Foro de InfoSpyware - Foro de Hijackthis - Foro de Virus

Hola

Tengo un problema grave en mi ordenador: de repente, se apaga solo. Es grave, pq he pasado el ewido y parece q borra todo, y luego voy a pasar el Karpersky, para enviaros el reporte, y me es imposible. Tarda muchísimo en pasarse, y llevo varios intentos, pero termina apagándose de golpe el ordenador y no puedo pasar el Karpersky. Me daríais alguna solución?? Mínimo me encuentra dos virus, con un 5% q me ha dejado pasarle. Espero q sepáis qué puedo hacer, el lunes necesito el ordenador para trabajar y estoy histérica. Un beso.

Ah! Se me olvidó decir q un día, al encender el ordenador, me salió una pantalla azul (no sé si es la BIOS o qué). Besos

Hola

Iniciá en Modo Seguro y realizá un escaneo con:

• Dr. Web Cure-IT
• SuperAntispyware

Luego ejecutá Disk Cleaner y RegSeeker en ese orden.

Si los problemas persisten, analizá con Panda ActiveScan y pegá su reporte aquí junto a uno de ComboFix.

Salu2

Hola

Hice lo q me dijísteis, pero excepto el programa Dr., q me encontró dos troyanos y lo he vuelto a pasar y parece q se eliminaron, el resto ya no me deja. En modo a prueba de fallos, he pasado el ewido, y se me apaga mientras se está pasando. Y el Panda lo mismo, no me deja pasarlo, casi nada más empezar, se vuelve a apagar el ordenador. Qué hago??

Hola

No volví a pasar ningún programa más, y el lunes y martes tuve el ordenador encendido todo el día, trabajando con él, en Excel (tb tuve el messenger y navegué por internet), y no se me volvió a apagar. Pero justo hoy, ha vuelto! Ha sido al usar el Convert, para pasar un vídeo a DVD. Eso os da alguna pista? Qué hago para q no se me apague y pueda pasar algún antivirus o poder poneros algún reporte? Gracias.

hola

Os doy otro dato, por si podría ser de utilidad (he leído mensajes de gente q tenía este problema, y no sé. Me queda sin ocupar sólo un 12% de memoria en mi pc, y hace un tiempo, hay cosas q se me han puesto en color azul, en lugar del negro habitual. Podría tener un problema de memorias? Me es imposible pasar cualquier antivirus, utilizar el Convert... Se me apaga siempre, incluso en modo a prueba de fallos. En cambio, sí pude bajarme hace unos días el programa skype. Qué puede ser? Gracias

Hola miryabel

Bueno si tu pc se apaga de Golpe quiza ya el Problema no sea de malware, una explicacion seria que un sector del disco está dañado
al pasar antivirus ese sector se "trata" de leer
pero por alguna extraña razón
al hacer eso el brazo sufre un golpe, quizás por alguna devolución no adecuada de iones

Mis Recomendaciones:

• FAQs: Refrigeración de Hardware
• Manual de Limpeza Interna del Pc
• Tambien para Descartar Problemas con memoria lee esto: FAQs: Problemas con Memoria ¿Cómo usar Memtest?

Pero Si solo se apaga al Realizar los scan Online, Realiza lo Siguiente:

Descarga/Actualiza/Ejecuta y envianos el reporte de Mwav.exe

Saludos.

hola

éste es el reporte del mwav, sí q me ha dejado pasarlo, menos mal:

