usuario\Cookies\usuario@as1.falkag[2].txt
Risk: Medium

Name: TrackingCookie.Atdmt
Path: C:\Documents and Settings\usuario\Cookies\usuario@atdmt[2].txt
Risk: Medium

Name: TrackingCookie.Bluestreak
Path: C:\Documents and Settings\usuario\Cookies\usuario@bluestreak[1].txt
Risk: Medium

Name: TrackingCookie.Serving-sys
Path: C:\Documents and Settings\usuario\Cookies\usuario@bs.serving-sys[2].txt
Risk: Medium

Name: TrackingCookie.Casalemedia
Path: C:\Documents and Settings\usuario\Cookies\usuario@casalemedia[2].txt
Risk: Medium

Name: TrackingCookie.Coremetrics
Path: C:\Documents and Settings\usuario\Cookies\usuario@data.coremetrics[1].txt
Risk: Medium

Name: TrackingCookie.Overture
Path: C:\Documents and Settings\usuario\Cookies\usuario@data1.perf.overtu re[1].txt
Risk: Medium

Name: TrackingCookie.Doubleclick
Path: C:\Documents and Settings\usuario\Cookies\usuario@doubleclick[1].txt
Risk: Medium

Name: TrackingCookie.Hitbox
Path: C:\Documents and Settings\usuario\Cookies\usuario@ehg-bbva.hitbox[1].txt
Risk: Medium

Name: TrackingCookie.Estat
Path: C:\Documents and Settings\usuario\Cookies\usuario@estat[1].txt
Risk: Medium

Name: TrackingCookie.Fastclick
Path: C:\Documents and Settings\usuario\Cookies\usuario@fastclick[1].txt
Risk: Medium

Name: TrackingCookie.Findwhat
Path: C:\Documents and Settings\usuario\Cookies\usuario@findwhat[1].txt
Risk: Medium

Name: TrackingCookie.Adocean
Path: C:\Documents and Settings\usuario\Cookies\usuario@gde.adocean[2].txt
Risk: Medium

Name: TrackingCookie.2o7
Path: C:\Documents and Settings\usuario\Cookies\usuario@hertz.122.2o7[1].txt
Risk: Medium

Name: TrackingCookie.Hitbox
Path: C:\Documents and Settings\usuario\Cookies\usuario@hitbox[2].txt
Risk: Medium

Name: TrackingCookie.Mediaplex
Path: C:\Documents and Settings\usuario\Cookies\usuario@mediaplex[1].txt
Risk: Medium

Name: TrackingCookie.2o7
Path: C:\Documents and Settings\usuario\Cookies\usuario@msnaccountservice s.112.2o7[1].txt
Risk: Medium

Name: TrackingCookie.2o7
Path: C:\Documents and Settings\usuario\Cookies\usuario@msnportal.112.2o7[2].txt
Risk: Medium

Name: TrackingCookie.2o7
Path: C:\Documents and Settings\usuario\Cookies\usuario@msnservices.112.2 o7[1].txt
Risk: Medium

Name: TrackingCookie.Adocean
Path: C:\Documents and Settings\usuario\Cookies\usuario@my.adocean[2].txt
Risk: Medium

Name: TrackingCookie.Overture
Path: C:\Documents and Settings\usuario\Cookies\usuario@overture[1].txt
Risk: Medium

Name: TrackingCookie.2o7
Path: C:\Documents and Settings\usuario\Cookies\usuario@paypal.112.2o7[1].txt
Risk: Medium

Name: TrackingCookie.Overture
Path: C:\Documents and Settings\usuario\Cookies\usuario@perf.overture[1].txt
Risk: Medium

Name: TrackingCookie.Questionmarket
Path: C:\Documents and Settings\usuario\Cookies\usuario@questionmarket[1].txt
Risk: Medium

Name: TrackingCookie.Revenue
Path: C:\Documents and Settings\usuario\Cookies\usuario@revenue[1].txt
Risk: Medium

Name: TrackingCookie.Adjuggler
Path: C:\Documents and Settings\usuario\Cookies\usuario@rotator.adjuggler[2].txt
Risk: Medium

Name: TrackingCookie.2o7
Path: C:\Documents and Settings\usuario\Cookies\usuario@sento.122.2o7[1].txt
Risk: Medium

Name: TrackingCookie.Serving-sys
Path: C:\Documents and Settings\usuario\Cookies\usuario@serving-sys[1].txt
Risk: Medium

Name: TrackingCookie.Onestat
Path: C:\Documents and Settings\usuario\Cookies\usuario@stat.onestat[1].txt
Risk: Medium

Name: TrackingCookie.Webtrendslive
Path: C:\Documents and Settings\usuario\Cookies\usuario@statse.webtrendsl ive[1].txt
Risk: Medium

Name: TrackingCookie.Tradedoubler
Path: C:\Documents and Settings\usuario\Cookies\usuario@tradedoubler[1].txt
Risk: Medium

Name: TrackingCookie.Trafic
Path: C:\Documents and Settings\usuario\Cookies\usuario@trafic[1].txt
Risk: Medium

Name: TrackingCookie.Tribalfusion
Path: C:\Documents and Settings\usuario\Cookies\usuario@tribalfusion[1].txt
Risk: Medium

