Foro de InfoSpyware - Foro de Hijackthis - Foro de Virus

Hola a todos...
espero ke me puedan ayudar hace unas semanas tuve problemas kon unos troyanos pero al parecer no esta resuelto todavia porke al realizar el eskaneo kon el kaspersky la pc se blokea y no responde nada y pasa lo mismo kuando korro el eskaneo de spybot s&d, el ad-aware, el spyware doctor, superantispy ware, y kon los antivirus online, he leido otros temas y no encuentro algo akorde kon mi problema.

antes de ke blokeara la pc detecto bastantes problemas les dejo aka lo ke enkontro el kaspersky:

deleted: Trojan program Trojan.Win32.Agent.afg File: C:\WINDOWS\SYSTEM32\KMVHD.DLL
deleted: Trojan program Trojan.Win32.Obfuscated.en File: C:\System Volume Information\_restore{408C4D0E-0633-4CDF-BC66-3CED675611F4}\RP251\A0065755.exe
deleted: Trojan program Trojan.Win32.Obfuscated.en File: C:\System Volume Information\_restore{408C4D0E-0633-4CDF-BC66-3CED675611F4}\RP251\A0065756.exe
deleted: Trojan program Trojan.Win32.Obfuscated.en File: C:\System Volume Information\_restore{408C4D0E-0633-4CDF-BC66-3CED675611F4}\RP251\A0065757.exe
deleted: Trojan program Trojan.Win32.Obfuscated.en File: C:\System Volume Information\_restore{408C4D0E-0633-4CDF-BC66-3CED675611F4}\RP251\A0065758.exe
deleted: Trojan program Backdoor.Win32.SdBot.bfh File: C:\System Volume Information\_restore{408C4D0E-0633-4CDF-BC66-3CED675611F4}\RP256\A0069088.exe
deleted: Trojan program Trojan-Downloader.Win32.Agent.brk File: C:\System Volume Information\_restore{408C4D0E-0633-4CDF-BC66-3CED675611F4}\RP256\A0069089.exe
deleted: Trojan program Trojan-Downloader.Win32.Agent.brl File: C:\System Volume Information\_restore{408C4D0E-0633-4CDF-BC66-3CED675611F4}\RP256\A0074075.exe
deleted: Trojan program Trojan-Downloader.Win32.Agent.brl File: C:\System Volume Information\_restore{408C4D0E-0633-4CDF-BC66-3CED675611F4}\RP256\A0075075.exe
deleted: Trojan program Trojan-Downloader.Win32.Agent.brl File: C:\System Volume Information\_restore{408C4D0E-0633-4CDF-BC66-3CED675611F4}\RP256\A0076075.exe
deleted: Trojan program Trojan-Downloader.Win32.Agent.brl File: C:\System Volume Information\_restore{408C4D0E-0633-4CDF-BC66-3CED675611F4}\RP256\A0077075.exe
deleted: Trojan program Trojan-Downloader.Win32.Agent.brl File: C:\System Volume Information\_restore{408C4D0E-0633-4CDF-BC66-3CED675611F4}\RP256\A0078075.exe
deleted: Trojan program Trojan-Downloader.Win32.Agent.brl File: C:\System Volume Information\_restore{408C4D0E-0633-4CDF-BC66-3CED675611F4}\RP256\A0079075.exe
deleted: Trojan program Trojan.Win32.Agent.afg File: C:\System Volume Information\_restore{408C4D0E-0633-4CDF-BC66-3CED675611F4}\RP256\A0079093.exe/PE_Patch.UPX/UPX
deleted: Trojan program Trojan-Downloader.Win32.Agent.brl File: C:\System Volume Information\_restore{408C4D0E-0633-4CDF-BC66-3CED675611F4}\RP256\A0083075.exe
deleted: Trojan program Trojan-Downloader.Win32.Agent.brl File: C:\System Volume Information\_restore{408C4D0E-0633-4CDF-BC66-3CED675611F4}\RP256\A0084075.exe
deleted: Trojan program Trojan-Downloader.Win32.Agent.brl File: C:\System Volume Information\_restore{408C4D0E-0633-4CDF-BC66-3CED675611F4}\RP256\A0085075.exe
deleted: Trojan program Trojan-Downloader.Win32.Agent.brl File: C:\System Volume Information\_restore{408C4D0E-0633-4CDF-BC66-3CED675611F4}\RP256\A0086075.exe
