Regresar   Foro de Spyware » Spyware - Adware - Hijackers - Malwares » Foro Oficial de HijackThis en español

         

InfoSpyware sortea una T-Shirts
Participa en el sorteo por una "Camiseta Oficial de InfoSpyware" gracias al amigo Enjuto Mojamuto

Para evitar Virus, Spyware y ventanas emergentes, en InfoSpyware recomendamos navegar con: FIREFOX

Foro Oficial de HijackThis en español Analizamos tu log de HijackThis para eliminar Hijackers, Spyware, Adware, ToolBars, Virus, Troyanos y Malwares en gral. Antes lea las Políticas del Foro de HijackThis.

Tema Cerrado
 
Herramientas
  post #1 (permalink)  
Antiguo 13/01/07, 00:58:25
Usuario
 
Registrado: dic 2006
Ubicación: mexico
Mensajes: 3
ayuda por favor con virus

nececito ayuda por favor con virus en mi computadora

tengo el antivirus active virus shield y me dice que tengo virus en mi pc. le doy en borrar y me dice que ya estan borrados esto es lo que me dice


Protection
----------
Total scanned: 9088
Detected: 6
Untreated: 0
Start time: 12/01/2007 18:56:37
Duration: 02:27:56


Detected
--------
Status Object
------ ------
deleted: Trojan program Trojan-Downloader.Win32.Agent.awf File: C:\windows\temp\ulogin125.exe/PE_Patch.UPX/UPX
deleted: Trojan program Trojan-Downloader.Win32.Agent.awf File: C:\Documents and Settings\beto\Configuración local\Archivos temporales de Internet\Content.IE5\K5EN89Q3\nweb2[1]/PE_Patch.UPX/UPX
deleted: Trojan program Trojan-Downloader.Win32.Small.dam File: C:\WINDOWS\system32\hfmdlule.exe
deleted: Trojan program Trojan-Clicker.Win32.Small.js File: C:\WINDOWS\system32\oaburxye.dmj
deleted: Trojan program Trojan.Win32.VB.atw File: C:\WINDOWS\system32\msmapi32.exe/UPX
deleted: adware not-a-virus:AdWare.Win32.Comet.az File: C:\Archivos de programa\Starware343\bin\Starware343.dll


