Dos virus en mi computadora y unos ficheros infectados

[bangbang323]

Aqui dejo el analize de KASPERSKY ONLINE:

jueves, 19 de junio de 2008 11:29:26

Sistema operativo: Microsoft Windows XP Home Edition, Service Pack 2 (Build 2600)

Kaspersky Online Scanner versión: 5.0.98.0

Ultima actualización: 19/06/2008

Registros en la base antivirus: 782820





Configuración del análisis

Analizar usando las siguientes bases standard

Analizar archivos verdadero

Analizar bases de correo verdadero



Objetivo a analizar Mi PC

A:\

C:\

D:\

E:\

G:\

H:\

I:\

J:\

K:\



Estadísticas

Número de objeros analizados 123301

Virus encontrados 2

Objetos infectados 7

Objetos sospechosos 0

Duración del análisis 01:58:00



Bombre del objeto infectado Nombre del virus Última acción

C:\Documents and Settings\All Users\Application Data\AOL\ACS\1.0\ph Object is locked saltado



C:\Documents and Settings\All Users\Application Data\AOL\ACS\1.0\variable Object is locked saltado



C:\Documents and Settings\All Users\Application Data\AOL\C_America Online 9.0\idb\malandro3231\MyDB.idx Object is locked saltado



C:\Documents and Settings\All Users\Application Data\AOL\C_America Online 9.0\idb\malandro3231\toolbar.lst Object is locked saltado



C:\Documents and Settings\All Users\Application Data\AOL\C_America Online 9.0\idb\SNMaster.idx Object is locked saltado



C:\Documents and Settings\All Users\Application Data\AOL\C_America Online 9.0\organize\CACHE\malandro3200 Object is locked saltado



C:\Documents and Settings\All Users\Application Data\AOL\C_America Online 9.0\organize\malandro3231 Object is locked saltado



C:\Documents and Settings\All Users\Application Data\AOL\C_America Online 9.0\organize\malandro3231.abi Object is locked saltado



C:\Documents and Settings\All Users\Application Data\AOL\C_America Online 9.0\organize\malandro3231.aby Object is locked saltado



C:\Documents and Settings\All Users\Application Data\AOL\TopSpeed\2.0\aolstderr.txt Object is locked saltado



C:\Documents and Settings\All Users\Application Data\AOL\TopSpeed\2.0\aolstdout.txt Object is locked saltado



C:\Documents and Settings\All Users\Application Data\AOL\TopSpeed\2.0\aoltsmon.lock Object is locked saltado



C:\Documents and Settings\All Users\Application Data\AOL\TopSpeed\2.0\cache.db Object is locked saltado



C:\Documents and Settings\All Users\Application Data\AOL\TopSpeed\2.0\server.lock Object is locked saltado



C:\Documents and Settings\All Users\Application Data\avg7\Log\emc.log Object is locked saltado



C:\Documents and Settings\All Users\Application Data\Grisoft\Avg7Data\avg7log.log Object is locked saltado



C:\Documents and Settings\All Users\Application Data\Grisoft\Avg7Data\avg7log.log.lck Object is locked saltado



C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat Object is locked saltado



C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat Object is locked saltado



C:\Documents and Settings\All Users\Application Data\Microsoft\Windows Defender\Support\MPLog-02242008-223709.log Object is locked saltado



C:\Documents and Settings\LocalService\Cookies\index.dat Object is locked saltado



C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked saltado



C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked saltado



C:\Documents and Settings\LocalService\Local Settings\History\History.IE5\index.dat Object is locked saltado



C:\Documents and Settings\LocalService\Local Settings\Temp\Cookies\index.dat Object is locked saltado



C:\Documents and Settings\LocalService\Local Settings\Temp\History\History.IE5\index.dat Object is locked saltado



C:\Documents and Settings\LocalService\Local Settings\Temp\Temporary Internet Files\Content.IE5\index.dat Object is locked saltado



C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked saltado



C:\Documents and Settings\LocalService\NTUSER.DAT Object is locked saltado



C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked saltado



C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked saltado



C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked saltado



C:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked saltado



C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked saltado



C:\Documents and Settings\Owner\Application Data\acccore\nss\cert8.db Object is locked saltado