deleted: Trojan program Trojan-Downloader.Win32.Agent.brl File: C:\System Volume Information\_restore{408C4D0E-0633-4CDF-BC66-3CED675611F4}\RP256\A0087075.exe
deleted: Trojan program Trojan-Downloader.Win32.Agent.brl File: C:\System Volume Information\_restore{408C4D0E-0633-4CDF-BC66-3CED675611F4}\RP256\A0088075.exe
deleted: Trojan program Trojan-Downloader.Win32.Agent.brl File: C:\System Volume Information\_restore{408C4D0E-0633-4CDF-BC66-3CED675611F4}\RP256\A0089075.exe
deleted: Trojan program Trojan-Downloader.Win32.Agent.brl File: C:\System Volume Information\_restore{408C4D0E-0633-4CDF-BC66-3CED675611F4}\RP256\A0090075.exe
deleted: Trojan program Trojan-Downloader.Win32.Agent.brl File: C:\System Volume Information\_restore{408C4D0E-0633-4CDF-BC66-3CED675611F4}\RP256\A0091075.exe
deleted: Trojan program Trojan-Downloader.Win32.Agent.brl File: C:\System Volume Information\_restore{408C4D0E-0633-4CDF-BC66-3CED675611F4}\RP256\A0092075.exe
deleted: Trojan program Trojan-Downloader.Win32.Agent.brl File: C:\System Volume Information\_restore{408C4D0E-0633-4CDF-BC66-3CED675611F4}\RP256\A0093075.exe
deleted: Trojan program Trojan-Downloader.Win32.Agent.brl File: C:\System Volume Information\_restore{408C4D0E-0633-4CDF-BC66-3CED675611F4}\RP256\A0094075.exe
deleted: Trojan program Trojan-Downloader.Win32.Agent.brl File: C:\System Volume Information\_restore{408C4D0E-0633-4CDF-BC66-3CED675611F4}\RP256\A0095075.exe
deleted: Trojan program Trojan-Downloader.Win32.Agent.brl File: C:\System Volume Information\_restore{408C4D0E-0633-4CDF-BC66-3CED675611F4}\RP256\A0096075.exe
deleted: Trojan program Trojan-Downloader.Win32.Agent.brl File: C:\System Volume Information\_restore{408C4D0E-0633-4CDF-BC66-3CED675611F4}\RP256\A0097075.exe
deleted: Trojan program Trojan-Downloader.Win32.Agent.brl File: C:\System Volume Information\_restore{408C4D0E-0633-4CDF-BC66-3CED675611F4}\RP256\A0098075.exe
deleted: Trojan program Trojan-Downloader.Win32.Agent.brl File: C:\System Volume Information\_restore{408C4D0E-0633-4CDF-BC66-3CED675611F4}\RP256\A0099075.exe
deleted: Trojan program Trojan-Downloader.Win32.Agent.brl File: C:\System Volume Information\_restore{408C4D0E-0633-4CDF-BC66-3CED675611F4}\RP256\A0100075.exe
deleted: Trojan program Trojan-Downloader.Win32.Agent.brl File: C:\System Volume Information\_restore{408C4D0E-0633-4CDF-BC66-3CED675611F4}\RP257\A0100087.exe
deleted: Trojan program Trojan.Win32.Agent.afg File: C:\System Volume Information\_restore{408C4D0E-0633-4CDF-BC66-3CED675611F4}\RP257\A0100129.exe/PE_Patch.UPX/UPX
deleted: Trojan program Trojan-Downloader.Win32.Agent.brl File: C:\System Volume Information\_restore{408C4D0E-0633-4CDF-BC66-3CED675611F4}\RP257\A0100137.exe
deleted: Trojan program Trojan-Downloader.Win32.Agent.brl File: C:\System Volume Information\_restore{408C4D0E-0633-4CDF-BC66-3CED675611F4}\RP257\A0101137.exe
deleted: Trojan program Trojan-Downloader.Win32.Agent.brl File: C:\System Volume Information\_restore{408C4D0E-0633-4CDF-BC66-3CED675611F4}\RP257\A0102137.exe
deleted: Trojan program Trojan-Downloader.Win32.Agent.brl File: C:\System Volume Information\_restore{408C4D0E-0633-4CDF-BC66-3CED675611F4}\RP257\A0103137.exe
deleted: Trojan program Trojan-Downloader.Win32.Agent.brl File: C:\System Volume Information\_restore{408C4D0E-0633-4CDF-BC66-3CED675611F4}\RP257\A0104137.exe