File C:\Documents and Settings\Mirita\Escritorio\PROGRAMAS BORJA\IRC.exe//data0001.bin tagged as "not-a-virus:Client-IRC.Win32.mIRC.616". No Action Taken.
Object "maxsearch Adware" found in File System! Action Taken: No Action Taken.
Object "video activex access Trojan" found in File System! Action Taken: No Action Taken.
Object "grokster Spyware/Adware" found in File System! Action Taken: No Action Taken.
Object "kazaa Spyware/Adware" found in File System! Action Taken: No Action Taken.
Object "gain.gator Spyware/Adware" found in File System! Action Taken: No Action Taken.
Object "killav.nbd Browser Hijacker" found in File System! Action Taken: No Action Taken.
Object "gain.gator Spyware/Adware" found in File System! Action Taken: No Action Taken.
Object "gain.gator Spyware/Adware" found in File System! Action Taken: No Action Taken.
Object "savenow Adware" found in File System! Action Taken: No Action Taken.
Object "killav.nbd Browser Hijacker" found in File System! Action Taken: No Action Taken.
Object "w32.rontokbro.d@mm Worm" found in File System! Action Taken: No Action Taken.
Entry "HKCR\SPhoneParser.FoundSkypeNumber" refers to invalid object "{E40A96CC-4A5B-47F4-9957-87CDED1DFF45}". Action Taken: No Action Taken.
Entry "HKCR\SPhoneParser.FoundSkypeNumber.1" refers to invalid object "{E40A96CC-4A5B-47F4-9957-87CDED1DFF45}". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Ap p Management\ARPCache" refers to invalid object "ShockwaveFlash". Action Taken: No Action Taken.
File C:\WINDOWS\system32\afyiesgj.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\apnpppnr.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\asxmstmp.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\averdqkh.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\bedpfvrs.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\bnlphsxh.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\bquywsas.dll infected by "Trojan-Spy.Win32.VBStat.h" Virus! Action Taken: No Action Taken.
File C:\WINDOWS\system32\bsaexnsy.dll infected by "Trojan-Spy.Win32.VBStat.h" Virus! Action Taken: No Action Taken.
File C:\WINDOWS\system32\bxbyhltk.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\cchcjlty.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\ccrjrivb.dll infected by "Trojan.Win32.BHO.g" Virus! Action Taken: No Action Taken.
File C:\WINDOWS\system32\chbuwhnd.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\ckcxbltt.dll infected by "Trojan-Spy.Win32.VBStat.h" Virus! Action Taken: No Action Taken.
File C:\WINDOWS\system32\cuntsyve.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\cutrhokw.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\dcamihvm.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\demooofh.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\dftnyasd.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\dqjuohni.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\dsngrrha.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\dsqiteco.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\emqincuj.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\erokoblq.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\esrglpnl.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\eyqwukix.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\fectjktj.dll infected by "Trojan.Win32.BHO.g" Virus! Action Taken: No Action Taken.
File C:\WINDOWS\system32\fflalchm.dll infected by "Trojan-Spy.Win32.VBStat.h" Virus! Action Taken: No Action Taken.
File C:\WINDOWS\system32\fhwldpol.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\fipjqbfb.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\fokcgmnn.dll tagged as "not-a-virus:AdWare.Win32.Virtumonde.ft". Action Taken: No Action Taken.
File C:\WINDOWS\system32\fpulugxd.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\fwckopty.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\fxonwjib.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\gbiewiky.dll infected by "Trojan-Spy.Win32.VBStat.h" Virus! Action Taken: No Action Taken.
File C:\WINDOWS\system32\gmefydik.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\gucswqfd.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\gwpgqjeg.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\gypahloy.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\hgpaotlx.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\host.exe infected by "Exe.Corrupted" Virus! Action Taken: No Action Taken.
File C:\WINDOWS\system32\hqcunmno.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\hqtufkbu.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\hshreeqf.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\hukfarwe.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\huknnsxo.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\ibcvudqj.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\ibusgjko.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\ifshfjkr.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\igofnoyd.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\iuchdjqr.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\iwcwsykl.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\jedmhgaf.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\jkhasfnf.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\jtedbeqk.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\kplyuvpe.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\kwymrmct.dll infected by "Trojan-Spy.Win32.VBStat.h" Virus! Action Taken: No Action Taken.