Name: TrackingCookie.Weborama
Path: C:\Documents and Settings\usuario\Cookies\usuario@weborama[2].txt
Risk: Medium

Name: TrackingCookie.Etracker
Path: C:\Documents and Settings\usuario\Cookies\usuario@www.etracker[2].txt
Risk: Medium

Name: TrackingCookie.Zedo
Path: C:\Documents and Settings\usuario\Cookies\usuario@zedo[2].txt
Risk: Medium

Name: TrackingCookie.Yieldmanager
Path: C:\Documents and Settings\usuario\Configuración local\Temp\Cookies\usuario@ad.yieldmanager[1].txt
Risk: Medium

Name: TrackingCookie.Atdmt
Path: C:\Documents and Settings\usuario\Configuración local\Temp\Cookies\usuario@atdmt[2].txt
Risk: Medium

Name: TrackingCookie.Doubleclick
Path: C:\Documents and Settings\usuario\Configuración local\Temp\Cookies\usuario@doubleclick[1].txt
Risk: Medium

Name: TrackingCookie.2o7
Path: C:\Documents and Settings\usuario\Configuración local\Temp\Cookies\usuario@msnportal.112.2o7[1].txt
Risk: Medium

Name: TrackingCookie.Serving-sys
Path: C:\Documents and Settings\usuario\Configuración local\Temp\Cookies\usuario@serving-sys[2].txt
Risk: Medium

Name: TrackingCookie.Tradedoubler
Path: C:\Documents and Settings\usuario\Configuración local\Temp\Cookies\usuario@tradedoubler[2].txt
Risk: Medium

Name: TrackingCookie.Advertising
Path: C:\RECYCLER\S-1-5-21-1229272821-1500820517-1417001333-1005\Dc10.txt
Risk: Medium

Name: TrackingCookie.Atdmt
Path: C:\RECYCLER\S-1-5-21-1229272821-1500820517-1417001333-1005\Dc11.txt
Risk: Medium

Name: TrackingCookie.Casalemedia
Path: C:\RECYCLER\S-1-5-21-1229272821-1500820517-1417001333-1005\Dc12.txt
Risk: Medium

Name: TrackingCookie.Serving-sys
Path: C:\RECYCLER\S-1-5-21-1229272821-1500820517-1417001333-1005\Dc21.txt
Risk: Medium

Name: TrackingCookie.Overture
Path: C:\RECYCLER\S-1-5-21-1229272821-1500820517-1417001333-1005\Dc23.txt
Risk: Medium

Name: TrackingCookie.Doubleclick
Path: C:\RECYCLER\S-1-5-21-1229272821-1500820517-1417001333-1005\Dc24.txt
Risk: Medium

Name: TrackingCookie.2o7
Path: C:\RECYCLER\S-1-5-21-1229272821-1500820517-1417001333-1005\Dc3.txt
Risk: Medium

Name: TrackingCookie.2o7
Path: C:\RECYCLER\S-1-5-21-1229272821-1500820517-1417001333-1005\Dc47.txt
Risk: Medium

Name: TrackingCookie.Statcounter
Path: C:\RECYCLER\S-1-5-21-1229272821-1500820517-1417001333-1005\Dc50.txt
Risk: Medium

Name: TrackingCookie.Tradedoubler
Path: C:\RECYCLER\S-1-5-21-1229272821-1500820517-1417001333-1005\Dc55.txt
Risk: Medium

el ultimo reporte de ewido que pase es:

___________________________
ewido anti-spyware online scanner
http://www.ewido.net
__________________________________________________


Name: TrackingCookie.Yieldmanager
Path: C:\Documents and Settings\usuario\Cookies\usuario@ad.yieldmanager[1].txt
Risk: Medium

Name: TrackingCookie.Atdmt
Path: C:\Documents and Settings\usuario\Cookies\usuario@atdmt[2].txt
Risk: Medium

Name: TrackingCookie.Doubleclick
Path: C:\Documents and Settings\usuario\Cookies\usuario@doubleclick[1].txt
Risk: Medium

Name: TrackingCookie.Mediaplex
Path: C:\Documents and Settings\usuario\Cookies\usuario@mediaplex[1].txt
Risk: Medium

Name: TrackingCookie.Tradedoubler
Path: C:\Documents and Settings\usuario\Cookies\usuario@tradedoubler[1].txt
Risk: Medium

Hola,

Lo que muestra el reporte del ewido son solo cookies, las eliminas pasando el DiskCleaner

Sobre el archivo ntuser.dat:
LOS PERFILES DE USUARIO EN NT
Como ves, es un archivo de sistema, que tiene información referente a cada usuario, asi que no lo debes elimianr.

Actualiza tu antivirus Mc afee, y vuelvelo a pasar a ver si detecta algo. Si detecta algo, apunta el nombre, a ver si nos puede ayudara encontrar como eliminarlo y donde est'a.

Nos comentas...

Saludos

Hola,

Como mencionas, eres nueva en el foro, asi que te recomiendo que elas las politicas del foro:
Políticas del Foro de InfoSpyware

Creaste un tema similar aqui:
troyano ntuser.dat?? me podeis ayudar a eliminarlo?

Este tema se cierra, continua en el otro.

Saludos y suerte