Aver tengo un problem cuando intento instalar el panda me pone que tengo que desinstalar 1º avg anti virus dice que valla a panel de control Etc...

lo que pasa es que alli no pone nada para desinstalarlo :S

si pudiera descargarme el uninstall alomejor

AYUDA!! XD

Hola. ¿Tienes el AVG instalado? Para desinstalarlo, vete a INICIO -> CONFIGURACIÓN -> PANEL DE CONTROL -> AGREGAR O QUITAR PROGRAMAS, búscalo ahí, hazle click y dale a desinstalar

Lo mismo me dice el panda pero no aparece en AGREGAR O QUITAR PROGRAMAS :S




Salu2

Haz un escaneo online con Ewido con la opción Remove Infections activada (lee el Manual) y Karpersky (lee el Manual) y pegas aquí el reporte o LOG que te genere

Me suena a virus y/o spyware

Log Ewido:


Name: TrackingCookie.Yieldmanager
Path: C:\Documents and Settings\ADRIAN\Cookies\adrian@ad.yieldmanager[2].txt
Risk: Medium

Name: TrackingCookie.Adbrite
Path: C:\Documents and Settings\ADRIAN\Cookies\adrian@adbrite[2].txt
Risk: Medium

Name: TrackingCookie.Adrevolver
Path: C:\Documents and Settings\ADRIAN\Cookies\adrian@adrevolver[2].txt
Risk: Medium

Name: TrackingCookie.Clickbank
Path: C:\Documents and Settings\ADRIAN\Cookies\adrian@clickbank[1].txt
Risk: Medium

Name: TrackingCookie.Sexcounter
Path: C:\Documents and Settings\ADRIAN\Cookies\adrian@cs.sexcounter[2].txt
Risk: Medium

Name: TrackingCookie.Statcounter
Path: C:\Documents and Settings\ADRIAN\Cookies\adrian@statcounter[2].txt
Risk: Medium

Name: TrackingCookie.Tribalfusion
Path: C:\Documents and Settings\ADRIAN\Cookies\adrian@tribalfusion[1].txt
Risk: Medium

Name: Dialer.EGroup.n
Path: C:\Archivos de programa\johlee\IEAccess2.dll
Risk: High

Name: Not-A-Virus.BadJoke.Win32.Delf.af
Path: C:\avoid\avoid.exe
Risk: Low

Name: Not-A-Virus.BadJoke.Win32.Delf.af
Path: C:\Documents and Settings\ADRIAN\Configuración local\Temp\wzf135\avoid.exe
Risk: Low

Name: Worm.Bagle.hk
Path: C:\Documents and Settings\ADRIAN\Datos de programa\hidires\m_hook.sys
Risk: High

Name: Not-A-Virus.BadJoke.Win32.Delf.af
Path: C:\Documents and Settings\ADRIAN\Escritorio\avoid.exe
Risk: Low

Name: Adware.180Solutions
Path: C:\Documents and Settings\ADRIAN\Escritorio\free-msn-emoticons-pack-01-setup.exe
Risk: Medium