File C:\WINDOWS\system32\ldcxptjv.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\leitjskw.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\lglwahfp.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\lrjxkaue.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\mfjajbvt.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\mhcticte.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\mlfcvrcn.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\nbisldsf.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\nhifsdod.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\nhpypugb.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\nnjkldsn.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\npnjumiq.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\nqfrnnft.dll infected by "Trojan.Win32.BHO.g" Virus! Action Taken: No Action Taken.
File C:\WINDOWS\system32\ocxtowyw.dll infected by "Trojan-Spy.Win32.VBStat.h" Virus! Action Taken: No Action Taken.
File C:\WINDOWS\system32\paemnqmu.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\pfuotmov.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\pidrxsln.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\pkgdpgbm.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\plfoddgj.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\pmkhf.dll.vir//Virtumonde//PE_Patch.UPX//UPX tagged as "not-a-virus:AdWare.Win32.Virtumonde.fl". Action Taken: No Action Taken.
File C:\WINDOWS\system32\ppovukwj.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\psvaqjcc.dll infected by "Trojan-Spy.Win32.VBStat.h" Virus! Action Taken: No Action Taken.
File C:\WINDOWS\system32\pwluvkoi.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\qehpftsn.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\qmikfuhk.dll infected by "Trojan-Spy.Win32.VBStat.h" Virus! Action Taken: No Action Taken.
File C:\WINDOWS\system32\qufdxpvl.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\qvfamixv.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\ragywgqj.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\rcxqtcqu.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\rfrstexr.dll infected by "Trojan-Spy.Win32.VBStat.h" Virus! Action Taken: No Action Taken.
File C:\WINDOWS\system32\rjdhwfst.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\rvaqbnab.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\sbwjontd.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\sdkbbmhl.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\senqqdax.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\setup_70405.exe infected by "Exe.Corrupted" Virus! Action Taken: No Action Taken.
File C:\WINDOWS\system32\sfpkiewl.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\shmpliod.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\svqnqlvu.dll infected by "Trojan-Spy.Win32.VBStat.h" Virus! Action Taken: No Action Taken.
File C:\WINDOWS\system32\tcjduabb.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\texwjiof.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\tjechhfi.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\twwcapba.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\unsvchosts.exe tagged as "not-a-virus:RiskTool.Win32.Starter.a". Action Taken: No Action Taken.
File C:\WINDOWS\system32\uoyirlpk.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\ussoidie.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\vanrifva.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\vkaccvov.dll//PE_Patch.Morphine infected by "Packed.Win32.Klone.j" Virus! Action Taken: No Action Taken.
File C:\WINDOWS\system32\vlymcwpb.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\vwabkuqy.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\wojfxrjk.dll//PE_Patch.Morphine infected by "Packed.Win32.Klone.j" Virus! Action Taken: No Action Taken.
File C:\WINDOWS\system32\wxwlwdgj.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\xderkimw.dll infected by "Trojan-Spy.Win32.VBStat.h" Virus! Action Taken: No Action Taken.
File C:\WINDOWS\system32\xdgkdikd.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\xgbqjekv.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\xkjxhdei.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\xktvtxym.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\xldbpnmg.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\xnipecwh.dll infected by "Trojan-Spy.Win32.VBStat.h" Virus! Action Taken: No Action Taken.
File C:\WINDOWS\system32\xpkceivf.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\xwlwgbtd.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\ymehjvgm.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\yvabjowm.dll infected by "Trojan-Spy.Win32.VBStat.h" Virus! Action Taken: No Action Taken.
File C:\WINDOWS\system32\yximjpyp.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\DOCUME~1\Mirita\CONFIG~1\Temp\qwajbfok.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\DOCUME~1\Mirita\CONFIG~1\Temp\vtsdqegu.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\DOCUME~1\Mirita\CONFIG~1\Temp\xuedcjcd.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.