deleted: Trojan program Trojan-Downloader.Win32.Agent.brl File: C:\System Volume Information\_restore{408C4D0E-0633-4CDF-BC66-3CED675611F4}\RP258\A0104149.exe
deleted: Trojan program Trojan.Win32.Agent.afg File: C:\System Volume Information\_restore{408C4D0E-0633-4CDF-BC66-3CED675611F4}\RP258\A0104191.exe/PE_Patch.UPX/UPX
deleted: Trojan program Trojan-Downloader.Win32.Agent.brl File: C:\System Volume Information\_restore{408C4D0E-0633-4CDF-BC66-3CED675611F4}\RP258\A0104199.exe
deleted: Trojan program Trojan-Downloader.Win32.Agent.brl File: C:\System Volume Information\_restore{408C4D0E-0633-4CDF-BC66-3CED675611F4}\RP258\A0105199.exe
deleted: Trojan program Trojan-Downloader.Win32.Agent.brl File: C:\System Volume Information\_restore{408C4D0E-0633-4CDF-BC66-3CED675611F4}\RP258\A0106199.exe
deleted: Trojan program Trojan-Downloader.Win32.Agent.brl File: C:\System Volume Information\_restore{408C4D0E-0633-4CDF-BC66-3CED675611F4}\RP258\A0107199.exe
deleted: Trojan program Trojan-Downloader.Win32.Agent.brl File: C:\System Volume Information\_restore{408C4D0E-0633-4CDF-BC66-3CED675611F4}\RP258\A0108199.exe
deleted: Trojan program Trojan-Downloader.Win32.Agent.brl File: C:\System Volume Information\_restore{408C4D0E-0633-4CDF-BC66-3CED675611F4}\RP258\A0109199.exe
deleted: Trojan program Trojan-Downloader.Win32.Agent.brl File: C:\System Volume Information\_restore{408C4D0E-0633-4CDF-BC66-3CED675611F4}\RP259\A0109240.exe
deleted: Trojan program Trojan.Win32.Agent.afg File: C:\System Volume Information\_restore{408C4D0E-0633-4CDF-BC66-3CED675611F4}\RP259\A0109284.exe/PE_Patch.UPX/UPX
deleted: Trojan program Trojan-Downloader.Win32.Agent.brl File: C:\System Volume Information\_restore{408C4D0E-0633-4CDF-BC66-3CED675611F4}\RP259\A0109292.exe
deleted: Trojan program Trojan-Downloader.Win32.Agent.brl File: C:\System Volume Information\_restore{408C4D0E-0633-4CDF-BC66-3CED675611F4}\RP259\A0110292.exe
deleted: Trojan program Trojan-Downloader.Win32.Agent.brl File: C:\System Volume Information\_restore{408C4D0E-0633-4CDF-BC66-3CED675611F4}\RP259\A0111292.exe
deleted: Trojan program Trojan-Downloader.Win32.Agent.brl File: C:\System Volume Information\_restore{408C4D0E-0633-4CDF-BC66-3CED675611F4}\RP259\A0112292.exe
deleted: Trojan program Trojan.Win32.Agent.afg File: C:\System Volume Information\_restore{408C4D0E-0633-4CDF-BC66-3CED675611F4}\RP260\A0113369.exe/PE_Patch.UPX/UPX
deleted: Trojan program Trojan.Win32.Agent.afg File: C:\System Volume Information\_restore{408C4D0E-0633-4CDF-BC66-3CED675611F4}\RP262\A0122453.exe/PE_Patch.UPX/UPX
deleted: Trojan program Trojan.Win32.Agent.afg File: C:\System Volume Information\_restore{408C4D0E-0633-4CDF-BC66-3CED675611F4}\RP262\A0123464.exe/PE_Patch.UPX/UPX
deleted: Trojan program Trojan-Downloader.Win32.VB.aps File: C:\System Volume Information\_restore{408C4D0E-0633-4CDF-BC66-3CED675611F4}\RP262\A0127638.exe
deleted: Trojan program Trojan-Downloader.Win32.Nurech.az File: C:\System Volume Information\_restore{408C4D0E-0633-4CDF-BC66-3CED675611F4}\RP262\A0127653.exe
deleted: Trojan program Trojan-Proxy.Win32.Small.du File: C:\System Volume Information\_restore{408C4D0E-0633-4CDF-BC66-3CED675611F4}\RP262\A0127657.exe
deleted: Trojan program Trojan-Spy.Win32.BZub.if File: C:\System Volume Information\_restore{408C4D0E-0633-4CDF-BC66-3CED675611F4}\RP262\A0127660.exe