C:\Documents and Settings\Owner\Application Data\acccore\nss\key3.db Object is locked saltado



C:\Documents and Settings\Owner\Application Data\AIMPro\Log\aimpro.exe_PL_Trace.txt Object is locked saltado



C:\Documents and Settings\Owner\Application Data\AIMPro\Log\apExtCmp.log Object is locked saltado



C:\Documents and Settings\Owner\Application Data\AOL\C_America Online 9.0\IDB\Apps.Lst Object is locked saltado



C:\Documents and Settings\Owner\Application Data\AOL\C_America Online 9.0\IDB\art.idx Object is locked saltado



C:\Documents and Settings\Owner\Application Data\AOL\C_America Online 9.0\IDB\sap.dat Object is locked saltado



C:\Documents and Settings\Owner\Application Data\AOL\C_America Online 9.0\IDB\spool.lst Object is locked saltado



C:\Documents and Settings\Owner\Application Data\AOL\C_America Online 9.0\IDB\sysnews.lst Object is locked saltado



C:\Documents and Settings\Owner\Cookies\index.dat Object is locked saltado



C:\Documents and Settings\Owner\Local Settings\Application Data\AOL\UserProfiles\All Users\cls\common.cls Object is locked saltado



C:\Documents and Settings\Owner\Local Settings\Application Data\Microsoft\Feeds Cache\index.dat Object is locked saltado



C:\Documents and Settings\Owner\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked saltado



C:\Documents and Settings\Owner\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked saltado



C:\Documents and Settings\Owner\Local Settings\History\History.IE5\index.dat Object is locked saltado



C:\Documents and Settings\Owner\Local Settings\History\History.IE5\MSHist012008061920080620\index.dat Object is locked saltado



C:\Documents and Settings\Owner\Local Settings\Temp\CMLS--2008-06-19--09-03-54.log Object is locked saltado



C:\Documents and Settings\Owner\Local Settings\Temp\trace.txt Object is locked saltado



C:\Documents and Settings\Owner\Local Settings\Temp\tricon-aol.txt Object is locked saltado



C:\Documents and Settings\Owner\Local Settings\Temp\~DF215.tmp Object is locked saltado



C:\Documents and Settings\Owner\Local Settings\Temp\~DF220.tmp Object is locked saltado



C:\Documents and Settings\Owner\Local Settings\Temp\~DF310B.tmp Object is locked saltado



C:\Documents and Settings\Owner\Local Settings\Temp\~DF3116.tmp Object is locked saltado



C:\Documents and Settings\Owner\Local Settings\Temporary Internet Files\AntiPhishing\B3BB5BBA-E7D5-40AB-A041-A5B1C0B26C8F.dat Object is locked saltado



C:\Documents and Settings\Owner\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked saltado



C:\Documents and Settings\Owner\ntuser.dat Object is locked saltado



C:\Documents and Settings\Owner\ntuser.dat.LOG Object is locked saltado



C:\Program Files\PeoplePC Accelerated\logs\output_Owner.log Object is locked saltado



C:\Program Files\PeoplePC Accelerated\temp\benchmark.dat Object is locked saltado



C:\Program Files\PeoplePC Accelerated\temp\codescache\0a\390a Object is locked saltado



C:\Program Files\PeoplePC Accelerated\temp\codescache\80\fc80 Object is locked saltado



C:\Program Files\PeoplePC Accelerated\temp\codescache\ab\5aab Object is locked saltado



C:\Program Files\PeoplePC Accelerated\temp\codescache\activeDomains Object is locked saltado



C:\Program Files\PeoplePC Accelerated\temp\codescache\c8\76c8 Object is locked saltado



C:\Program Files\PeoplePC Accelerated\temp\codescache\f9\eff9 Object is locked saltado



C:\Program Files\PeoplePC Accelerated\temp\codescache\nonactiveDomains Object is locked saltado



C:\Program Files\PeoplePC Accelerated\temp\http_cache\headers\_0000_1 Object is locked saltado



C:\Program Files\PeoplePC Accelerated\temp\http_cache\headers\_0000_2 Object is locked saltado