Seguro que pasate el SuperAntispyware..?

Realiza lo siguiente:

• Apagar el "Restaurar Sistema" (solo Win Me y XP)
• Reinicia a Modo Prueba de Fallos (Modo Seguro)
• Ver Archivos ocultos

Ahora Elimina los Siguientes Archivos: ( Si no se dejan Eliminar usa FileAssasin):

C:\Documents and Settings\Mirita\Escritorio\PROGRAMAS BORJA\IRC.exe//data0001.bin
C:\WINDOWS\system32\afyiesgj.exe
C:\WINDOWS\system32\apnpppnr.exe
C:\WINDOWS\system32\asxmstmp.exe
C:\WINDOWS\system32\averdqkh.exe
C:\WINDOWS\system32\bedpfvrs.exe
C:\WINDOWS\system32\bnlphsxh.exe
C:\WINDOWS\system32\bquywsas.dll
C:\WINDOWS\system32\bsaexnsy.dll
C:\WINDOWS\system32\bxbyhltk.exe

El Ccleaner ejecútalo usando primero su opción de "Limpiador" para borrar cookies, temporales de Internet y todos los archivos que este te muestre como obsoletos, y luego usa su opción de "Registro" para limpiar todo el registro de Windows (haciendo copia de seguridad). Realiza Varios Analisis

Inicia en Modo Normal, y Comentame si lograste eliminar esos archivos que te indique y si en Verdad estan y los Encontraste, y me envias un Reporte Nuevo..

Es bien extraña esas Infecciones.

Saludos.

hola

según acabé de Limpiar con el disk cleaner, se ha vuelto a apagar de golpe. Borré los archivos q me dijísteis, y este es el nuevo reporte (parece q salen muchas de las cosas q salían en el anterior). Ya diréis.