Events
------
Time Event
---- -----
05/01/2007 15:03:59 A full computer scan has never been performed. Please complete a full scan as soon as possible. The initial scan may be time consuming, but you may pause and resume the scan at any time.
05/01/2007 15:05:18 A full computer scan has never been performed. Please complete a full scan as soon as possible. The initial scan may be time consuming, but you may pause and resume the scan at any time.
05/01/2007 15:09:18 Please restart your computer to complete the installation of new or updated protection components.
05/01/2007 15:09:25 Update completed successfully.
05/01/2007 16:32:12 A full computer scan has never been performed. Please complete a full scan as soon as possible. The initial scan may be time consuming, but you may pause and resume the scan at any time.
05/01/2007 16:34:01 Process (PID 884) tried to access Active Virus Shield process (PID 1556), but it has been blocked. This is Self-Defense monitoring, and you do not need to do anything.
05/01/2007 16:34:03 Process (PID 884) tried to access Active Virus Shield process (PID 452), but it has been blocked. This is Self-Defense monitoring, and you do not need to do anything.
05/01/2007 17:12:45 Please restart your computer to complete the installation of new or updated protection components.
05/01/2007 17:12:48 Update completed successfully.
05/01/2007 17:35:59 File C:\windows\temp\ulogin125.exe/PE_Patch.UPX/UPX: detected Trojan program Trojan-Downloader.Win32.Agent.awf
05/01/2007 17:35:59 Security threats have been detected. You are advised to neutralize them immediately.
05/01/2007 17:36:19 File C:\windows\temp\ulogin125.exe: deleted
05/01/2007 17:36:21 File C:\Documents and Settings\beto\Configuración local\Archivos temporales de Internet\Content.IE5\K5EN89Q3\nweb2[1]/PE_Patch.UPX/UPX: detected Trojan program Trojan-Downloader.Win32.Agent.awf
05/01/2007 17:36:21 Security threats have been detected. You are advised to neutralize them immediately.
05/01/2007 17:36:28 File C:\Documents and Settings\beto\Configuración local\Archivos temporales de Internet\Content.IE5\K5EN89Q3\nweb2[1]: deleted
05/01/2007 20:12:09 A full computer scan has never been performed. Please complete a full scan as soon as possible. The initial scan may be time consuming, but you may pause and resume the scan at any time.
05/01/2007 20:12:33 Update completed successfully.
05/01/2007 20:12:49 Process (PID 580) tried to access Active Virus Shield process (PID 1348), but it has been blocked. This is Self-Defense monitoring, and you do not need to do anything.
06/01/2007 13:55:57 A full computer scan has never been performed. Please complete a full scan as soon as possible. The initial scan may be time consuming, but you may pause and resume the scan at any time.
06/01/2007 13:56:08 Process (PID 1836) tried to access Active Virus Shield process (PID 1340), but it has been blocked. This is Self-Defense monitoring, and you do not need to do anything.
06/01/2007 13:56:08 Process (PID 1836) tried to access Active Virus Shield process (PID 1984), but it has been blocked. This is Self-Defense monitoring, and you do not need to do anything.
06/01/2007 13:56:37 Update completed successfully.
06/01/2007 15:56:11 Process (PID 3660) tried to access Active Virus Shield process (PID 1340), but it has been blocked. This is Self-Defense monitoring, and you do not need to do anything.
06/01/2007 15:56:11 Process (PID 3660) tried to access Active Virus Shield process (PID 1984), but it has been blocked. This is Self-Defense monitoring, and you do not need to do anything.
06/01/2007 16:07:23 Update completed successfully.
07/01/2007 11:51:02 A full computer scan has never been performed. Please complete a full scan as soon as possible. The initial scan may be time consuming, but you may pause and resume the scan at any time.
07/01/2007 11:51:12 Process (PID 1548) tried to access Active Virus Shield process (PID 1340), but it has been blocked. This is Self-Defense monitoring, and you do not need to do anything.
07/01/2007 11:51:35 Update completed successfully.
07/01/2007 14:01:22 Update completed successfully.
07/01/2007 16:11:42 Update completed successfully.
07/01/2007 18:34:30 A full computer scan has never been performed. Please complete a full scan as soon as possible. The initial scan may be time consuming, but you may pause and resume the scan at any time.
07/01/2007 18:34:47 Update completed successfully.
08/01/2007 14:20:17 A full computer scan has never been performed. Please complete a full scan as soon as possible. The initial scan may be time consuming, but you may pause and resume the scan at any time.
08/01/2007 14:20:24 Process (PID 1540) tried to access Active Virus Shield process (PID 1352), but it has been blocked. This is Self-Defense monitoring, and you do not need to do anything.
08/01/2007 14:20:39 Update completed successfully.
11/01/2007 9:14:19 A full computer scan has never been performed. Please complete a full scan as soon as possible. The initial scan may be time consuming, but you may pause and resume the scan at any time.
11/01/2007 9:15:03 Update completed successfully.
11/01/2007 11:09:49 File C:\WINDOWS\system32\hfmdlule.exe: detected Trojan program Trojan-Downloader.Win32.Small.dam