C:\Program Files\PeoplePC Accelerated\temp\http_cache\_0000_1 Object is locked saltado



C:\Program Files\PeoplePC Accelerated\temp\http_cache\_0000_2 Object is locked saltado



C:\System Volume Information\MountPointManagerRemoteDatabase Object is locked saltado



C:\System Volume Information\_restore{F2681A7D-91E5-401A-AC8B-015335799DC0}\RP114\A0004819.msi/Instal01.cab/_20824B1E2B0944308E86024D14BBAAEA Infectados: Email-Flooder.Win32.VB.bq saltado



C:\System Volume Information\_restore{F2681A7D-91E5-401A-AC8B-015335799DC0}\RP114\A0004819.msi/Instal01.cab Infectados: Email-Flooder.Win32.VB.bq saltado



C:\System Volume Information\_restore{F2681A7D-91E5-401A-AC8B-015335799DC0}\RP114\A0004819.msi Embedded: infectado - 2 saltado



C:\System Volume Information\_restore{F2681A7D-91E5-401A-AC8B-015335799DC0}\RP196\A0016233.EXE Infectados: Trojan-Downloader.Win32.IstBar.ry saltado



C:\System Volume Information\_restore{F2681A7D-91E5-401A-AC8B-015335799DC0}\RP201\change.log Object is locked saltado



C:\System Volume Information\_restore{F2681A7D-91E5-401A-AC8B-015335799DC0}\RP78\A0003128.msi/Instal01.cab/_20824B1E2B0944308E86024D14BBAAEA Infectados: Email-Flooder.Win32.VB.bq saltado



C:\System Volume Information\_restore{F2681A7D-91E5-401A-AC8B-015335799DC0}\RP78\A0003128.msi/Instal01.cab Infectados: Email-Flooder.Win32.VB.bq saltado



C:\System Volume Information\_restore{F2681A7D-91E5-401A-AC8B-015335799DC0}\RP78\A0003128.msi Embedded: infectado - 2 saltado



C:\WINDOWS\Debug\PASSWD.LOG Object is locked saltado



C:\WINDOWS\ModemLog_Lucent Win Modem.txt Object is locked saltado



C:\WINDOWS\SchedLgU.Txt Object is locked saltado



C:\WINDOWS\SoftwareDistribution\ReportingEvents.log Object is locked saltado



C:\WINDOWS\system32\config\AppEvent.Evt Object is locked saltado



C:\WINDOWS\system32\config\default Object is locked saltado



C:\WINDOWS\system32\config\default.LOG Object is locked saltado



C:\WINDOWS\system32\config\Internet.evt Object is locked saltado



C:\WINDOWS\system32\config\SAM Object is locked saltado



C:\WINDOWS\system32\config\SAM.LOG Object is locked saltado



C:\WINDOWS\system32\config\SecEvent.Evt Object is locked saltado



C:\WINDOWS\system32\config\SECURITY Object is locked saltado



C:\WINDOWS\system32\config\SECURITY.LOG Object is locked saltado



C:\WINDOWS\system32\config\software Object is locked saltado



C:\WINDOWS\system32\config\software.LOG Object is locked saltado



C:\WINDOWS\system32\config\SysEvent.Evt Object is locked saltado



C:\WINDOWS\system32\config\system Object is locked saltado



C:\WINDOWS\system32\config\system.LOG Object is locked saltado



C:\WINDOWS\system32\h323log.txt Object is locked saltado



C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked saltado



C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP Object is locked saltado



C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER Object is locked saltado



C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MAP Object is locked saltado



C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MAP Object is locked saltado



C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA Object is locked saltado



C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP Object is locked saltado



C:\WINDOWS\WindowsUpdate.log Object is locked saltado



D:\System Volume Information\_restore{F2681A7D-91E5-401A-AC8B-015335799DC0}\RP201\change.log Object is locked saltado



Análisis completado.

........................................................................................................

No puedo acceder a esos archivos,aun cuando marco la pestaña de enseñar ficheros y folders.

Una ayuda por fabor

[Claudia34]

Bueno en primer lugar descargate el service pack 3 en forma manual o mediante un windows update.



Saludos.

