Foro de InfoSpyware - Foro de Hijackthis - Foro de Virus

HOLA BUENO ESO ME SALIÓ EN EL SCANNER QUE HICE EN LINEA EN ESTA PAGINA, AHORA NECESITO SABER QUE ES LO QUE ESTÁ MAL Y COMO QUITARLO... GRACIAS POR SU ATENCIÓN

-------------------------------------------------------------------------------
KASPERSKY ONLINE SCANNER REPORT
Monday, April 30, 2007 6:58:46 PM
Operating System: Microsoft Windows XP Professional, Service Pack 2 (Build 2600)
Kaspersky Online Scanner version: 5.0.93.0
Kaspersky Anti-Virus database last update: 1/05/2007
Kaspersky Anti-Virus database records: 307638
-------------------------------------------------------------------------------

Scan Settings:
Scan using the following antivirus database: extended
Scan Archives: true
Scan Mail Bases: true

Scan Target - My Computer:
A:\
C:\
D:\

Scan Statistics:
Total number of scanned objects: 41663
Number of viruses found: 1
Number of infected objects: 168
Number of suspicious objects: 0
Duration of the scan process: 01:59:38

Infected Object Name / Virus Name / Last Action
C:\Archivos de programa\Teamsys\Cyber Admin Control\Servidor.ldb Object is locked skipped
C:\Archivos de programa\Teamsys\Cyber Admin Control\Servidor.mdb Object is locked skipped
C:\Archivos de programa\Yahoo!\Messenger\logs\billing_SERVER.log Object is locked skipped
C:\Archivos de programa\Yahoo!\Messenger\logs\client_SERVER.log Object is locked skipped
C:\Archivos de programa\Yahoo!\Messenger\logs\network_SERVER.log Object is locked skipped
C:\Documents and Settings\All Users\Datos de programa\Network Associates\BOPDATA\_Date-20070430_Time-161803453_EnterceptExceptions.dat Object is locked skipped
C:\Documents and Settings\All Users\Datos de programa\Network Associates\BOPDATA\_Date-20070430_Time-161803453_EnterceptRules.dat Object is locked skipped
C:\Documents and Settings\All Users\Datos de programa\Network Associates\Common Framework\Db\Agent_INFINIEO-DCB4F1.log Object is locked skipped
C:\Documents and Settings\All Users\Datos de programa\Network Associates\Common Framework\Db\PrdMgr_INFINIEO-DCB4F1.log Object is locked skipped
C:\Documents and Settings\All Users\Datos de programa\Network Associates\VirusScan\AccessProtectionLog.txt Object is locked skipped
C:\Documents and Settings\All Users\Datos de programa\Network Associates\VirusScan\BufferOverflowProtectionLog.t xt Object is locked skipped
C:\Documents and Settings\All Users\Datos de programa\Network Associates\VirusScan\OnAccessScanLog.txt Object is locked skipped
C:\Documents and Settings\LocalService\Configuración local\Archivos temporales de Internet\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Configuración local\Datos de programa\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\LocalService\Configuración local\Datos de programa\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\LocalService\Configuración local\Historial\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\Configuración local\Datos de programa\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\NetworkService\Configuración local\Datos de programa\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\SERVER\Configuración local\Archivos temporales de Internet\Content.IE5\99H0AWQ0\img[6].jpg&v=I Object is locked skipped
C:\Documents and Settings\SERVER\Configuración local\Archivos temporales de Internet\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\SERVER\Configuración local\Datos de programa\csrss.exe Infected: Email-Worm.Win32.Brontok.q skipped
C:\Documents and Settings\SERVER\Configuración local\Datos de programa\inetinfo.exe Infected: Email-Worm.Win32.Brontok.q skipped
C:\Documents and Settings\SERVER\Configuración local\Datos de programa\lsass.exe Infected: Email-Worm.Win32.Brontok.q skipped
C:\Documents and Settings\SERVER\Configuración local\Datos de programa\Microsoft\Media Player\CurrentDatabase_59R.wmdb Object is locked skipped
C:\Documents and Settings\SERVER\Configuración local\Datos de programa\Microsoft\Messenger\desire.dese@hotmail.c om\SharingMetadata\Logs\Dfsr00005.log Object is locked skipped
C:\Documents and Settings\SERVER\Configuración local\Datos de programa\Microsoft\Messenger\desire.dese@hotmail.c om\SharingMetadata\pending.dat Object is locked skipped
C:\Documents and Settings\SERVER\Configuración local\Datos de programa\Microsoft\Messenger\desire.dese@hotmail.c om\SharingMetadata\Working\database_1CB4_8BAB_B48B _85CC\dfsr.db Object is locked skipped
C:\Documents and Settings\SERVER\Configuración local\Datos de programa\Microsoft\Messenger\desire.dese@hotmail.c om\SharingMetadata\Working\database_1CB4_8BAB_B48B _85CC\fsr.log Object is locked skipped
C:\Documents and Settings\SERVER\Configuración local\Datos de programa\Microsoft\Messenger\desire.dese@hotmail.c om\SharingMetadata\Working\database_1CB4_8BAB_B48B _85CC\tmp.edb Object is locked skipped
C:\Documents and Settings\SERVER\Configuración local\Datos de programa\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\SERVER\Configuración local\Datos de programa\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\SERVER\Configuración local\Datos de programa\Microsoft\Windows Live Contacts\desire.dese@hotmail.com\real\members.stg Object is locked skipped
C:\Documents and Settings\SERVER\Configuración local\Datos de programa\Microsoft\Windows Live Contacts\desire.dese@hotmail.com\shadow\members.st g Object is locked skipped
C:\Documents and Settings\SERVER\Configuración local\Datos de programa\Microsoft\Windows Media\10.0\WMSDKNSD.XML Object is locked skipped
C:\Documents and Settings\SERVER\Configuración local\Historial\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\SERVER\Configuración local\Historial\History.IE5\MSHist0120070430200705 01\index.dat Object is locked skipped
C:\Documents and Settings\SERVER\Configuración local\Temp\JETD5AF.tmp Object is locked skipped
C:\Documents and Settings\SERVER\Configuración local\Temp\Perflib_Perfdata_40c.dat Object is locked skipped
C:\Documents and Settings\SERVER\Configuración local\Temp\~DF4502.tmp Object is locked skipped
C:\Documents and Settings\SERVER\Configuración local\Temp\~DF45A8.tmp Object is locked skipped
C:\Documents and Settings\SERVER\Configuración local\Temp\~DF690.tmp Object is locked skipped
C:\Documents and Settings\SERVER\Configuración local\Temp\~DF78BC.tmp Object is locked skipped
C:\Documents and Settings\SERVER\Configuración local\Temp\~DF78C0.tmp Object is locked skipped
C:\Documents and Settings\SERVER\Configuración local\Temp\~DF78D6.tmp Object is locked skipped
C:\Documents and Settings\SERVER\Configuración local\Temp\~DF7C0D.tmp Object is locked skipped
C:\Documents and Settings\SERVER\Configuración local\Temp\~DF8455.tmp Object is locked skipped
C:\Documents and Settings\SERVER\Configuración local\Temp\~DF8A1D.tmp Object is locked skipped