Name: Dialer.EGroup.n
Path: C:\IEAccess2.dll
Risk: High

Name: Worm.Bagle.hg
Path: C:\WINDOWS\exefld\104311031.exe
Risk: High

Name: Worm.Bagle.hg
Path: C:\WINDOWS\exefld\104739046.exe
Risk: High

Name: Worm.Bagle.hg
Path: C:\WINDOWS\exefld\105445265.exe
Risk: High

Name: Worm.Bagle.hg
Path: C:\WINDOWS\exefld\105495703.exe
Risk: High

Name: Worm.Bagle.hg
Path: C:\WINDOWS\exefld\119174734.exe
Risk: High

Name: Worm.Bagle.hg
Path: C:\WINDOWS\exefld\119641859.exe
Risk: High

Name: Worm.Bagle.hg
Path: C:\WINDOWS\exefld\120419328.exe
Risk: High

Name: Worm.Bagle.hg
Path: C:\WINDOWS\exefld\120989000.exe
Risk: High

Name: Worm.Bagle.hg
Path: C:\WINDOWS\exefld\134328437.exe
Risk: High

Name: Worm.Bagle.hg
Path: C:\WINDOWS\exefld\134690218.exe
Risk: High

Name: Worm.Bagle.hg
Path: C:\WINDOWS\exefld\135361812.exe
Risk: High

Name: Worm.Bagle.hg
Path: C:\WINDOWS\exefld\135838281.exe
Risk: High

Name: Worm.Bagle.hg
Path: C:\WINDOWS\exefld\1397828.exe
Risk: High

Name: Worm.Bagle.hg
Path: C:\WINDOWS\exefld\14961062.exe
Risk: High

Name: Worm.Bagle.hg
Path: C:\WINDOWS\exefld\149635437.exe
Risk: High

Name: Worm.Bagle.hg
Path: C:\WINDOWS\exefld\15057718.exe
Risk: High

Name: Worm.Bagle.hg
Path: C:\WINDOWS\exefld\15072140.exe
Risk: High

Name: Worm.Bagle.hg
Path: C:\WINDOWS\exefld\15214671.exe
Risk: High

Name: Worm.Bagle.hg
Path: C:\WINDOWS\exefld\15279031.exe
Risk: High

Name: Worm.Bagle.hg
Path: C:\WINDOWS\exefld\15414203.exe
Risk: High

Name: Worm.Bagle.hg
Path: C:\WINDOWS\exefld\15491796.exe
Risk: High

Name: Worm.Bagle.hg
Path: C:\WINDOWS\exefld\15499968.exe
Risk: High

Name: Worm.Bagle.hg
Path: C:\WINDOWS\exefld\15567421.exe
Risk: High

Name: Worm.Bagle.hg
Path: C:\WINDOWS\exefld\15579359.exe
Risk: High

Name: Worm.Bagle.hg
Path: C:\WINDOWS\exefld\15584671.exe
Risk: High

Name: Worm.Bagle.hg
Path: C:\WINDOWS\exefld\15740546.exe
Risk: High

Name: Worm.Bagle.hg
Path: C:\WINDOWS\exefld\16142562.exe
Risk: High

Name: Worm.Bagle.hg
Path: C:\WINDOWS\exefld\16328406.exe
Risk: High

Name: Worm.Bagle.hc
Path: C:\WINDOWS\exefld\1710281.exe
Risk: High

Name: Worm.Bagle.hg
Path: C:\WINDOWS\exefld\207681437.exe
Risk: High

Name: Worm.Bagle.hg
Path: C:\WINDOWS\exefld\207992562.exe
Risk: High

Name: Worm.Bagle.hg
Path: C:\WINDOWS\exefld\222436781.exe
Risk: High

Name: Worm.Bagle.hg
Path: C:\WINDOWS\exefld\222717468.exe
Risk: High

Name: Worm.Bagle.hg
Path: C:\WINDOWS\exefld\29445171.exe
Risk: High

Name: Worm.Bagle.hg
Path: C:\WINDOWS\exefld\294746515.exe
Risk: High

Name: Worm.Bagle.hg
Path: C:\WINDOWS\exefld\295005593.exe
Risk: High

Name: Worm.Bagle.hg
Path: C:\WINDOWS\exefld\29773203.exe
Risk: High

Name: Worm.Bagle.hg
Path: C:\WINDOWS\exefld\29844125.exe
Risk: High

Name: Worm.Bagle.hg
Path: C:\WINDOWS\exefld\29881859.exe
Risk: High

Name: Worm.Bagle.hg
Path: C:\WINDOWS\exefld\30280265.exe
Risk: High

Name: Worm.Bagle.hg
Path: C:\WINDOWS\exefld\303359.exe
Risk: High

Name: Worm.Bagle.hg
Path: C:\WINDOWS\exefld\30551343.exe
Risk: High

Name: Worm.Bagle.hg
Path: C:\WINDOWS\exefld\305546.exe
Risk: High

Name: Worm.Bagle.hg
Path: C:\WINDOWS\exefld\30736078.exe
Risk: High

Name: Worm.Bagle.hg
Path: C:\WINDOWS\exefld\30750093.exe
Risk: High

Name: Worm.Bagle.hg
Path: C:\WINDOWS\exefld\30807953.exe
Risk: High

Name: Worm.Bagle.hg
Path: C:\WINDOWS\exefld\31118937.exe
Risk: High

Name: Worm.Bagle.hg
Path: C:\WINDOWS\exefld\314296.exe
Risk: High

Name: Worm.Bagle.hg
Path: C:\WINDOWS\exefld\326062.exe
Risk: High

Name: Worm.Bagle.hg
Path: C:\WINDOWS\exefld\326937.exe
Risk: High

Name: Worm.Bagle.hg
Path: C:\WINDOWS\exefld\328234.exe
Risk: High

Name: Worm.Bagle.hg
Path: C:\WINDOWS\exefld\337078.exe
Risk: High

Name: Worm.Bagle.hg
Path: C:\WINDOWS\exefld\383031.exe
Risk: High

Name: Worm.Bagle.hg
Path: C:\WINDOWS\exefld\405359.exe
Risk: High

Name: Worm.Bagle.hg
Path: C:\WINDOWS\exefld\411750.exe
Risk: High

Name: Worm.Bagle.hg
Path: C:\WINDOWS\exefld\414484.exe
Risk: High

Name: Worm.Bagle.hg
Path: C:\WINDOWS\exefld\44249609.exe
Risk: High

Name: Worm.Bagle.hg
Path: C:\WINDOWS\exefld\44471125.exe
Risk: High

Name: Worm.Bagle.hg
Path: C:\WINDOWS\exefld\44560812.exe
Risk: High

Name: Worm.Bagle.hc
Path: C:\WINDOWS\exefld\446265.exe
Risk: High

Name: Worm.Bagle.hg
Path: C:\WINDOWS\exefld\44763812.exe
Risk: High

Name: Worm.Bagle.hg
Path: C:\WINDOWS\exefld\44993937.exe
Risk: High

Name: Worm.Bagle.hg
Path: C:\WINDOWS\exefld\45444000.exe
Risk: High

Name: Worm.Bagle.hg
Path: C:\WINDOWS\exefld\45688578.exe
Risk: High

Name: Worm.Bagle.hg
Path: C:\WINDOWS\exefld\45818281.exe
Risk: High

Name: Worm.Bagle.hg
Path: C:\WINDOWS\exefld\45974062.exe
Risk: High

Name: Worm.Bagle.hg
Path: C:\WINDOWS\exefld\475375.exe
Risk: High

Name: Worm.Bagle.hg
Path: C:\WINDOWS\exefld\514906.exe
Risk: High

Name: Worm.Bagle.hg
Path: C:\WINDOWS\exefld\553843.exe
Risk: High

Name: Worm.Bagle.hg
Path: C:\WINDOWS\exefld\59101687.exe
Risk: High

Name: Worm.Bagle.hg
Path: C:\WINDOWS\exefld\591546.exe