[Claudia34]

Si crees que pueden contener algun virus esos ficheros que tu dices, entonces debes enviarnoslo zonavirus@satinfo.es para que un grupo de experto los analicen e implementen su control (un antidoto) y eliminacion con las utilidades como elistara y/o elitrip que se van renovando casi diariamente.

Aqui te dejo el enlace para saber un poco el procedimiento de como enviarlos a los archivos:



https://foros.zonavirus.com/viewtopic.php?f=5&t=14253



Saludos.

[bangbang323]

Ya el kaspersky no me detecta lo que suponia o eran virus.



jueves, 19 de junio de 2008 23:23:44

Sistema operativo: Microsoft Windows XP Home Edition, Service Pack 2 (Build 2600)

Kaspersky Online Scanner versión: 5.0.98.0

Ultima actualización: 20/06/2008

Registros en la base antivirus: 782997





Configuración del análisis

Analizar usando las siguientes bases standard

Analizar archivos verdadero

Analizar bases de correo verdadero



Objetivo a analizar Mi PC

A:\

C:\

D:\

E:\

G:\

H:\

I:\

J:\

K:\



Estadísticas

Número de objeros analizados 106554

Virus encontrados 0

Objetos infectados 0

Objetos sospechosos 0

Duración del análisis 01:42:44



Bombre del objeto infectado Nombre del virus Última acción

C:\Documents and Settings\All Users\Application Data\AOL\TopSpeed\2.0\aolstderr.txt Object is locked saltado



C:\Documents and Settings\All Users\Application Data\AOL\TopSpeed\2.0\aolstdout.txt Object is locked saltado



C:\Documents and Settings\All Users\Application Data\AOL\TopSpeed\2.0\aoltsmon.lock Object is locked saltado



C:\Documents and Settings\All Users\Application Data\AOL\TopSpeed\2.0\cache.db Object is locked saltado



C:\Documents and Settings\All Users\Application Data\AOL\TopSpeed\2.0\server.lock Object is locked saltado



C:\Documents and Settings\All Users\Application Data\avg7\Log\emc.log Object is locked saltado



C:\Documents and Settings\All Users\Application Data\Grisoft\Avg7Data\avg7log.log Object is locked saltado



C:\Documents and Settings\All Users\Application Data\Grisoft\Avg7Data\avg7log.log.lck Object is locked saltado



C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat Object is locked saltado



C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat Object is locked saltado



C:\Documents and Settings\All Users\Application Data\Microsoft\Windows Defender\Support\MPLog-02242008-223709.log Object is locked saltado



C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked saltado



C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked saltado



C:\Documents and Settings\LocalService\Local Settings\Temp\Cookies\index.dat Object is locked saltado



C:\Documents and Settings\LocalService\Local Settings\Temp\History\History.IE5\index.dat Object is locked saltado



C:\Documents and Settings\LocalService\Local Settings\Temp\Temporary Internet Files\Content.IE5\index.dat Object is locked saltado



C:\Documents and Settings\LocalService\NTUSER.DAT Object is locked saltado



C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked saltado



C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked saltado



C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked saltado



C:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked saltado



C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked saltado



C:\Documents and Settings\Owner\Cookies\index.dat Object is locked saltado



C:\Documents and Settings\Owner\Local Settings\Application Data\Microsoft\Feeds Cache\index.dat Object is locked saltado



C:\Documents and Settings\Owner\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked saltado



C:\Documents and Settings\Owner\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked saltado



C:\Documents and Settings\Owner\Local Settings\History\History.IE5\index.dat Object is locked saltado



C:\Documents and Settings\Owner\Local Settings\History\History.IE5\MSHist012008061920080620\index.dat Object is locked saltado



C:\Documents and Settings\Owner\Local Settings\Temp\~DF743.tmp Object is locked saltado



C:\Documents and Settings\Owner\Local Settings\Temp\~DF74F.tmp Object is locked saltado



C:\Documents and Settings\Owner\Local Settings\Temporary Internet Files\AntiPhishing\B3BB5BBA-E7D5-40AB-A041-A5B1C0B26C8F.dat Object is locked saltado



C:\Documents and Settings\Owner\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked saltado