File C:\Documents and Settings\Mirita\Escritorio\PROGRAMAS BORJA\IRC.exe//data0001.bin tagged as "not-a-virus:Client-IRC.Win32.mIRC.616". No Action Taken.
Object "maxsearch Adware" found in File System! Action Taken: No Action Taken.
Object "video activex access Trojan" found in File System! Action Taken: No Action Taken.
Object "grokster Spyware/Adware" found in File System! Action Taken: No Action Taken.
Object "kazaa Spyware/Adware" found in File System! Action Taken: No Action Taken.
Object "gain.gator Spyware/Adware" found in File System! Action Taken: No Action Taken.
Object "killav.nbd Browser Hijacker" found in File System! Action Taken: No Action Taken.
Object "gain.gator Spyware/Adware" found in File System! Action Taken: No Action Taken.
Object "gain.gator Spyware/Adware" found in File System! Action Taken: No Action Taken.
Object "savenow Adware" found in File System! Action Taken: No Action Taken.
Object "killav.nbd Browser Hijacker" found in File System! Action Taken: No Action Taken.
Object "w32.rontokbro.d@mm Worm" found in File System! Action Taken: No Action Taken.
Entry "HKCR\SPhoneParser.FoundSkypeNumber" refers to invalid object "{E40A96CC-4A5B-47F4-9957-87CDED1DFF45}". Action Taken: No Action Taken.
Entry "HKCR\SPhoneParser.FoundSkypeNumber.1" refers to invalid object "{E40A96CC-4A5B-47F4-9957-87CDED1DFF45}". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Ap p Management\ARPCache" refers to invalid object "ShockwaveFlash". Action Taken: No Action Taken.
File C:\WINDOWS\system32\cchcjlty.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\ccrjrivb.dll infected by "Trojan.Win32.BHO.g" Virus! Action Taken: No Action Taken.
File C:\WINDOWS\system32\chbuwhnd.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\ckcxbltt.dll infected by "Trojan-Spy.Win32.VBStat.h" Virus! Action Taken: No Action Taken.
File C:\WINDOWS\system32\cuntsyve.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\cutrhokw.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\dcamihvm.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\demooofh.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\dftnyasd.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\dqjuohni.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\dsngrrha.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\dsqiteco.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\emqincuj.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\erokoblq.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\esrglpnl.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\eyqwukix.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\fectjktj.dll infected by "Trojan.Win32.BHO.g" Virus! Action Taken: No Action Taken.
File C:\WINDOWS\system32\fflalchm.dll infected by "Trojan-Spy.Win32.VBStat.h" Virus! Action Taken: No Action Taken.
File C:\WINDOWS\system32\fhwldpol.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\fipjqbfb.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\fokcgmnn.dll tagged as "not-a-virus:AdWare.Win32.Virtumonde.ft". Action Taken: No Action Taken.
File C:\WINDOWS\system32\fpulugxd.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\fwckopty.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\fxonwjib.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\gbiewiky.dll infected by "Trojan-Spy.Win32.VBStat.h" Virus! Action Taken: No Action Taken.
File C:\WINDOWS\system32\gmefydik.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\gucswqfd.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\gwpgqjeg.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\gypahloy.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\hgpaotlx.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\host.exe infected by "Exe.Corrupted" Virus! Action Taken: No Action Taken.
File C:\WINDOWS\system32\hqcunmno.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\hqtufkbu.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\hshreeqf.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\hukfarwe.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\huknnsxo.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\ibcvudqj.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\ibusgjko.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\ifshfjkr.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\igofnoyd.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\iuchdjqr.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\iwcwsykl.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\jedmhgaf.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\jkhasfnf.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\jtedbeqk.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\kplyuvpe.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\kwymrmct.dll infected by "Trojan-Spy.Win32.VBStat.h" Virus! Action Taken: No Action Taken.
File C:\WINDOWS\system32\ldcxptjv.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\leitjskw.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\lglwahfp.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\lrjxkaue.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\mfjajbvt.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\mhcticte.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\mlfcvrcn.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\nbisldsf.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\nhifsdod.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\nhpypugb.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\nnjkldsn.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\npnjumiq.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\nqfrnnft.dll infected by "Trojan.Win32.BHO.g" Virus! Action Taken: No Action Taken.
File C:\WINDOWS\system32\ocxtowyw.dll infected by "Trojan-Spy.Win32.VBStat.h" Virus! Action Taken: No Action Taken.
File C:\WINDOWS\system32\paemnqmu.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\pfuotmov.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\pidrxsln.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\pkgdpgbm.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\plfoddgj.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\pmkhf.dll.vir//Virtumonde//PE_Patch.UPX//UPX tagged as "not-a-virus:AdWare.Win32.Virtumonde.fl". Action Taken: No Action Taken.
File C:\WINDOWS\system32\ppovukwj.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\psvaqjcc.dll infected by "Trojan-Spy.Win32.VBStat.h" Virus! Action Taken: No Action Taken.
File C:\WINDOWS\system32\pwluvkoi.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\qehpftsn.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\qmikfuhk.dll infected by "Trojan-Spy.Win32.VBStat.h" Virus! Action Taken: No Action Taken.
File C:\WINDOWS\system32\qufdxpvl.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\qvfamixv.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\ragywgqj.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\rcxqtcqu.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\rfrstexr.dll infected by "Trojan-Spy.Win32.VBStat.h" Virus! Action Taken: No Action Taken.
File C:\WINDOWS\system32\rjdhwfst.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\rvaqbnab.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\sbwjontd.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\sdkbbmhl.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\senqqdax.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\setup_70405.exe infected by "Exe.Corrupted" Virus! Action Taken: No Action Taken.
File C:\WINDOWS\system32\sfpkiewl.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\shmpliod.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\svqnqlvu.dll infected by "Trojan-Spy.Win32.VBStat.h" Virus! Action Taken: No Action Taken.
File C:\WINDOWS\system32\tcjduabb.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\texwjiof.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\tjechhfi.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\twwcapba.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\unsvchosts.exe tagged as "not-a-virus:RiskTool.Win32.Starter.a". Action Taken: No Action Taken.
File C:\WINDOWS\system32\uoyirlpk.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\ussoidie.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\vanrifva.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\vkaccvov.dll//PE_Patch.Morphine infected by "Packed.Win32.Klone.j" Virus! Action Taken: No Action Taken.
File C:\WINDOWS\system32\vlymcwpb.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\vwabkuqy.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\wojfxrjk.dll//PE_Patch.Morphine infected by "Packed.Win32.Klone.j" Virus! Action Taken: No Action Taken.
File C:\WINDOWS\system32\wxwlwdgj.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\xderkimw.dll infected by "Trojan-Spy.Win32.VBStat.h" Virus! Action Taken: No Action Taken.
File C:\WINDOWS\system32\xdgkdikd.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\xgbqjekv.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\xkjxhdei.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\xktvtxym.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\xldbpnmg.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\xnipecwh.dll infected by "Trojan-Spy.Win32.VBStat.h" Virus! Action Taken: No Action Taken.
File C:\WINDOWS\system32\xpkceivf.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\xwlwgbtd.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\ymehjvgm.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\WINDOWS\system32\yvabjowm.dll infected by "Trojan-Spy.Win32.VBStat.h" Virus! Action Taken: No Action Taken.
File C:\WINDOWS\system32\yximjpyp.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\DOCUME~1\Mirita\CONFIG~1\Temp\qwajbfok.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\DOCUME~1\Mirita\CONFIG~1\Temp\vtsdqegu.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.
File C:\DOCUME~1\Mirita\CONFIG~1\Temp\xuedcjcd.exe tagged as "not-a-virus:AdWare.Win32.Agent.at". Action Taken: No Action Taken.