Risk: High

Name: Worm.Bagle.hg
Path: C:\WINDOWS\exefld\59300812.exe
Risk: High

Name: Worm.Bagle.hg
Path: C:\WINDOWS\exefld\59313343.exe
Risk: High

Name: Worm.Bagle.hg
Path: C:\WINDOWS\exefld\595234.exe
Risk: High

Name: Worm.Bagle.hg
Path: C:\WINDOWS\exefld\59698390.exe
Risk: High

Name: Worm.Bagle.hg
Path: C:\WINDOWS\exefld\59737203.exe
Risk: High

Name: Worm.Bagle.hg
Path: C:\WINDOWS\exefld\60337921.exe
Risk: High

Name: Worm.Bagle.hg
Path: C:\WINDOWS\exefld\60587578.exe
Risk: High

Name: Worm.Bagle.hg
Path: C:\WINDOWS\exefld\60929609.exe
Risk: High

Name: Worm.Bagle.hg
Path: C:\WINDOWS\exefld\610140.exe
Risk: High

Name: Worm.Bagle.hg
Path: C:\WINDOWS\exefld\612203.exe
Risk: High

Name: Worm.Bagle.hg
Path: C:\WINDOWS\exefld\619671.exe
Risk: High

Name: Worm.Bagle.hg
Path: C:\WINDOWS\exefld\630234.exe
Risk: High

Name: Worm.Bagle.hi
Path: C:\WINDOWS\exefld\631546.exe
Risk: High

Name: Worm.Bagle.hi
Path: C:\WINDOWS\exefld\631765.exe
Risk: High

Name: Worm.Bagle.hg
Path: C:\WINDOWS\exefld\649468.exe
Risk: High

Name: Worm.Bagle.hg
Path: C:\WINDOWS\exefld\681890.exe
Risk: High

Name: Worm.Bagle.hg
Path: C:\WINDOWS\exefld\709375.exe
Risk: High

Name: Worm.Bagle.hg
Path: C:\WINDOWS\exefld\726312.exe
Risk: High

Name: Worm.Bagle.hg
Path: C:\WINDOWS\exefld\74500234.exe
Risk: High

Name: Worm.Bagle.hg
Path: C:\WINDOWS\exefld\748500.exe
Risk: High

Name: Worm.Bagle.hg
Path: C:\WINDOWS\exefld\75197640.exe
Risk: High

Name: Worm.Bagle.hg
Path: C:\WINDOWS\exefld\75604328.exe
Risk: High

Name: Worm.Bagle.hg
Path: C:\WINDOWS\exefld\75774968.exe
Risk: High

Name: Worm.Bagle.hg
Path: C:\WINDOWS\exefld\764265.exe
Risk: High

Name: Worm.Bagle.hg
Path: C:\WINDOWS\exefld\776640.exe
Risk: High

Name: Worm.Bagle.hi
Path: C:\WINDOWS\exefld\782062.exe
Risk: High

Name: Worm.Bagle.hg
Path: C:\WINDOWS\exefld\783906.exe
Risk: High

Name: Worm.Bagle.hg
Path: C:\WINDOWS\exefld\791843.exe
Risk: High

Name: Worm.Bagle.hi
Path: C:\WINDOWS\exefld\877828.exe
Risk: High

Name: Worm.Bagle.hg
Path: C:\WINDOWS\exefld\89338328.exe
Risk: High

Name: Worm.Bagle.hg
Path: C:\WINDOWS\exefld\89725359.exe
Risk: High

Name: Worm.Bagle.hg
Path: C:\WINDOWS\exefld\90502734.exe
Risk: High

Name: Worm.Bagle.hg
Path: C:\WINDOWS\exefld\90657796.exe
Risk: High

Name: Adware.RK
Path: C:\WINDOWS\system32\rk.bin
Risk: Medium

Name: Proxy.Agent.lu
Path: C:\WINDOWS\system32\winzzd32.dll
Risk: High

LOG KASPERSKY:


C:\!KillBox\secure32.html Infected: Trojan.Win32.Harnig.k skipped

C:\Archivos de programa\Cain\Abel.exe Infected: not-a-virus:PSWTool.Win32.Cain.284 skipped

C:\Archivos de programa\eMule\temp\009.part Object is locked skipped

C:\Archivos de programa\eMule\temp\015.part Object is locked skipped

C:\Archivos de programa\HJT\backups\backup-20070125-134117-623.dll Infected: Trojan.Win32.BHO.g skipped

C:\Archivos de programa\Internet Explorer\msimg32.dll Infected: not-a-virus:AdTool.Win32.MyWebSearch.au skipped

C:\Archivos de programa\johlee\IEAccess2.dll Infected: not-a-virus:Dialer.Win32.E-Group.n skipped

C:\avoid\avoid.exe Infected: not-virus:BadJoke.Win32.Delf.af skipped

C:\Documents and Settings\ADRIAN\Configuración local\Archivos temporales de Internet\Content.IE5\index.dat Object is locked skipped

C:\Documents and Settings\ADRIAN\Configuración local\Datos de programa\Microsoft\Messenger\master-the-bb@hotmail.com\SharingMetadata\Logs\Dfsr.log Object is locked skipped

C:\Documents and Settings\ADRIAN\Configuración local\Datos de programa\Microsoft\Messenger\master-the-bb@hotmail.com\SharingMetadata\pending.dat Object is locked skipped

C:\Documents and Settings\ADRIAN\Configuración local\Datos de programa\Microsoft\Messenger\master-the-bb@hotmail.com\SharingMetadata\Working\database_BE 70_7335_7072_F38D\dfsr.db Object is locked skipped

C:\Documents and Settings\ADRIAN\Configuración local\Datos de programa\Microsoft\Messenger\master-the-bb@hotmail.com\SharingMetadata\Working\database_BE 70_7335_7072_F38D\fsr.log Object is locked skipped

C:\Documents and Settings\ADRIAN\Configuración local\Datos de programa\Microsoft\Messenger\master-the-bb@hotmail.com\SharingMetadata\Working\database_BE 70_7335_7072_F38D\fsrtmp.log Object is locked skipped

C:\Documents and Settings\ADRIAN\Configuración local\Datos de programa\Microsoft\Messenger\master-the-bb@hotmail.com\SharingMetadata\Working\database_BE 70_7335_7072_F38D\tmp.edb Object is locked skipped

C:\Documents and Settings\ADRIAN\Configuración local\Datos de programa\Microsoft\Windows\UsrClass.dat Object is locked skipped

C:\Documents and Settings\ADRIAN\Configuración local\Datos de programa\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped

C:\Documents and Settings\ADRIAN\Configuración local\Datos de programa\Microsoft\Windows Live Contacts\master-the-bb@hotmail.com\real\members.stg Object is locked skipped

C:\Documents and Settings\ADRIAN\Configuración local\Historial\History.IE5\index.dat Object is locked skipped