C:\Documents and Settings\SERVER\Configuración local\Temp\~DF8D1E.tmp Object is locked skipped
C:\Documents and Settings\SERVER\Configuración local\Temp\~DFBBE3.tmp Object is locked skipped
C:\Documents and Settings\SERVER\Configuración local\Temp\~DFE999.tmp Object is locked skipped
C:\Documents and Settings\SERVER\Configuración local\Temp\~DFF28F.tmp Object is locked skipped
C:\Documents and Settings\SERVER\Configuración local\Temp\~WRF2994.tmp Object is locked skipped
C:\Documents and Settings\SERVER\Configuración local\Temp\~WRS0002.tmp Object is locked skipped
C:\Documents and Settings\SERVER\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\SERVER\Datos de programa\Microsoft\Plantillas\Normal.dot Object is locked skipped
C:\Documents and Settings\SERVER\Datos de programa\Microsoft\Word\Guardado con Autorrecuperación de PEDAGOGIA INSTITUCIONAL.asd Object is locked skipped
C:\Documents and Settings\SERVER\Mis documentos\PEDAGOGIA INSTITUCIONAL.doc Object is locked skipped
C:\Documents and Settings\SERVER\Mis documentos\~WRL0879.tmp Object is locked skipped
C:\Documents and Settings\SERVER\Mis documentos\~WRL2471.tmp Object is locked skipped
C:\Documents and Settings\SERVER\Mis documentos\~WRL2619.tmp Object is locked skipped
C:\Documents and Settings\SERVER\Mis documentos\~WRL2642.tmp Object is locked skipped
C:\Documents and Settings\SERVER\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\SERVER\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\SERVER\Plantillas\12024-NendangBro.com Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0014809.exe Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0014810.exe Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0014811.exe Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0014812.exe Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0014813.exe Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0014814.exe Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0014815.exe Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0014821.exe Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0014824.exe Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0015805.exe Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0015807.exe Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0015808.exe Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0015809.exe Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0015810.exe Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0015811.exe Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0015812.exe Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0015813.exe Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0015816.exe Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0015817.com Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0015818.scr Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0015819.exe Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0015820.exe Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0015821.pif Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0015822.exe Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0015829.exe Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0015831.exe Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0015832.exe Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0015833.exe Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0015834.exe Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0015835.exe Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0015836.exe Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0015838.exe Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0015841.exe Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0015842.com Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0015843.scr Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0015844.exe Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0015845.exe Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0015846.pif Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0015847.exe Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0015855.exe Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0015857.exe Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0015858.exe Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0015859.exe Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0015860.exe Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0015861.exe Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0015862.exe Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0015863.exe Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0015867.exe Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0015868.exe Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0015869.com Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0015870.scr Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0015871.exe Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0015872.exe Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0015879.exe Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0015880.exe Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0015881.exe Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0015882.exe Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0015883.exe Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0015884.exe Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0015886.exe Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0015889.exe Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0015890.exe Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0015891.exe Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0015892.exe Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0015893.exe Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0015895.pif Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0015896.com Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0015897.scr Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0015898.exe Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0016876.exe Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0016877.exe Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0016878.exe Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0016882.exe Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0016883.exe Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0016884.exe Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0016885.exe Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0016887.exe Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0016888.exe Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0016889.exe Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0016890.exe Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0016891.exe Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0016893.exe Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0016894.com Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