11/01/2007 11:09:50 Security threats have been detected. You are advised to neutralize them immediately.
11/01/2007 1104 File C:\WINDOWS\system32\hfmdlule.exe: deleted
11/01/2007 1104 File C:\WINDOWS\system32\oaburxye.dmj: detected Trojan program Trojan-Clicker.Win32.Small.js
11/01/2007 1104 Security threats have been detected. You are advised to neutralize them immediately.
11/01/2007 1105 File C:\WINDOWS\system32\oaburxye.dmj: deleted
11/01/2007 1106 File C:\WINDOWS\system32\msmapi32.exe/UPX: detected Trojan program Trojan.Win32.VB.atw
11/01/2007 1106 Security threats have been detected. You are advised to neutralize them immediately.
11/01/2007 1106 File C:\WINDOWS\system32\msmapi32.exe: deleted
11/01/2007 11:25:15 Update completed successfully.
11/01/2007 13:25:50 Update completed successfully.
11/01/2007 14:45:32 A full computer scan has never been performed. Please complete a full scan as soon as possible. The initial scan may be time consuming, but you may pause and resume the scan at any time.
11/01/2007 14:48:10 Process (PID 1448) tried to access Active Virus Shield process (PID 1380), but it has been blocked. This is Self-Defense monitoring, and you do not need to do anything.
11/01/2007 14:48:22 Process (PID 1448) tried to access Active Virus Shield process (PID 1564), but it has been blocked. This is Self-Defense monitoring, and you do not need to do anything.
11/01/2007 14:48:52 Real-time protection is disabled.
11/01/2007 14:49:42 Real-time protection is disabled.
11/01/2007 15:37:34 A full computer scan has never been performed. Please complete a full scan as soon as possible. The initial scan may be time consuming, but you may pause and resume the scan at any time.
11/01/2007 15:38:58 Update completed successfully.
11/01/2007 15:43:44 Process (PID 1464) tried to access Active Virus Shield process (PID 1376), but it has been blocked. This is Self-Defense monitoring, and you do not need to do anything.
11/01/2007 15:43:49 Process (PID 1464) tried to access Active Virus Shield process (PID 1076), but it has been blocked. This is Self-Defense monitoring, and you do not need to do anything.
11/01/2007 17:48:36 Update completed successfully.
11/01/2007 18:43:37 A full computer scan has never been performed. Please complete a full scan as soon as possible. The initial scan may be time consuming, but you may pause and resume the scan at any time.
11/01/2007 20:01:58 A full computer scan has never been performed. Please complete a full scan as soon as possible. The initial scan may be time consuming, but you may pause and resume the scan at any time.
11/01/2007 20:02:02 Process (PID 1540) tried to access Active Virus Shield process (PID 1340), but it has been blocked. This is Self-Defense monitoring, and you do not need to do anything.
11/01/2007 22:02:45 Update completed successfully.
11/01/2007 22:20:50 Process (PID 2612) tried to access Active Virus Shield process (PID 1020), but it has been blocked. This is Self-Defense monitoring, and you do not need to do anything.
11/01/2007 22:20:50 Process (PID 2612) tried to access Active Virus Shield process (PID 1340), but it has been blocked. This is Self-Defense monitoring, and you do not need to do anything.
12/01/2007 18:38:02 A full computer scan has never been performed. Please complete a full scan as soon as possible. The initial scan may be time consuming, but you may pause and resume the scan at any time.
12/01/2007 18:38:10 Process (PID 1664) tried to access Active Virus Shield process (PID 1544), but it has been blocked. This is Self-Defense monitoring, and you do not need to do anything.
12/01/2007 18:38:35 Update completed successfully.
12/01/2007 18:56:36 A full computer scan has never been performed. Please complete a full scan as soon as possible. The initial scan may be time consuming, but you may pause and resume the scan at any time.
12/01/2007 18:56:45 Process (PID 1676) tried to access Active Virus Shield process (PID 1576), but it has been blocked. This is Self-Defense monitoring, and you do not need to do anything.
12/01/2007 18:56:45 Process (PID 1676) tried to access Active Virus Shield process (PID 1876), but it has been blocked. This is Self-Defense monitoring, and you do not need to do anything.
12/01/2007 19:33:58 File C:\Archivos de programa\Starware343\bin\Starware343.dll: detected adware not-a-virus:AdWare.Win32.Comet.az
12/01/2007 19:33:58 Security threats have been detected. You are advised to neutralize them immediately.
12/01/2007 19:34:10 File C:\Archivos de programa\Starware343\bin\Starware343.dll: deleted
12/01/2007 19:34:18 File C:\Archivos de programa\Starware343\bin\Starware343.dll: detected adware not-a-virus:AdWare.Win32.Comet.az
12/01/2007 19:34:18 Security threats have been detected. You are advised to neutralize them immediately.
12/01/2007 19:34:27 File C:\Archivos de programa\Starware343\bin\Starware343.dll: deleted
12/01/2007 19:40:40 Process (PID 3424) tried to access Active Virus Shield process (PID 1576), but it has been blocked. This is Self-Defense monitoring, and you do not need to do anything.
12/01/2007 19:40:40 Process (PID 3424) tried to access Active Virus Shield process (PID 1876), but it has been blocked. This is Self-Defense monitoring, and you do not need to do anything.
12/01/2007 20:47:08 Update completed successfully.