C:\Documents and Settings\ADRIAN\Configuración local\Temp\Perflib_Perfdata_f0c.dat Object is locked skipped

C:\Documents and Settings\ADRIAN\Configuración local\Temp\wzf135\avoid.exe Infected: not-virus:BadJoke.Win32.Delf.af skipped

C:\Documents and Settings\ADRIAN\Configuración local\Temp\~DFFE4B.tmp Object is locked skipped

C:\Documents and Settings\ADRIAN\Configuración local\Temp\~DFFE65.tmp Object is locked skipped

C:\Documents and Settings\ADRIAN\Cookies\index.dat Object is locked skipped

C:\Documents and Settings\ADRIAN\Datos de programa\hidires\m_hook.sys Infected: Email-Worm.Win32.Bagle.gy skipped

C:\Documents and Settings\ADRIAN\Escritorio\156822.exe/WISE0017.BIN Infected: not-a-virus:AdWare.Win32.NewDotNet skipped

C:\Documents and Settings\ADRIAN\Escritorio\156822.exe/WISE0019.BIN Infected: not-a-virus:AdTool.Win32.WhenU.a skipped

C:\Documents and Settings\ADRIAN\Escritorio\156822.exe/WISE0024.BIN Infected: not-a-virus:AdWare.Win32.Relevant.a skipped

C:\Documents and Settings\ADRIAN\Escritorio\156822.exe WiseSFX: infected - 3 skipped

C:\Documents and Settings\ADRIAN\Escritorio\156822.exe WiseSFX Dropper: infected - 3 skipped

C:\Documents and Settings\ADRIAN\Escritorio\avoid.exe Infected: not-virus:BadJoke.Win32.Delf.af skipped

C:\Documents and Settings\ADRIAN\Escritorio\Escritorio\162861.exe/WISE0017.BIN Infected: not-a-virus:AdWare.Win32.NewDotNet skipped

C:\Documents and Settings\ADRIAN\Escritorio\Escritorio\162861.exe/WISE0019.BIN Infected: not-a-virus:AdTool.Win32.WhenU.a skipped

C:\Documents and Settings\ADRIAN\Escritorio\Escritorio\162861.exe/WISE0024.BIN Infected: not-a-virus:AdWare.Win32.Relevant.a skipped

C:\Documents and Settings\ADRIAN\Escritorio\Escritorio\162861.exe WiseSFX: infected - 3 skipped

C:\Documents and Settings\ADRIAN\Escritorio\Escritorio\162861.exe WiseSFX Dropper: infected - 3 skipped

C:\Documents and Settings\ADRIAN\Escritorio\Escritorio\Auto.rar/Auto.exe/proxycfg.exe Infected: not-a-virus:RemoteAdmin.Win32.WinVNC-based.h skipped

C:\Documents and Settings\ADRIAN\Escritorio\Escritorio\Auto.rar/Auto.exe/VNCHooks.dll Infected: not-a-virus:RemoteAdmin.Win32.WinVNC-based.b skipped

C:\Documents and Settings\ADRIAN\Escritorio\Escritorio\Auto.rar/Auto.exe Infected: not-a-virus:RemoteAdmin.Win32.WinVNC-based.b skipped

C:\Documents and Settings\ADRIAN\Escritorio\Escritorio\Auto.rar RAR: infected - 3 skipped

C:\Documents and Settings\ADRIAN\Escritorio\Escritorio\RemoteDeskto p.zip/RemoteDesktop/cliente/Remote Desktop.exe/tightvncx.dll Infected: not-a-virus:RemoteAdmin.Win32.WinVNC-based.b skipped

C:\Documents and Settings\ADRIAN\Escritorio\Escritorio\RemoteDeskto p.zip/RemoteDesktop/cliente/Remote Desktop.exe Infected: not-a-virus:RemoteAdmin.Win32.WinVNC-based.b skipped

C:\Documents and Settings\ADRIAN\Escritorio\Escritorio\RemoteDeskto p.zip ZIP: infected - 2 skipped

C:\Documents and Settings\ADRIAN\Escritorio\free-msn-emoticons-pack-01-setup.exe Infected: not-a-virus:AdWare.Win32.180Solutions.as skipped

C:\Documents and Settings\ADRIAN\Mis documentos\My Completed Downloads\BoT-%5B%5B%5B%5BDoctorYerva%5D%5D%5D%5D-Nueva VERSION %7B%7DBeTa%7B%7D.Si tienes dudas pasate por #eMule-Malaga.No seas perr@ xD.zip/BoT-[[[[DoctorYerva]]]]-Nueva VERSION {}BeTa{}.Si tienes dudas pasate por #eMule-Malaga.No seas perr@ xD/[Don^BoT]V.5 {}BeTa{}/[Don^BoT].exe Infected: not-a-virus:Client-IRC.Win32.mIRC.612 skipped

C:\Documents and Settings\ADRIAN\Mis documentos\My Completed Downloads\BoT-%5B%5B%5B%5BDoctorYerva%5D%5D%5D%5D-Nueva VERSION %7B%7DBeTa%7B%7D.Si tienes dudas pasate por #eMule-Malaga.No seas perr@ xD.zip ZIP: infected - 1 skipped

C:\Documents and Settings\ADRIAN\Mis documentos\My Completed Downloads\mirc617.exe/data0001.bin Infected: not-a-virus:Client-IRC.Win32.mIRC.617 skipped

C:\Documents and Settings\ADRIAN\Mis documentos\My Completed Downloads\mirc617.exe mIRC: infected - 1 skipped

C:\Documents and Settings\ADRIAN\Mis documentos\My Completed Downloads\mirc617_1.exe/data0001.bin Infected: not-a-virus:Client-IRC.Win32.mIRC.617 skipped

C:\Documents and Settings\ADRIAN\Mis documentos\My Completed Downloads\mirc617_1.exe mIRC: infected - 1 skipped

C:\Documents and Settings\ADRIAN\Mis documentos\My Completed Downloads\mirc617_2.exe/data0001.bin Infected: not-a-virus:Client-IRC.Win32.mIRC.617 skipped