deleted: Trojan program Trojan.Win32.Agent.afg File: C:\System Volume Information\_restore{408C4D0E-0633-4CDF-BC66-3CED675611F4}\RP267\A0141926.dll
deleted: Trojan program Trojan.Win32.Agent.afg File: C:\System Volume Information\_restore{408C4D0E-0633-4CDF-BC66-3CED675611F4}\RP269\A0146408.dll
deleted: Trojan program Trojan.Win32.Agent.afg File: C:\System Volume Information\_restore{408C4D0E-0633-4CDF-BC66-3CED675611F4}\RP269\A0146410.dll
deleted: Trojan program Trojan.Win32.Agent.afg File: C:\System Volume Information\_restore{408C4D0E-0633-4CDF-BC66-3CED675611F4}\RP271\A0146583.dll
deleted: Trojan program Trojan.Win32.Agent.afg File: C:\System Volume Information\_restore{408C4D0E-0633-4CDF-BC66-3CED675611F4}\RP271\A0146584.dll
deleted: Trojan program Trojan.Win32.Agent.afg File: C:\System Volume Information\_restore{408C4D0E-0633-4CDF-BC66-3CED675611F4}\RP271\A0146593.dll
deleted: Trojan program Trojan.Win32.Agent.afg File: C:\System Volume Information\_restore{408C4D0E-0633-4CDF-BC66-3CED675611F4}\RP279\A0151063.dll
deleted: Trojan program Trojan.Win32.Agent.afg File: C:\System Volume Information\_restore{408C4D0E-0633-4CDF-BC66-3CED675611F4}\RP279\A0151064.dll
deleted: Trojan program Trojan.Win32.Agent.afg File: C:\System Volume Information\_restore{408C4D0E-0633-4CDF-BC66-3CED675611F4}\RP279\A0151305.dll
deleted: Trojan program Trojan.Win32.Agent.afg File: C:\System Volume Information\_restore{408C4D0E-0633-4CDF-BC66-3CED675611F4}\RP280\A0151576.dll
deleted: Trojan program Trojan.Win32.Agent.afg File: C:\System Volume Information\_restore{408C4D0E-0633-4CDF-BC66-3CED675611F4}\RP280\A0151577.dll
deleted: Trojan program Trojan.Win32.Agent.afg File: C:\System Volume Information\_restore{408C4D0E-0633-4CDF-BC66-3CED675611F4}\RP280\A0151818.dll
deleted: Trojan program Trojan.Win32.Agent.afg File: C:\System Volume Information\_restore{408C4D0E-0633-4CDF-BC66-3CED675611F4}\RP281\A0152089.dll
deleted: Trojan program Trojan.Win32.Agent.afg File: C:\System Volume Information\_restore{408C4D0E-0633-4CDF-BC66-3CED675611F4}\RP281\A0152090.dll
deleted: Trojan program Trojan.Win32.Agent.afg File: C:\System Volume Information\_restore{408C4D0E-0633-4CDF-BC66-3CED675611F4}\RP281\A0152331.dll
deleted: Trojan program Trojan.Win32.Agent.afg File: C:\System Volume Information\_restore{408C4D0E-0633-4CDF-BC66-3CED675611F4}\RP284\A0152366.dll
deleted: Trojan program Trojan-Spy.Win32.BZub.if File: C:\F.tmp
deleted: Trojan program Trojan.Win32.Agent.afg File: C:\Documents and Settings\Usuario\Configuración local\Temp\temp.frE0D0
deleted: malware Exploit.Java.Gimsh.a File: C:\Documents and Settings\Usuario\Datos de programa\Sun\Java\Deployment\cache\6.0\61\3cd8157d-7fff8b3a
deleted: Trojan program Trojan.Win32.Agent.afg File: C:\WINDOWS\SYSTEM32\DOSHP.DLL
deleted: Trojan program Trojan.Win32.Agent.afg File: C:\WINDOWS\system32\totour.exe/PE_Patch.UPX/UPX
deleted: Trojan program Trojan.Win32.Agent.afg File: C:\WINDOWS\SYSTEM32\xcttp.dll
deleted: Trojan program Trojan.Win32.Agent.afg File: C:\System Volume Information\_restore{408C4D0E-0633-4CDF-BC66-3CED675611F4}\RP284\A0154382.dll
deleted: Trojan program Trojan.Win32.Agent.afg File: C:\System Volume Information\_restore{408C4D0E-0633-4CDF-BC66-3CED675611F4}\RP285\A0156392.dll