Reports
-------
Task Status Start Finish Size
---- ------ ----- ------ ----
File Anti-Virus running 12/01/2007 18:56:37 930.4 KB
Mail Anti-Virus running 12/01/2007 18:56:37 0 bytes
Scan Startup Objects completed 12/01/2007 18:58:50 12/01/2007 18:59:29 493.5 KB
Update completed 12/01/2007 20:46:54 12/01/2007 20:47:08 10.1 KB


Quarantine
----------
Status Object Size Added
------ ------ ---- -----


Backup
------
Status Object Size
------ ------ ----
Infected: Trojan program Trojan.Win32.VB.atw C:\WINDOWS\system32\msmapi32.exe 48 KB
Infected: Trojan program Trojan-Downloader.Win32.Agent.awf C:\windows\temp\ulogin125.exe 38.2 KB
Infected: Trojan program Trojan-Downloader.Win32.Small.dam C:\WINDOWS\system32\hfmdlule.exe 6.2 KB
Infected: Trojan program Trojan-Clicker.Win32.Small.js C:\WINDOWS\system32\oaburxye.dmj 14.6 KB
Infected: Trojan program Trojan-Downloader.Win32.Agent.awf C:\Documents and Settings\beto\Configuración local\Archivos temporales de Internet\Content.IE5\K5EN89Q3\nweb2[1] 38.2 KB
Infected: adware not-a-virus:AdWare.Win32.Comet.az C:\Archivos de programa\Starware343\bin\Starware343.dll 718.5 KB