C:\Documents and Settings\ADRIAN\Mis documentos\My Completed Downloads\mirc617_2.exe mIRC: infected - 1 skipped

C:\Documents and Settings\ADRIAN\Mis documentos\My WinZip Files\My Documents.zip/My Completed Downloads/AUTO_191A.exe Infected: Trojan.Win32.Dialer.pd skipped

C:\Documents and Settings\ADRIAN\Mis documentos\My WinZip Files\My Documents.zip/My Completed Downloads/AUTO_191N.exe Infected: Trojan.Win32.Dialer.on skipped

C:\Documents and Settings\ADRIAN\Mis documentos\My WinZip Files\My Documents.zip/My Completed Downloads/celebsmania.exe Infected: Trojan.Win32.Dialer.nv skipped

C:\Documents and Settings\ADRIAN\Mis documentos\My WinZip Files\My Documents.zip ZIP: infected - 3 skipped

C:\Documents and Settings\ADRIAN\Mis documentos\Unzipped\RemoteDesktop\RemoteDesktop\cl iente\Remote Desktop.exe/tightvncx.dll Infected: not-a-virus:RemoteAdmin.Win32.WinVNC-based.b skipped

C:\Documents and Settings\ADRIAN\Mis documentos\Unzipped\RemoteDesktop\RemoteDesktop\cl iente\Remote Desktop.exe CreateInstall: infected - 1 skipped

C:\Documents and Settings\ADRIAN\Mis documentos\Unzipped\RemoteDesktop\RemoteDesktop\se rver\Autobus.exe/proxycfg.exe Infected: not-a-virus:RemoteAdmin.Win32.WinVNC-based.h skipped

C:\Documents and Settings\ADRIAN\Mis documentos\Unzipped\RemoteDesktop\RemoteDesktop\se rver\Autobus.exe/VNCHooks.dll Infected: not-a-virus:RemoteAdmin.Win32.WinVNC-based.b skipped

C:\Documents and Settings\ADRIAN\Mis documentos\Unzipped\RemoteDesktop\RemoteDesktop\se rver\Autobus.exe CreateInstall: infected - 2 skipped

C:\Documents and Settings\ADRIAN\ntuser.dat Object is locked skipped

C:\Documents and Settings\ADRIAN\NTUSER.DAT.LOG Object is locked skipped

C:\Documents and Settings\LocalService\Configuración local\Archivos temporales de Internet\Content.IE5\index.dat Object is locked skipped

C:\Documents and Settings\LocalService\Configuración local\Datos de programa\Microsoft\Windows\UsrClass.dat Object is locked skipped

C:\Documents and Settings\LocalService\Configuración local\Datos de programa\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped

C:\Documents and Settings\LocalService\Configuración local\Historial\History.IE5\index.dat Object is locked skipped

C:\Documents and Settings\LocalService\Cookies\index.dat Object is locked skipped

C:\Documents and Settings\LocalService\NTUSER.DAT Object is locked skipped

C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked skipped

C:\Documents and Settings\NetworkService\Configuración local\Datos de programa\Microsoft\Windows\UsrClass.dat Object is locked skipped

C:\Documents and Settings\NetworkService\Configuración local\Datos de programa\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped

C:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked skipped

C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked skipped

C:\IEAccess2.dll Infected: not-a-virus:Dialer.Win32.E-Group.n skipped

C:\OntargetPage\RemoteDesktop\tightvncx.dll Infected: not-a-virus:RemoteAdmin.Win32.WinVNC-based.b skipped

C:\Program Files\Common Files\system\proxycfg.exe Infected: not-a-virus:RemoteAdmin.Win32.WinVNC-based.h skipped

C:\Program Files\Common Files\system\VNCHooks.dll Infected: not-a-virus:RemoteAdmin.Win32.WinVNC-based.b skipped

C:\Program Files\mIRC\backup\mirc.exe Infected: not-a-virus:Client-IRC.Win32.mIRC.617 skipped

C:\Program Files\mIRC\mirc.exe Infected: not-a-virus:Client-IRC.Win32.mIRC.617 skipped

C:\RECYCLER\S-1-5-21-776561741-1844237615-839522115-1003\Dc5.exe/IEAccess2.dll Infected: not-a-virus:Dialer.Win32.E-Group.n skipped

C:\RECYCLER\S-1-5-21-776561741-1844237615-839522115-1003\Dc5.exe CreateInstall: infected - 1 skipped

C:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped

C:\System Volume Information\_restore{4E42345B-6CE8-49EA-AD23-059EFEDBB535}\RP4\change.log Object is locked skipped