Bueno Realiza lo Siguiente:

Aplica el Mismo Metodo que el Anterior pero Ahora Elimina los Siguientes:

• C:\WINDOWS\system32\cchcjlty.exe
• C:\WINDOWS\system32\ccrjrivb.dll
• C:\WINDOWS\system32\chbuwhnd.exe
• C:\WINDOWS\system32\ckcxbltt.dll
• C:\WINDOWS\system32\cuntsyve.exe
• C:\WINDOWS\system32\cutrhokw.exe
• C:\WINDOWS\system32\dcamihvm.exe
• C:\WINDOWS\system32\demooofh.exe
• C:\WINDOWS\system32\dftnyasd.exe
• C:\WINDOWS\system32\dqjuohni.exe
• C:\WINDOWS\system32\dsngrrha.exe
• C:\WINDOWS\system32\dsqiteco.exe
• C:\WINDOWS\system32\emqincuj.exe
• C:\WINDOWS\system32\erokoblq.exe
• C:\WINDOWS\system32\esrglpnl.exe
• C:\WINDOWS\system32\eyqwukix.exe
• C:\WINDOWS\system32\fectjktj.dll
• C:\WINDOWS\system32\fflalchm.dll
• C:\WINDOWS\system32\fhwldpol.exe
• C:\WINDOWS\system32\fipjqbfb.exe
• C:\WINDOWS\system32\fokcgmnn.dll
• C:\WINDOWS\system32\fpulugxd.exe
• C:\WINDOWS\system32\fwckopty.exe
• C:\WINDOWS\system32\fxonwjib.exe
• C:\WINDOWS\system32\gbiewiky.dll
• C:\WINDOWS\system32\gmefydik.exe
• C:\WINDOWS\system32\gucswqfd.exe
• C:\WINDOWS\system32\gwpgqjeg.exe
• C:\WINDOWS\system32\gypahloy.exe
• C:\WINDOWS\system32\hgpaotlx.exe
• C:\WINDOWS\system32\host.exe
• C:\WINDOWS\system32\hqcunmno.exe
• C:\WINDOWS\system32\hqtufkbu.exe
• C:\WINDOWS\system32\hshreeqf.exe
• C:\WINDOWS\system32\hukfarwe.exe
• C:\WINDOWS\system32\huknnsxo.exe
• C:\WINDOWS\system32\ibcvudqj.exe
• C:\WINDOWS\system32\ibusgjko.exe
• C:\WINDOWS\system32\ifshfjkr.exe
• C:\WINDOWS\system32\igofnoyd.exe
• C:\WINDOWS\system32\iuchdjqr.exe
• C:\WINDOWS\system32\iwcwsykl.exe
• C:\WINDOWS\system32\jedmhgaf.exe
• C:\WINDOWS\system32\jkhasfnf.exe
• C:\WINDOWS\system32\jtedbeqk.exe
• C:\WINDOWS\system32\kplyuvpe.exe
• C:\WINDOWS\system32\kwymrmct.dll
• C:\WINDOWS\system32\ldcxptjv.exe
• C:\WINDOWS\system32\leitjskw.exe
• C:\WINDOWS\system32\lglwahfp.exe
• C:\WINDOWS\system32\lrjxkaue.exe
• C:\WINDOWS\system32\mfjajbvt.exe
• C:\WINDOWS\system32\mhcticte.exe
• C:\WINDOWS\system32\mlfcvrcn.exe
• C:\WINDOWS\system32\nbisldsf.exe
• C:\WINDOWS\system32\nhifsdod.exe
• C:\WINDOWS\system32\nhpypugb.exe
• C:\WINDOWS\system32\nnjkldsn.exe
• C:\WINDOWS\system32\npnjumiq.exe
• C:\WINDOWS\system32\nqfrnnft.dll
• C:\WINDOWS\system32\ocxtowyw.dll
• C:\WINDOWS\system32\paemnqmu.exe
• C:\WINDOWS\system32\pfuotmov.exe
• C:\WINDOWS\system32\pidrxsln.exe
• C:\WINDOWS\system32\pkgdpgbm.exe
• C:\WINDOWS\system32\plfoddgj.exe

Ejecutas Nuevamente el Ccleaner

• Descarga la herramienta ComboFix.exe y guárdala en el escritorio de Win.
• Hace doble-click en el archivo combofix.exe y seguí los avisos.
• Cuando termine este generara un reporte que tendrías que pegar en este mismo mensaje.
• Nota* Puede que algunos Antivirus como Panda detecten un falso positivo en ComboFix pero no hay que preocuparse por esto.

Saludos

hola

pasé el programa combo, pero se me apagó de nuevo. Luego al encenderse generó un reporte, pero ni pude pegarlo aquí (es larguííisimo), pq se apagó y adiós. Me está pasando con estos programas de scan (aunq tb pasa con el Fifa, o el Convert, p.ej). q hago?? Otra cosa, siempre q doy a reiniciar el ordenador, ya no me deja, ahora sólo se apaga. Besos

Hey!