tambien scanee con panda antivirus online
y esto me dice



Incidencia Estado Elemento

Adware:Adware/Comet No desinfectado C:\Archivos de programa\Starware343\Setup.exe[Starware343.dll]
Adware:Adware/Comet No desinfectado C:\Documents and Settings\beto\Configuración local\Datos de programa\Mozilla\Firefox\Profiles\97y5f704.default \Cache\1C48E7F2d01[Starware343.dll]
Spyware:Cookie/Sextracker No desinfectado C:\Documents and Settings\beto\Cookies\beto@counter3.sextracker[2].txt
Spyware:Cookie/SexList No desinfectado C:\Documents and Settings\beto\Cookies\beto@sexlist[2].txt
Spyware:Cookie/Sextracker No desinfectado C:\Documents and Settings\beto\Cookies\beto@sextracker[1].txt
Spyware:Cookie/Statcounter No desinfectado C:\Documents and Settings\beto\Cookies\beto@statcounter[1].txt
Spyware:Cookie/Mammamediasolutions No desinfectado C:\Documents and Settings\beto\Cookies\beto@targetnet[2].txt
Spyware:Cookie/WebPower No desinfectado C:\Documents and Settings\beto\Cookies\beto@webpower[1].txt
Spyware:Cookie/ademails No desinfectado C:\Documents and Settings\beto\Cookies\beto@www.ademails[1].txt
Spyware:Cookie/Xiti No desinfectado C:\Documents and Settings\beto\Cookies\beto@xiti[1].txt
Spyware:Cookie/Tribalfusion No desinfectado C:\Documents and Settings\beto\Datos de programa\Mozilla\Firefox\Profiles\97y5f704.default \cookies.txt[.tribalfusion.com/]
Spyware:Cookie/adultfriendfinder No desinfectado C:\Documents and Settings\beto\Datos de programa\Mozilla\Firefox\Profiles\97y5f704.default \cookies.txt[.adultfriendfinder.com/]
Spyware:Cookie/Atlas DMT No desinfectado C:\Documents and Settings\beto\Datos de programa\Mozilla\Firefox\Profiles\97y5f704.default \cookies.txt[.atdmt.com/]
Spyware:Cookie/Go No desinfectado C:\Documents and Settings\beto\Datos de programa\Mozilla\Firefox\Profiles\97y5f704.default \cookies.txt[.go.com/]
Spyware:Cookie/Hitbox No desinfectado C:\Documents and Settings\beto\Datos de programa\Mozilla\Firefox\Profiles\97y5f704.default \cookies.txt[.hitbox.com/]
Spyware:Cookie/Hitbox No desinfectado C:\Documents and Settings\beto\Datos de programa\Mozilla\Firefox\Profiles\97y5f704.default \cookies.txt[.ehg-dig.hitbox.com/]
Spyware:Cookie/Hitbox No desinfectado C:\Documents and Settings\beto\Datos de programa\Mozilla\Firefox\Profiles\97y5f704.default \cookies.txt[.hitbox.com/]
Spyware:Cookie/YieldManager No desinfectado C:\Documents and Settings\beto\Datos de programa\Mozilla\Firefox\Profiles\97y5f704.default \cookies.txt[ad.yieldmanager.com/]
Adware:Adware/AntispywareSoldier No desinfectado C:\WINDOWS\system32\vdphqexx.exe
Herramienta potencialmente no deseada:Application/PassRock No desinfectado D:\Nueva carpeta (2)\cursos\Nueva carpeta\Win XP Portable\PROGRAMS\WinImage\RAS.exe
Herramienta potencialmente no deseada:Application/PWDump.A No desinfectado D:\Nueva carpeta (2)\cursos\Nueva carpeta\Win XP Portable\PROGRAMS\insidepro\lcp5.exe[Data\pwdump3\pwservice.exe]
Herramienta potencialmente no deseada:Application/Pskill.A No desinfectado D:\Nueva carpeta (2)\cursos\Nueva carpeta\Win XP Portable\I386\SYSTEM32\pskill.exe
Adware:Adware/Comet No desinfectado D:\favoritos\maps.exe[Starware343.dll]