C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped

C:\WINDOWS\exefld\104311031.exe Infected: Email-Worm.Win32.Bagle.hg skipped

C:\WINDOWS\exefld\104739046.exe Infected: Email-Worm.Win32.Bagle.hg skipped

C:\WINDOWS\exefld\105445265.exe Infected: Email-Worm.Win32.Bagle.hg skipped

C:\WINDOWS\exefld\105495703.exe Infected: Email-Worm.Win32.Bagle.hg skipped

C:\WINDOWS\exefld\119174734.exe Infected: Email-Worm.Win32.Bagle.hg skipped

C:\WINDOWS\exefld\119641859.exe Infected: Email-Worm.Win32.Bagle.hg skipped

C:\WINDOWS\exefld\120419328.exe Infected: Email-Worm.Win32.Bagle.hg skipped

C:\WINDOWS\exefld\120989000.exe Infected: Email-Worm.Win32.Bagle.hg skipped

C:\WINDOWS\exefld\1254734.exe Infected: Email-Worm.Win32.Bagle.he skipped

C:\WINDOWS\exefld\134328437.exe Infected: Email-Worm.Win32.Bagle.hg skipped

C:\WINDOWS\exefld\134690218.exe Infected: Email-Worm.Win32.Bagle.hg skipped

C:\WINDOWS\exefld\135361812.exe Infected: Email-Worm.Win32.Bagle.hg skipped

C:\WINDOWS\exefld\135838281.exe Infected: Email-Worm.Win32.Bagle.hg skipped

C:\WINDOWS\exefld\1397828.exe Infected: Email-Worm.Win32.Bagle.hg skipped

C:\WINDOWS\exefld\14961062.exe Infected: Email-Worm.Win32.Bagle.hg skipped

C:\WINDOWS\exefld\149635437.exe Infected: Email-Worm.Win32.Bagle.hg skipped

C:\WINDOWS\exefld\15057718.exe Infected: Email-Worm.Win32.Bagle.hg skipped

C:\WINDOWS\exefld\15072140.exe Infected: Email-Worm.Win32.Bagle.hg skipped

C:\WINDOWS\exefld\15214671.exe Infected: Email-Worm.Win32.Bagle.hg skipped

C:\WINDOWS\exefld\15279031.exe Infected: Email-Worm.Win32.Bagle.hg skipped

C:\WINDOWS\exefld\15414203.exe Infected: Email-Worm.Win32.Bagle.hg skipped

C:\WINDOWS\exefld\15491796.exe Infected: Email-Worm.Win32.Bagle.hg skipped

C:\WINDOWS\exefld\15499968.exe Infected: Email-Worm.Win32.Bagle.hg skipped

C:\WINDOWS\exefld\15567421.exe Infected: Email-Worm.Win32.Bagle.hg skipped

C:\WINDOWS\exefld\15579359.exe Infected: Email-Worm.Win32.Bagle.hg skipped

C:\WINDOWS\exefld\15584671.exe Infected: Email-Worm.Win32.Bagle.hg skipped

C:\WINDOWS\exefld\15740546.exe Infected: Email-Worm.Win32.Bagle.hg skipped

C:\WINDOWS\exefld\16142562.exe Infected: Email-Worm.Win32.Bagle.hg skipped

C:\WINDOWS\exefld\16328406.exe Infected: Email-Worm.Win32.Bagle.hg skipped

C:\WINDOWS\exefld\1710281.exe Infected: Email-Worm.Win32.Bagle.hc skipped

C:\WINDOWS\exefld\207681437.exe Infected: Email-Worm.Win32.Bagle.hg skipped

C:\WINDOWS\exefld\207992562.exe Infected: Email-Worm.Win32.Bagle.hg skipped

C:\WINDOWS\exefld\222436781.exe Infected: Email-Worm.Win32.Bagle.hg skipped

C:\WINDOWS\exefld\222717468.exe Infected: Email-Worm.Win32.Bagle.hg skipped

C:\WINDOWS\exefld\2393296.exe Infected: Email-Worm.Win32.Bagle.he skipped

C:\WINDOWS\exefld\29445171.exe Infected: Email-Worm.Win32.Bagle.hg skipped

C:\WINDOWS\exefld\294746515.exe Infected: Email-Worm.Win32.Bagle.hg skipped

C:\WINDOWS\exefld\295005593.exe Infected: Email-Worm.Win32.Bagle.hg skipped

C:\WINDOWS\exefld\29773203.exe Infected: Email-Worm.Win32.Bagle.hg skipped

C:\WINDOWS\exefld\29844125.exe Infected: Email-Worm.Win32.Bagle.hg skipped

C:\WINDOWS\exefld\29881859.exe Infected: Email-Worm.Win32.Bagle.hg skipped

C:\WINDOWS\exefld\30280265.exe Infected: Email-Worm.Win32.Bagle.hg skipped

C:\WINDOWS\exefld\303359.exe Infected: Email-Worm.Win32.Bagle.hg skipped

C:\WINDOWS\exefld\30551343.exe Infected: Email-Worm.Win32.Bagle.hg skipped

C:\WINDOWS\exefld\305546.exe Infected: Email-Worm.Win32.Bagle.hg skipped

C:\WINDOWS\exefld\30736078.exe Infected: Email-Worm.Win32.Bagle.hg skipped

C:\WINDOWS\exefld\30750093.exe Infected: Email-Worm.Win32.Bagle.hg skipped

C:\WINDOWS\exefld\30807953.exe Infected: Email-Worm.Win32.Bagle.hg skipped

C:\WINDOWS\exefld\31118937.exe Infected: Email-Worm.Win32.Bagle.hg skipped

C:\WINDOWS\exefld\314296.exe Infected: Email-Worm.Win32.Bagle.hg skipped

C:\WINDOWS\exefld\326062.exe Infected: Email-Worm.Win32.Bagle.hg skipped

C:\WINDOWS\exefld\326937.exe Infected: Email-Worm.Win32.Bagle.hg skipped

C:\WINDOWS\exefld\328234.exe Infected: Email-Worm.Win32.Bagle.hg skipped

C:\WINDOWS\exefld\337078.exe Infected: Email-Worm.Win32.Bagle.hg skipped

C:\WINDOWS\exefld\383031.exe Infected: Email-Worm.Win32.Bagle.hg skipped

C:\WINDOWS\exefld\405359.exe Infected: Email-Worm.Win32.Bagle.hg skipped

C:\WINDOWS\exefld\411750.exe Infected: Email-Worm.Win32.Bagle.hg skipped

C:\WINDOWS\exefld\414484.exe Infected: Email-Worm.Win32.Bagle.hg skipped

C:\WINDOWS\exefld\44249609.exe Infected: Email-Worm.Win32.Bagle.hg skipped

C:\WINDOWS\exefld\44471125.exe Infected: Email-Worm.Win32.Bagle.hg skipped

C:\WINDOWS\exefld\44560812.exe Infected: Email-Worm.Win32.Bagle.hg skipped

C:\WINDOWS\exefld\446265.exe Infected: Email-Worm.Win32.Bagle.hc skipped

C:\WINDOWS\exefld\44763812.exe Infected: Email-Worm.Win32.Bagle.hg skipped