He salido de modo a prueba de fallos, estoy en el normal, y ahora sí me ha dejado! Éste es el reporte, y cortito:


"Mirita" - 2007-07-11 22:11:06 - ComboFix 07-07-10.1 - Service Pack 2


((((((((((((((((((((((((( Files Created from 2007-06-11 to 2007-07-11 )))))))))))))))))))))))))))))))


2007-07-11 21:41 51,200 --a------ C:\WINDOWS\nircmd.exe
2007-07-11 17:49 <DIR> d----c--- C:\Archivos de programa\FileASSASSIN
2007-07-11 16:40 <DIR> d-a------ C:\WINDOWS\zts2.exe
2007-07-11 16:40 <DIR> d-a------ C:\WINDOWS\system32\vcmgcd32.dll
2007-07-11 16:40 <DIR> d-a------ C:\WINDOWS\system32\iifgfgf.dll
2007-07-11 16:40 <DIR> d-a------ C:\WINDOWS\rundll16.exe
2007-07-11 16:40 <DIR> d-a------ C:\WINDOWS\rundl132.dll
2007-07-11 16:40 <DIR> d-a------ C:\WINDOWS\logo1_.exe
2007-07-11 16:36 152,064 --a------ C:\WINDOWS\R.COM
2007-07-11 16:36 141,312 --a------ C:\WINDOWS\system32\T.COM
2007-07-08 12:56 <DIR> d-------- C:\WINDOWS\system32\ActiveScan
2007-07-08 12:31 <DIR> d-------- C:\DOCUME~1\Mirita\DoctorWeb
2007-07-08 12:26 <DIR> d--hs---- C:\WINDOWS\CSC
2007-07-07 11:30 <DIR> d----c--- C:\Archivos de programa\Skype
2007-07-07 11:30 <DIR> d-------- C:\DOCUME~1\Mirita\DATOSD~1\Skype
2007-07-07 11:30 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\DATOSD~1\Skype
2007-07-07 11:30 <DIR> d-------- C:\Archivos de programa\Archivos comunes\Skype
2007-07-06 21:41 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\DATOSD~1\Kaspersky Lab


(((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))) ))

2007-07-11 20:14:03 61,746 ----a-w C:\WINDOWS\system32\perfc00A.dat
2007-07-11 20:14:03 383,650 ----a-w C:\WINDOWS\system32\perfh00A.dat
2007-07-11 08:42:05 -------- d-----w C:\DOCUME~1\Mirita\DATOSD~1\Vso
2007-07-01 14:42:17 -------- d-----w C:\DOCUME~1\Mirita\DATOSD~1\Image Zone Express
2007-06-26 20:00:00 664 ----a-w C:\WINDOWS\system32\d3d9caps.dat
2007-06-19 18:35:51 -------- d--h--w C:\Archivos de programa\InstallShield Installation Information
2007-05-16 15:12:01 683,520 ----a-w C:\WINDOWS\system32\inetcomm.dll
2007-04-28 14:38:26 3,686 -c--a-w C:\WINDOWS\mozver.dat
2007-04-25 14:22:37 144,896 ----a-w C:\WINDOWS\system32\schannel.dll
2007-04-18 16:14:22 2,854,400 ----a-w C:\WINDOWS\system32\msi.dll
2007-04-16 20:47:36 33,624 ----a-w C:\WINDOWS\system32\wups.dll
2007-04-16 20:45:54 1,710,936 ----a-w C:\WINDOWS\system32\wuaueng.dll
2007-04-16 20:45:48 549,720 ----a-w C:\WINDOWS\system32\wuapi.dll
2007-04-16 20:45:42 325,976 ----a-w C:\WINDOWS\system32\wucltui.dll
2007-04-16 20:45:36 203,096 ----a-w C:\WINDOWS\system32\wuweb.dll
2007-04-16 20:45:28 92,504 ----a-w C:\WINDOWS\system32\cdm.dll
2007-04-16 20:45:20 53,080 ----a-w C:\WINDOWS\system32\wuauclt.exe
2007-04-16 20:45:20 43,352 ----a-w C:\WINDOWS\system32\wups2.dll
2007-04-13 17:58:26 614,191 ----a-w C:\WINDOWS\system32\RegistryCleanerSetup.exe
2007-03-07 18:29:33 282,212 --sha-w C:\WINDOWS\system32\pmkhf.dll.vir


((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))


*Note* empty entries & legit default entries are not shown

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{02478D38-C3F9-4EFB-9B51-7695ECA05670}]
2006-06-07 12:09 399352 --a------ C:\Archivos de programa\Yahoo!\Companion\Installs\cpn\yt.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
2001-04-16 16:39 37808 --------- C:\Archivos de programa\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{287DACE2-2280-4B71-AE16-2DD4BB9A3D6C}]

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{6BF10B5C-7379-4AC4-8123-E5923747BAA6}]

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
2007-03-14 03:43 501400 --a------ C:\Archivos de programa\Java\jre1.6.0_01\bin\ssv.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{7E853D72-626A-48EC-A868-BA8D5E23E045}]

