QUOTE(master_slave @ Jul 14 2008, 09:35 PM)
Empieza haciendo esto:En Este Orden:Actualiza tu sistema,
Aqui (Si no puedes Omite este paso)Borra todas las cookies y el registro con
CCleaner:
Vete a
Panel de Control-->
Java y elimina todos los archivos temporales. (Si utilizas JAVA)
Borrar archivos temporales--> Desde Inicio, Ejecutar, escribe
%TEMP%, pulsa Enter y elimina todo el contenido.
Pasale el
Avg-antispyware.
(Actualizalo, y al acabar el Scaneo elije la opcion eliminar, despues guarda el report y lo pegas)Ademas, haz un
Scan on LinePega un nuevo
Log del Hijackthis, mas los
Reports de Avg-Antispyware y el Scan on Line.
Un Saludo
ACA ESTA MI LOG:
---------------------------------------------------------
AVG Anti-Spyware - Informe del análisis
---------------------------------------------------------
+ Creado en: 01:36:50 p.m. 15/07/2008
+ Resultado del análisis:
C:\Users\Quepons\AppData\Local\Ares\My Shared Folder\luis miguel - complices [2008] [www todocvcd com] por gamolama_rar.vir/Luis.scr -> Backdoor.ControlTotal.aj : No se realizó ninguna acción.
:mozilla.61:C:\Users\Quepons\AppData\Roaming\Mozilla\Firefox\Profiles\vq92npu3.default\cookies.txt -> TrackingCookie.Webtrends : No se realizó ninguna acción.
:mozilla.86:C:\Users\Juan Manuel\AppData\Roaming\Mozilla\Firefox\Profiles\qh8gxroo.default\cookies.txt -> TrackingCookie.Webtrends : No se realizó ninguna acción.
C:\Users\Invitado\AppData\Roaming\Microsoft\Windows\Cookies\Low\invitado[arroba]m.webtrends[2].txt -> TrackingCookie.Webtrends : No se realizó ninguna acción.
C:\Users\Juan Manuel\AppData\Roaming\Microsoft\Windows\Cookies\Low\juan_manuel[arroba]m.webtrends[1].txt -> TrackingCookie.Webtrends : No se realizó ninguna acción.
C:\Users\Quepons\AppData\Roaming\Microsoft\Windows\Cookies\Low\quepons[arroba]m.webtrends[2].txt -> TrackingCookie.Webtrends : No se realizó ninguna acción.
::Fin del informe
----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
__________________________________________________
ewido anti-spyware online scanner
http://www.ewido.net__________________________________________________
Name: TrackingCookie.Netflame
Path: :mozilla.6:C:\Users\Juan Manuel.Quepons1\AppData\Roaming\Mozilla\Firefox\Profiles\oz9m3l2k.default\cookies.txt
Risk: Medium
Name: TrackingCookie.Netflame
Path: :mozilla.8:C:\Users\Juan Manuel.Quepons1\AppData\Roaming\Mozilla\Firefox\Profiles\oz9m3l2k.default\cookies.txt
Risk: Medium
Name: TrackingCookie.Webtrends
Path: :mozilla.42:C:\Users\Juan Manuel.Quepons1\AppData\Roaming\Mozilla\Firefox\Profiles\oz9m3l2k.default\cookies.txt
Risk: Medium
Name: TrackingCookie.2o7
Path: :mozilla.52:C:\Users\Juan Manuel.Quepons1\AppData\Roaming\Mozilla\Firefox\Profiles\oz9m3l2k.default\cookies.txt
Risk: Medium
Name: TrackingCookie.2o7
Path: :mozilla.95:C:\Users\Juan Manuel.Quepons1\AppData\Roaming\Mozilla\Firefox\Profiles\oz9m3l2k.default\cookies.txt
Risk: Medium
Name: TrackingCookie.Googleadservices
Path: :mozilla.98:C:\Users\Juan Manuel.Quepons1\AppData\Roaming\Mozilla\Firefox\Profiles\oz9m3l2k.default\cookies.txt
Risk: Medium
------------------------------------------------------------------------------------------------------------------------
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 08:20:33 p.m., on 08/04/2008
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Normal
Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\System32\igfxtray.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\Windows\system32\igfxsrvc.exe
C:\Program Files\uTorrent\uTorrent.exe
C:\Windows\System32\mobsync.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Internet Explorer\IEUser.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Prodigy Antivirus\Prodigy Antivirus\Apvxdwin.exe
c:\program files\prodigy antivirus\prodigy antivirus\WebProxy.exe
C:\Windows\system32\wuauclt.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Ares\Ares.exe
C:\Windows\system32\Macromed\Flash\FlashUtil9e.exe
C:\Program Files\WinRAR\WinRAR.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\Windows\system32\SearchFilterHost.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page =
http://go.microsoft.com/fwlink/?LinkId=54896R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
http://go.microsoft.com/fwlink/?LinkId=69157R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
http://go.microsoft.com/fwlink/?LinkId=54896R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
http://go.microsoft.com/fwlink/?LinkId=54896R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
http://go.microsoft.com/fwlink/?LinkId=69157R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Aplicación auxiliar de inicio de sesión - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O4 - HKLM\..\Run: [MSConfig] "C:\Windows\system32\msconfig.exe" /auto
O4 - HKLM\..\Run: [APVXDWIN] "C:\Program Files\Prodigy Antivirus\Prodigy Antivirus\APVXDWIN.EXE" /s
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
O4 - HKCU\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [ares] "C:\Program Files\Ares\Ares.exe" -h
O4 - HKCU\..\Run: [BitTorrent] "C:\Program Files\BitTorrent\bittorrent.exe" --force_start_minimized
O4 - HKCU\..\Run: [MSServer] rundll32.exe C:\Users\JUANMA~1.QUE\AppData\Local\Temp\tuvVPjjK.dll,#1
O4 - HKCU\..\Run: [cmds] rundll32.exe C:\Users\JUANMA~1.QUE\AppData\Local\Temp\tuvWpOFv.dll,c
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICIO LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICIO LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'Servicio de red')
O4 - Startup: .protected
O4 - Global Startup: .protected
O9 - Extra button: Agregar entrada - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Agregar entrada en Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O13 - Gopher Prefix:
O16 - DPF: {67A5F8DC-1A4B-4D66-9F24-A704AD929EEE} (System Requirements Lab) -
http://www.systemrequirementslab.com/sysreqlab2.cabO16 - DPF: {CF40ACC5-E1BB-4AFF-AC72-04C2F616BCA7} (get_atlcom Class) -
http://www.adobe.com/products/acrobat/nos/gp.cabO16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) -
http://fpdownload2.macromedia.com/get/shoc...ash/swflash.cabO20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: Ares Chatroom server (AresChatServer) - Ares Development Group - C:\Program Files\Ares\chatServer.exe
O23 - Service: Panda Software Controller - Panda Software International - C:\Program Files\Prodigy Antivirus\Prodigy Antivirus\PsCtrls.exe
O23 - Service: Panda anti-virus service (PAVSRV) - Panda Software International - C:\Program Files\Prodigy Antivirus\Prodigy Antivirus\pavsrvx86.exe
O23 - Service: Panda IManager Service (PSIMSVC) - Panda Software International - C:\Program Files\Prodigy Antivirus\Prodigy Antivirus\PsImSvc.exe
O23 - Service: Panda PSK service (PskSvcRetail) - Panda Software International - C:\Program Files\Prodigy Antivirus\Prodigy Antivirus\PskSvc.exe
O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe
--
End of file - 5805 bytes
2 parte de los errores de scripts en I.E.
Jul 15 2008, 02:32 AM