C:\WINDOWS\exefld\44993937.exe Infected: Email-Worm.Win32.Bagle.hg skipped

C:\WINDOWS\exefld\45444000.exe Infected: Email-Worm.Win32.Bagle.hg skipped

C:\WINDOWS\exefld\45688578.exe Infected: Email-Worm.Win32.Bagle.hg skipped

C:\WINDOWS\exefld\45818281.exe Infected: Email-Worm.Win32.Bagle.hg skipped

C:\WINDOWS\exefld\45974062.exe Infected: Email-Worm.Win32.Bagle.hg skipped

C:\WINDOWS\exefld\475375.exe Infected: Email-Worm.Win32.Bagle.hg skipped

C:\WINDOWS\exefld\514906.exe Infected: Email-Worm.Win32.Bagle.hg skipped

C:\WINDOWS\exefld\553843.exe Infected: Email-Worm.Win32.Bagle.hg skipped

C:\WINDOWS\exefld\59101687.exe Infected: Email-Worm.Win32.Bagle.hg skipped

C:\WINDOWS\exefld\591546.exe Infected: Email-Worm.Win32.Bagle.hg skipped

C:\WINDOWS\exefld\59300812.exe Infected: Email-Worm.Win32.Bagle.hg skipped

C:\WINDOWS\exefld\59313343.exe Infected: Email-Worm.Win32.Bagle.hg skipped

C:\WINDOWS\exefld\595234.exe Infected: Email-Worm.Win32.Bagle.hg skipped

C:\WINDOWS\exefld\59698390.exe Infected: Email-Worm.Win32.Bagle.hg skipped

C:\WINDOWS\exefld\59737203.exe Infected: Email-Worm.Win32.Bagle.hg skipped

C:\WINDOWS\exefld\60337921.exe Infected: Email-Worm.Win32.Bagle.hg skipped

C:\WINDOWS\exefld\60587578.exe Infected: Email-Worm.Win32.Bagle.hg skipped

C:\WINDOWS\exefld\60929609.exe Infected: Email-Worm.Win32.Bagle.hg skipped

C:\WINDOWS\exefld\610140.exe Infected: Email-Worm.Win32.Bagle.hg skipped

C:\WINDOWS\exefld\612203.exe Infected: Email-Worm.Win32.Bagle.hg skipped

C:\WINDOWS\exefld\619671.exe Infected: Email-Worm.Win32.Bagle.hg skipped

C:\WINDOWS\exefld\630234.exe Infected: Email-Worm.Win32.Bagle.hg skipped

C:\WINDOWS\exefld\631546.exe Infected: Email-Worm.Win32.Bagle.hi skipped

C:\WINDOWS\exefld\631765.exe Infected: Email-Worm.Win32.Bagle.hi skipped

C:\WINDOWS\exefld\649468.exe Infected: Email-Worm.Win32.Bagle.hg skipped

C:\WINDOWS\exefld\681890.exe Infected: Email-Worm.Win32.Bagle.hg skipped

C:\WINDOWS\exefld\709375.exe Infected: Email-Worm.Win32.Bagle.hg skipped

C:\WINDOWS\exefld\726312.exe Infected: Email-Worm.Win32.Bagle.hg skipped

C:\WINDOWS\exefld\74500234.exe Infected: Email-Worm.Win32.Bagle.hg skipped

C:\WINDOWS\exefld\748500.exe Infected: Email-Worm.Win32.Bagle.hg skipped

C:\WINDOWS\exefld\75197640.exe Infected: Email-Worm.Win32.Bagle.hg skipped

C:\WINDOWS\exefld\75604328.exe Infected: Email-Worm.Win32.Bagle.hg skipped

C:\WINDOWS\exefld\75774968.exe Infected: Email-Worm.Win32.Bagle.hg skipped

C:\WINDOWS\exefld\764265.exe Infected: Email-Worm.Win32.Bagle.hg skipped

C:\WINDOWS\exefld\776640.exe Infected: Email-Worm.Win32.Bagle.hg skipped

C:\WINDOWS\exefld\782062.exe Infected: Email-Worm.Win32.Bagle.hi skipped

C:\WINDOWS\exefld\783906.exe Infected: Email-Worm.Win32.Bagle.hg skipped

C:\WINDOWS\exefld\791843.exe Infected: Email-Worm.Win32.Bagle.hg skipped

C:\WINDOWS\exefld\877828.exe Infected: Email-Worm.Win32.Bagle.hi skipped

C:\WINDOWS\exefld\89338328.exe Infected: Email-Worm.Win32.Bagle.hg skipped

C:\WINDOWS\exefld\89725359.exe Infected: Email-Worm.Win32.Bagle.hg skipped

C:\WINDOWS\exefld\90502734.exe Infected: Email-Worm.Win32.Bagle.hg skipped

C:\WINDOWS\exefld\90657796.exe Infected: Email-Worm.Win32.Bagle.hg skipped

C:\WINDOWS\Fonts\winsys.exe Infected: not-a-virus:Client-IRC.Win32.mIRC.602 skipped

C:\WINDOWS\SchedLgU.Txt Object is locked skipped

C:\WINDOWS\Sti_Trace.log Object is locked skipped

C:\WINDOWS\system32\acxunief.exe Infected: not-a-virus:AdWare.Win32.Agent.at skipped

C:\WINDOWS\system32\CatRoot2\edb.log Object is locked skipped

C:\WINDOWS\system32\CatRoot2\tmp.edb Object is locked skipped

C:\WINDOWS\system32\config\Antivirus.Evt Object is locked skipped

C:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped

C:\WINDOWS\system32\config\default Object is locked skipped

C:\WINDOWS\system32\config\default.LOG Object is locked skipped

C:\WINDOWS\system32\config\SAM Object is locked skipped

C:\WINDOWS\system32\config\SAM.LOG Object is locked skipped

C:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped

C:\WINDOWS\system32\config\SECURITY Object is locked skipped

C:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped

C:\WINDOWS\system32\config\software Object is locked skipped

C:\WINDOWS\system32\config\software.LOG Object is locked skipped

C:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped

C:\WINDOWS\system32\config\system Object is locked skipped

C:\WINDOWS\system32\config\system.LOG Object is locked skipped

C:\WINDOWS\system32\drivers\dtscsi.sys Object is locked skipped

C:\WINDOWS\system32\drivers\sptd.sys Object is locked skipped

C:\WINDOWS\system32\drivers\sptd6237.sys Object is locked skipped

C:\WINDOWS\system32\gbjiqhyi.dll Infected: Trojan.Win32.BHO.g skipped

C:\WINDOWS\system32\h323log.txt Object is locked skipped

C:\WINDOWS\system32\hldrrr.exe Infected: Trojan-Downloader.Win32.Bagle.bh skipped