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
2006-07-07 13:29 324416 --a------ C:\Archivos de programa\Archivos comunes\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
2006-08-09 17:53 2042944 -ra------ c:\archivos de programa\google\googletoolbar2.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
2007-05-25 12:09 325048 --a------ C:\Archivos de programa\Google\GoogleToolbarNotifier\2.0.301.7164 \swg.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{B7709139-9F7B-4337-8EAB-A89610187A2d}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Run]
"SoundMan"="SOUNDMAN.EXE" [2004-05-14 09:47 C:\WINDOWS\SOUNDMAN.EXE]
"ATIPTA"="C:\Archivos de programa\ATI Technologies\ATI Control Panel\atiptaxx.exe" [2004-08-25 12:52]
"SunJavaUpdateSched"="C:\Archivos de programa\Java\jre1.6.0_01\bin\jusched.exe" [2007-03-14 03:43]
"NeroFilterCheck"="C:\Archivos de programa\Archivos comunes\Ahead\Lib\NeroCheck.exe" [2006-01-12 16:40]
"RemoteControl"="C:\Archivos de programa\CyberLink\PowerDVD\PDVDServ.exe" [2005-01-12 03:01]
"HP Software Update"="C:\Archivos de programa\HP\HP Software Update\HPWuSchd2.exe" [2005-05-12 00:12]
"0123456789012345678901234567890123456789012345678 90123456789012345678901234567890123456789012345678 90123456789012345678901234567890123456789012345678 90123456789012345678901234567890123456789012345678 90123456789012345678901234567890123456789012345678 912345678"="C:\Archivos de programa\user32.exe" []

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Curre ntVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-19 15:42]
"MS Dynamic Host Configuration Protocol"="MSDHCP32.exe" []
"msnmsgr"="C:\Archivos de programa\MSN Messenger\msnmsgr.exe" [2007-01-19 13:55]
"swg"="C:\Archivos de programa\Google\GoogleToolbarNotifier\GoogleToolba rNotifier.exe" [2007-05-25 12:09]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="C:\Archivos de programa\Archivos comunes\Ahead\Lib\NMBgMonitor.exe" [2006-07-31 11:45]

[HKEY_USERS\.default\software\microsoft\windows\cur rentversion\run]
"MS Dynamic Host Configuration Protocol"=MSDHCP32.exe


Contents of the 'Scheduled Tasks' folder
2007-04-27 12:00:00 C:\WINDOWS\tasks\At1.job
2007-04-05 20:02:23 C:\WINDOWS\tasks\At10.job
2007-06-05 12:00:00 C:\WINDOWS\tasks\At11.job
2007-02-05 18:36:43 C:\WINDOWS\tasks\At12.job
2007-01-27 15:44:50 C:\WINDOWS\tasks\At2.job
2007-05-27 18:00:00 C:\WINDOWS\tasks\At3.job
2007-06-27 15:00:00 C:\WINDOWS\tasks\At4.job
2007-05-27 18:00:00 C:\WINDOWS\tasks\At5.job
2007-01-27 15:44:50 C:\WINDOWS\tasks\At6.job
2007-06-05 15:00:00 C:\WINDOWS\tasks\At7.job
2007-06-05 18:00:00 C:\WINDOWS\tasks\At8.job
2007-06-05 18:00:00 C:\WINDOWS\tasks\At9.job

************************************************** ************************

catchme 0.3.915 W2K/XP/Vista - rootkit detector by Gmer, http://www.gmer.net
Rootkit scan 2007-07-11 22:13:53
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

************************************************** ************************

Completion time: 2007-07-11 22:14:38
C:\ComboFix-quarantined-files.txt ... 2007-07-11 22:14
C:\ComboFix2.txt ... 2007-07-11 21:55

--- E O F ---

Bueno miryabel

A ver la Infeccion que Muestra Mwav.exe en verdad es Grande,

el ComboFix.exe no mostro Nada,

Bueno en realidad la Infeccion es grande, realiza lo siguiente:

Realiza un Nuevo escan con el Mwav.exe todas las infecciones que Muestre en la Carpeta System32 las eliminas que van a ser Muchas.

Entonces posterior a la eliminacion de los archivos ifectados quiza el sistema Operativo trabaje con errores y dificulta. porque la Infeccion es Grande. y quiza haya modificado algo en el registro Tambien.

Por ello Mi recomendacion, que a pocos se les da ya que es la Ultima y la que todos evitan, es Directamente Formatear

En verdad en este Caso es Mejor hacerlo.

Saludos. un Placer