y este es el informe de hijackthis
Logfile of HijackThis v1.99.1
Scan saved at 22:48:30, on 12/01/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Archivos de programa\AOL\Active Virus Shield\avp.exe
C:\Archivos de programa\Webroot\Spy Sweeper\SpySweeper.exe
C:\Archivos de programa\NVIDIA Corporation\NvMixer\NVMixerTray.exe
C:\Archivos de programa\AOL\Active Virus Shield\avp.exe
C:\Archivos de programa\Java\jre1.5.0_10\bin\jusched.exe
C:\Archivos de programa\QuickTime\qttask.exe
C:\Archivos de programa\Archivos comunes\Real\Update_OB\realsched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Archivos de programa\MSN Messenger\msnmsgr.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Archivos de programa\Mozilla Firefox\firefox.exe
C:\Archivos de programa\HJT\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Vínculos
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Archivos de programa\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Archivos de programa\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: IeCatch5 Class - {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} - C:\ARCHIV~1\FlashGet\jccatch.dll
O2 - BHO: Complemento del Asistente para Internet de Encarta - {955BE0B8-BC85-4CAF-856E-8E0D8B610560} - C:\Archivos de programa\Archivos comunes\Microsoft Shared\Encarta Web Companion\2007\ENCWCBAR.DLL
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\archivos de programa\google\googletoolbar2.dll
O3 - Toolbar: Asistente para Internet de Encarta - {147D6308-0614-4112-89B1-31402F9B82C4} - C:\Archivos de programa\Archivos comunes\Microsoft Shared\Encarta Web Companion\2007\ENCWCBAR.DLL
O4 - HKLM\..\Run: [NVMixerTray] "C:\Archivos de programa\NVIDIA Corporation\NvMixer\NVMixerTray.exe"
O4 - HKLM\..\Run: [aol] "C:\Archivos de programa\AOL\Active Virus Shield\avp.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Archivos de programa\Java\jre1.5.0_10\bin\jusched.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Archivos de programa\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [TkBellExe] "C:\Archivos de programa\Archivos comunes\Real\Update_OB\realsched.exe" -osboot
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Archivos de programa\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\RunOnce: [Starware343Install] "C:\Archivos de programa\Starware343\Setup.exe" REBOOT
O8 - Extra context menu item: E&xportar a Microsoft Excel - res://C:\ARCHIV~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Referencia - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\ARCHIV~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Barra de búsqueda de Encarta - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Archivos de programa\Archivos comunes\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\ARCHIV~1\FlashGet\flashget.exe
O9 - Extra 'Tools' menuitem: &FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\ARCHIV~1\FlashGet\flashget.exe
O9 - Extra button: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\Archivos de programa\Yahoo!\Messenger\YahooMessenger.exe
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\Archivos de programa\Yahoo!\Messenger\YahooMessenger.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Archivos de programa\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Archivos de programa\Messenger\msmsgs.exe
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O23 - Service: Active Virus Shield (AVP) - Unknown owner - C:\Archivos de programa\AOL\Active Virus Shield\avp.exe" -r (file missing)
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Archivos de programa\iPod\bin\iPodService.exe
O23 - Service: TuneUp WinStyler Theme Service (TUWinStylerThemeSvc) - TuneUp Software GmbH - C:\Archivos de programa\TuneUp Utilities 2006\WinStylerThemeSvc.exe
O23 - Service: Motor de Spy Sweeper de Webroot (WebrootSpySweeperService) - Webroot Software, Inc. - C:\Archivos de programa\Webroot\Spy Sweeper\SpySweeper.exe




les pongo todo esto devido a que he leido muchos temas en este foro y es mas o menos lo que piden, si es demaciado les pido disculpas

y espero que no se una molestia para ustedes de antemano gracias por su atencio
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiMeneame
  post #2 (permalink)  
Antiguo 13/01/07, 01:26:19
Avatar de Acron_0248
Moderador Gral.
 
Registrado: jul 2005
Ubicación: Venezuela
Mensajes: 9.913
Enviar un mensaje a través de AIM a Acron_0248
Re: ayuda por favor con virus

Hola y Bienvenid@ a Forospyware!


El log no muestra nada...


Descarga las siguientes herramientas:


Paso 1:


Paso 2:

Copia y pega las siguientes entradas en el Killbox (una a la vez) donde dice "Full Path of File to Delete" y le das click al boton rojo con cruz blanca del programa para eliminar el archivo:

C:\windows\temp\ulogin125.exe

C:\Documents and Settings\beto\Configuración local\Archivos temporales de Internet\Content.IE5\K5EN89Q3\nweb2[1]

C:\WINDOWS\system32\hfmdlule.exe

C:\WINDOWS\system32\oaburxye.dmj

C:\WINDOWS\system32\msmapi32.exe

C:\Archivos de programa\Starware343\bin\Starware343.dll



Entra en la carpeta Archivos de programa y elimina la carpeta Starware343 con todo su contenido



Limpia los temporales y cookies con el Disk Cleaner

Limpia el registro de windows con el Regseeker (pasalo varias veces hasta que no quede nada por limpiar)



Paso 4:

Reincia el sistema en modo normal

Haz un chequeo con los antivirus online Kaspersky y Ewido


Nos comentas como te fue y dejas un nuevo log para ver como quedo junto con los reportes de los antivirus online (si detectaron infecciones)