todos esos ya los eliminó pero aun asi no puede terminar ningun tipo de skaneo ni en modo: a prueva de errores
tambien e provado el eskaneo online en modod a prueva de errores con funciones de red pero no logra terminar y se blokea bueno espero ke me puedan ayudar...
gracias.
mi sistema operativo es xp pro kon sp2

eso puede ser que mientras escaneas cuando el antivirus pilla al virus o troyano te blokee la pc una forma es que repares el sistema y mientras dure el reparo analizas y kitas el virus o troyano.
dew

komo hago lo de reparar el sist???
te refieres a restaurar el sistema????

Hola Renk

Hacé lo siguiente:
1. - Apagá Restaurar Sistema.
2. - Reiniciá el equipo.
3. - Reactivá Restaurar Sistema.
4. - Realizá un nuevo análisis con Kaspersky y contanos resultados.

Salu2

hola
ya lo desactive ahora voy a reiniciar solo ke el kaspersky me marco lo sig:


Process is trying to modify value in system registry key that belongs to group System Services. These keys controls the list of system services.

You are advised to grant access to these settings if you want to install/uninstall a driver or system service, and to deny access in other cases.

Key: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\s r

Value: ImagePath

Data(Unicode null-terminated string (with environment variable references)):
system32\DRIVERS\sr.sys

New data(Unicode null-terminated string (with environment variable references)):
\SystemRoot\system32\DRIVERS\sr.sys


le di permitir... bueno voy a reiniciar y a activarlo de nuevo y realizo el skaneo ... luego les digo ke pasa..

ok ya reinicie y active de nuevo restaurar el sistemay de nuevo me aparecio un mensage de kaspersky ke dice:

Process is trying to modify value in system registry key that belongs to group System Services. These keys controls the list of system services.

You are advised to grant access to these settings if you want to install/uninstall a driver or system service, and to deny access in other cases.

Key: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\s r

Value: ImagePath

Data(Unicode null-terminated string (with environment variable references)):
\SystemRoot\system32\DRIVERS\sr.sys

New data(Unicode null-terminated string (with environment variable references)):
system32\DRIVERS\sr.sys

le di permitir ahora estoy realizando el eskaneo luego les kuento si logra terminarlo.

ola perdon por tardar en responder.
para reparar el sistema tienes que meter el disco de windows xp y encerder el ordenador con el y elegir la particion y darle a reparara y te arregla todos los fallos que tenga pero si es por un virus durara un poco:
dew

una preguntita si se repara se pierden los datos de los discos duros?gracias

ola.
no el disco duro sigue igual lo que hace es solo reparar los fallos de windows los programas y los archivos siguen igual que como estaban todo sigue igual pero si el ordenador no te deja analizar por un virus la reparacion durara poco ya que el virus seguira alli y volvera a atacar lo cual quiere decir que tienes que analizar rapido tambien cabe la posiblidad de que la reparacion borre parte del virus asi que date prisa si no funciona me avisas que te ayudare buscando otra solucion.
dew

ola otra vez.
se me olvido decirte una cosa cuando reparas la particion tienes que tener el serial original de windows ya que te lo pedira por sera como si acabases de formatear eligiras el nombre del ordenador la compania etc y el serial si no lo tienes no podras instalarlo asi que primero ten el serial y luego repara.
dew