0016895.scr Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0016896.exe Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0016897.exe Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0017883.exe Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0017884.exe Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0017885.exe Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0017886.exe Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0017887.exe Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0017888.exe Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0017889.exe Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0017893.exe Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0017894.exe Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0017896.exe Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0017897.exe Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0017898.pif Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0017899.com Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0017900.scr Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0017901.exe Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0017908.exe Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0017909.exe Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0017910.exe Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0017911.exe Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0017912.exe Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0017913.exe Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0017914.exe Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0017918.exe Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0017919.exe Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0017920.exe Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0017921.pif Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0017922.com Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0017923.scr Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0017924.exe Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0018908.exe Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0018909.exe Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0018910.exe Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0018911.exe Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0018912.exe Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0018913.exe Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0018914.exe Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0018918.exe Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0018919.exe Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0018920.exe Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0018921.exe Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0018922.com Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0018923.scr Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0018924.exe Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0018925.exe Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0019908.exe Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0019909.exe Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0019910.exe Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0019911.exe Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0019912.exe Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0019913.exe Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0019914.exe Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0019918.exe Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0019919.exe Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0019920.exe Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0019921.pif Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0019922.com Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0019923.scr Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0019924.exe Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0019925.exe Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0019951.exe Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0019952.pif Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0019954.exe Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP34\A0019955.exe Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP56\A0065600.exe Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP56\A0065601.exe Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP56\A0065602.exe Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP56\A0065603.exe Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP56\A0065604.exe Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP56\A0065605.exe Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP56\A0065606.exe Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP56\A0065607.exe Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP56\A0065608.pif Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP56\A0065609.com Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP56\A0065610.exe Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP56\A0065611.exe Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP56\A0065612.exe Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP56\A0065613.exe Infected: Email-Worm.Win32.Brontok.q skipped
C:\System Volume Information\_restore{3DEE0213-DA75-4AAA-854A-2770271F0215}\RP56\change.log Object is locked skipped
C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped
C:\WINDOWS\SchedLgU.Txt Object is locked skipped
C:\WINDOWS\SoftwareDistribution\EventCache\{673CD2 4C-5D14-482C-A4BD-2FB616C02D44}.bin Object is locked skipped
C:\WINDOWS\SoftwareDistribution\ReportingEvents.lo g Object is locked skipped
C:\WINDOWS\system32\CatRoot2\edb.log Object is locked skipped
C:\WINDOWS\system32\CatRoot2\tmp.edb Object is locked skipped
C:\WINDOWS\system32\cmd-bro-llx.exe Infected: Email-Worm.Win32.Brontok.q skipped
C:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\default Object is locked skipped
C:\WINDOWS\system32\config\default.LOG Object is locked skipped
C:\WINDOWS\system32\config\SAM Object is locked skipped
C:\WINDOWS\system32\config\SAM.LOG Object is locked skipped
C:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\SECURITY Object is locked skipped
C:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped
C:\WINDOWS\system32\config\software Object is locked skipped
C:\WINDOWS\system32\config\software.LOG Object is locked skipped
C:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\system Object is locked skipped
C:\WINDOWS\system32\config\system.LOG Object is locked skipped
C:\WINDOWS\system32\h323log.txt Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MA P Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MA P Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DAT A Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP Object is locked skipped
C:\WINDOWS\WindowsUpdate.log Object is locked skipped