Salu2

Linux User #399288 != 1337 || Ub3|2


Novedades del Foro | Antivirus Online | Eliminar Malwares | Políticas del Foro | Blog


* Ayúdanos haciendo una DONACIÓN para poder seguir Ayudando.
* Para evitar Virus y Spywares al navegar por internet, USE FIREFOX !!
* No se resuelven dudas por Privados ni por E-mail, ya que para eso esta el foro.
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiMeneame
  post #3 (permalink)  
Antiguo 19/01/07, 00:26:24
Usuario
 
Registrado: dic 2006
Ubicación: mexico
Mensajes: 3
problema solucionado

solo quiero pdirles disculpas por no haberles contestado lo que pasa es que estube fuera de la ciudad


pero me tome este tiempo para agradeceerle su valiosa ayuda


gracias...
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiMeneame
  post #4 (permalink)  
Antiguo 19/01/07, 06:50:09
Avatar de Acron_0248
Moderador Gral.
 
Registrado: jul 2005
Ubicación: Venezuela
Mensajes: 9.913
Enviar un mensaje a través de AIM a Acron_0248
Re: ayuda por favor con virus

Ok...no hay problema, sin embargo, ¿se solucionó el problema con tu sistema? de ser así lo indicas para dar este tema por terminado




Salu2

Linux User #399288 != 1337 || Ub3|2


Novedades del Foro | Antivirus Online | Eliminar Malwares | Políticas del Foro | Blog


* Ayúdanos haciendo una DONACIÓN para poder seguir Ayudando.
* Para evitar Virus y Spywares al navegar por internet, USE FIREFOX !!
* No se resuelven dudas por Privados ni por E-mail, ya que para eso esta el foro.
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiMeneame
Tema Cerrado

Herramientas

Reglas del foro
No puedes crear nuevos temas
No puedes responder temas
No puedes subir adjuntos
No puedes editar tus mensajes

BB code is activado
Las caritas están activado
Código [IMG] está activado
Código HTML está desactivado
Trackbacks está desactivado
Pingbacks está desactivado
Refbacks está desactivado

Temas Similares
Tema Autor Foro Respuestas Último mensaje
Ayuda con virus Bagle.hb y Horst himhotep Foro Oficial de HijackThis en español 7 12/01/07 21:05:12
Ayuda Para Eliminar Virus RICHARDB Foro Oficial de HijackThis en español 1 05/01/07 23:56:48
Necesito Ayuda, Tebgo Virus Y Spyware En Mi Computadora.. cammygirl83_py Ayuda General 1 28/04/06 11:34:42
Ayuda con "Home Search Assistent", "Search Extendr" y "Shopping (solucionado)" sertrual Temas Solucionados 18 13/10/05 10:08:18
Ayuda Con Virus, Por Favor Torpedorr Foro Oficial de HijackThis en español 1 19/09/05 09:38:49




Todas las horas son GMT -4. La hora es 22:39:16.


 

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167 168 169 170 171 172 173 174 175 176 177 178 179 180 181 182 183 184 185 186 187 188 189 190 191 192 193 194 195 196 197 198 199 200 201 202 203 204 205 206 207 208 209 210 211 212 213 214 215 216 217 218 219 220 221 222 223 224 225 226 227 228 229 230 231 232 233 234 235 236 237 238 239 240 241 242 243 244 245 246 247 248 249 250 251 252 253 254 255 256 257 258 259 260 261 262 263 264 265 266 267 268 269 270 271 272 273 274 275 276 277 278 279 280 281 282 283 284 285 286 287 288 289 290 291 292 293 294 295 296 297 298 299 300 301 302 303 304 305 306 307 308 309 310 311 312 313 314 315 316 317 318 319 320 321 322 323 324 325 326 327 328 329 330 331 332 333 334 335 336 337 338 339 340 341 342 343 344 345 346 347 348 349 350 351 352 353 354 355 356 357 358 359 360 361 362 363 364 365 366 367 368 369 370 371 372 373 374 375 376 377 378 379 380 381 382 383 384 385 386 387 388 389