C:\WINDOWS\system32\pfysowvv.dll Infected: Trojan-Spy.Win32.VBStat.j skipped

C:\WINDOWS\system32\rk.bin Infected: not-a-virus:AdWare.Win32.RK.k skipped

C:\WINDOWS\system32\udmstfwl.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.ft skipped

C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked skipped

C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP Object is locked skipped

C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER Object is locked skipped

C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MA P Object is locked skipped

C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MA P Object is locked skipped

C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DAT A Object is locked skipped

C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP Object is locked skipped

C:\WINDOWS\system32\winzzd32.dll Infected: Trojan-Proxy.Win32.Agent.lu skipped

C:\WINDOWS\wiadebug.log Object is locked skipped

C:\WINDOWS\wiaservc.log Object is locked skipped

Scan process completed.

¡MADRE DEL AMOR HERMOSO! Menuda plaga que tienes (hola, que se me había olvidado decírlo ). A ver, vayamos por partes:

Visita Windows Update para que descargues las últimas actualizaciones criticas de seguridad, y aquí para el internet explorer,si tu sistema no es original desde aquí

1) Comprueba que no tengas en tu PC instalado ninguno de los programa que figuran en la LISTA 1 o en la LISTA 2. Si los tuvieras, desinstalalos de inmediato.

2) Descarga y/o actualiza las principales herramientas antispyware: SpyBot S&D // Ad-Aware // SpySweeper

3) Apaga el "Restaurar Sistema" (System Restore) Solo en Win ME y XP.

4) Inicia el sistema en "Modo a Prueba de Fallos" (modo seguro)

5) Elimina los siguientes archivos:

• C:\!KillBox\secure32.html
• C:\Archivos de programa\Cain\Abel.exe
• C:\Archivos de programa\HJT\backups\backup-20070125-134117-623.dll
• C:\Archivos de programa\Internet Explorer\msimg32.dll
• C:\Archivos de programa\johlee\IEAccess2.dll
• C:\avoid\avoid.exe
• C:\Documents and Settings\ADRIAN\Configuración local\Temp\wzf135\avoid.exe
• C:\Documents and Settings\ADRIAN\Escritorio\156822.exe
• C:\Documents and Settings\ADRIAN\Escritorio\avoid.exe
• C:\Documents and Settings\ADRIAN\Escritorio\Escritorio\162861.exe
• C:\Documents and Settings\ADRIAN\Escritorio\Escritorio\Auto.rar
• C:\Documents and Settings\ADRIAN\Escritorio\Escritorio\RemoteDeskto p.zip
• C:\Documents and Settings\ADRIAN\Escritorio\free-msn-emoticons-pack-01-setup.exe
• C:\Documents and Settings\ADRIAN\Mis documentos\My Completed Downloads\BoT-%5B%5B%5B%5BDoctorYerva%5D%5D%5D%5D-Nueva VERSION %7B%7DBeTa%7B%7D.Si tienes dudas pasate por #eMule-Malaga.No seas perr@ xD.zip
• C:\Documents and Settings\ADRIAN\Mis documentos\My Completed Downloads\mirc617.exe
• C:\Documents and Settings\ADRIAN\Mis documentos\My WinZip Files\My Documents.zip
• C:\Documents and Settings\ADRIAN\Mis documentos\Unzipped\RemoteDesktop\RemoteDesktop\cl iente\Remote Desktop.exe
• C:\Documents and Settings\ADRIAN\Mis documentos\Unzipped\RemoteDesktop\RemoteDesktop\se rver\Autobus.exe
• C:\IEAccess2.dll
• C:\OntargetPage\RemoteDesktop\tightvncx.dll
• C:\Program Files\mIRC\mirc.exe
• C:\Program Files\mIRC\backup\mirc.exe
• C:\WINDOWS\exefld <-- BORRA ÉSTA CARPETA
• C:\WINDOWS\system32\acxunief.exe
• C:\WINDOWS\system32\hldrrr.exe
• C:\WINDOWS\system32\pfysowvv.dll
• C:\WINDOWS\system32\rk.bin
• C:\WINDOWS\system32\udmstfwl.dll
• C:\WINDOWS\system32\winzzd32.dll

Si no los encuentras, activa primero Ver Archivos Ocultos. Si no puedes eliminarlos, usa Killbox

6) Ejecuta las herramientas antispyware y elimina los intrusos que estos encuentren. En el caso del SpySweeper, cuando termines de hacer el análisis, en caso de encontrar algo haces click en Move to cuarentine y ya en la nueva pantalla, le das a View Sesion Log y pegas aquí su contenido.

7) Usa CCleaner (lee el Manual) y "Disk Cleaner" para limpiar cookies y temporales.

8) Reinicia el sistema en modo normal.

9) Repite el paso 3

10) Instala el SpywareBlaster (lee el Manual). Elimina también todas las cuarentenas de los antivirus y vacía la papelera de reciclaje

11) Hazle un escaneo online con Ewido con la opción Remove Infections activada (lee el Manual) y Karpersky (lee el Manual) y pegas aquí el reporte o LOG que te genere.

Cuando termines los pasos Activa restaurar sistema y esconde los archivos ocultos...

Recuerda volver, y contarnos los resultados

Saludos

oye tengo un problema ;( no puedo iniciar el sistema a prueba de fallos por que cuando lo ago me sale una pantallita azul t tengo que reiniciar :S

Bueno, intenta hacerlo en modo normal entonces