Scan process completed.

has esto

* "Apaga Restaurar Sistema"
* Reinicias el sistema
* Activas de nuevo la restauración
* Reinicias nuevamente

luego as esto

Descarga e instala las siguientes herramientas para la desinfeccion:

FileASSASSIN

ccleaner

Regseeker


Apaga el "Restaurar Sistema

activar la opción Ver archivos ocultos

Inicia el sistema en "Modo a Prueba de Fallos

busca y elimina los siguientes archivos (los pongo en rojo) usando el FileASSASSIN

C:\WINDOWS\system32\cmd-bro-llx.exe

Utiliza ccleaner para limpiar cookies y temporales lee el manual por si te trabas, Pasar el RegSeeker para limpiar el registro, pásalo varias veces hasta que ya no te salga nada por si te trabas aqui esta el manual


Reinicia el sistema en modo normal

Cuando termines los pasos Activa restaurar sistema y esconde los archivos ocultos

has un nuevo analisis con

kaspersky online (pega el reporte entero que te genere)

te espero........

salu2

Hola

Lalo_a_link lo que te dije Ultimamente te desesperas para responder Rapido. se Buen Observador.

Sigue. Los Paso pero en La Parte de Eliminar los Archivos Incluye los Siguientes:

• C:\Documents and Settings\SERVER\Configuración local\Datos de programa\csrss.exe
• C:\Documents and Settings\SERVER\Configuración local\Datos de programa\inetinfo.exe
• C:\Documents and Settings\SERVER\Configuración local\Datos de programa\lsass.exe
• C:\Documents and Settings\SERVER\Plantillas\12024-NendangBro.com

Elimina los Temp de esta manera:

ve a Inicio-->Ejecutar y escribes %Temp%

Eliminas todo el Contenido de la Carpeta menos la que Dice Papelera de Reciclaje.

Sigues con los Demas Pasos. y Nos Comentas.

Complementando la respuesta de mi colega:

Bajate esta herramienta:

RegUnlocker.

Despues de lo que te indicaron, prosigue con estos pasos para eliminar el sasser.

En cuanto a este archivo:

C:\Documents and Settings\SERVER\Configuración local\Datos de programa\lsass.exe

No recuerdo donde se guarda el legitimo y no se que hacer.

Despues de esto pasas varias veces el regunlocker.

Salu2!

C:\WINDOWS\system32\lsass.exe