C:\Documents and Settings\Owner\ntuser.dat Object is locked saltado



C:\Documents and Settings\Owner\ntuser.dat.LOG Object is locked saltado



C:\Program Files\PeoplePC Accelerated\logs\output_Owner.log Object is locked saltado



C:\Program Files\PeoplePC Accelerated\temp\benchmark.dat Object is locked saltado



C:\Program Files\PeoplePC Accelerated\temp\codescache\20\fe20 Object is locked saltado



C:\Program Files\PeoplePC Accelerated\temp\codescache\29\6729 Object is locked saltado



C:\Program Files\PeoplePC Accelerated\temp\codescache\2e\a42e Object is locked saltado



C:\Program Files\PeoplePC Accelerated\temp\codescache\65\1165 Object is locked saltado



C:\Program Files\PeoplePC Accelerated\temp\codescache\ab\5aab Object is locked saltado



C:\Program Files\PeoplePC Accelerated\temp\codescache\activeDomains Object is locked saltado



C:\Program Files\PeoplePC Accelerated\temp\codescache\nonactiveDomains Object is locked saltado



C:\Program Files\PeoplePC Accelerated\temp\http_cache\headers\_0000_1 Object is locked saltado



C:\Program Files\PeoplePC Accelerated\temp\http_cache\headers\_0000_2 Object is locked saltado



C:\Program Files\PeoplePC Accelerated\temp\http_cache\_0000_1 Object is locked saltado



C:\Program Files\PeoplePC Accelerated\temp\http_cache\_0000_2 Object is locked saltado



C:\System Volume Information\MountPointManagerRemoteDatabase Object is locked saltado



C:\System Volume Information\_restore{F2681A7D-91E5-401A-AC8B-015335799DC0}\RP1\change.log Object is locked saltado



C:\WINDOWS\Debug\PASSWD.LOG Object is locked saltado



C:\WINDOWS\ModemLog_Lucent Win Modem.txt Object is locked saltado



C:\WINDOWS\SchedLgU.Txt Object is locked saltado



C:\WINDOWS\SoftwareDistribution\ReportingEvents.log Object is locked saltado



C:\WINDOWS\system32\config\AppEvent.Evt Object is locked saltado



C:\WINDOWS\system32\config\default Object is locked saltado



C:\WINDOWS\system32\config\default.LOG Object is locked saltado



C:\WINDOWS\system32\config\Internet.evt Object is locked saltado



C:\WINDOWS\system32\config\SAM Object is locked saltado



C:\WINDOWS\system32\config\SAM.LOG Object is locked saltado



C:\WINDOWS\system32\config\SecEvent.Evt Object is locked saltado



C:\WINDOWS\system32\config\SECURITY Object is locked saltado



C:\WINDOWS\system32\config\SECURITY.LOG Object is locked saltado



C:\WINDOWS\system32\config\software Object is locked saltado



C:\WINDOWS\system32\config\software.LOG Object is locked saltado



C:\WINDOWS\system32\config\SysEvent.Evt Object is locked saltado



C:\WINDOWS\system32\config\system Object is locked saltado



C:\WINDOWS\system32\config\system.LOG Object is locked saltado



C:\WINDOWS\system32\h323log.txt Object is locked saltado



C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked saltado



C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP Object is locked saltado



C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER Object is locked saltado



C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MAP Object is locked saltado



C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MAP Object is locked saltado



C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA Object is locked saltado



C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP Object is locked saltado



C:\WINDOWS\WindowsUpdate.log Object is locked saltado



Análisis completado.

................................................................................................................





por fabor den por cerrado este tema.

Gracias

[msc hotline sat]

Los ficheros que detectaba anteriormente estaba en el RESTORE, o sea que no estaban activos, solo corría el peligro de que restaurando el sistema a un punto anterior se restablecieran, lo cual se soluciona arrancando en modo segur0 y tras desactivar la restauracion de sistema, lanzar el antivirus que asi puede llegar a ellos y eliminarlos



Como que ya los ha eliminado, damos el Tema por solucionado y procedemos a cerrarlo



si nos necesita de nuevo, ya sabe donde estamos



saludos



ms, 20-06-2008