Necesito ayuda... Virus!!!!! (SOLUCIONADO)

[radicalx]

buenas, antetodo les pongo lo que me reporto el NOD32
Scan Log
Version of virus signature database: 3244 (20080705)
Date: 06/07/2008 Time: 09:02:44 p.m.
Scanned disks, folders and files: C:\;E:\

Código: Seleccionar todo

C:\autorun.inf - Win32/PSW.OnLineGames.NMY trojan - cleaned by deleting - quarantined [1]
C:\pagefile.sys - error opening [4]
C:\Archivos de programa\Ahead\Nero\CDI\CDI_VCD.CFG » MIME - is OK (internal scanning not performed)
C:\Archivos de programa\Archivos comunes\Java\Update\Base Images\jre1.6.0.b105\core3.zip » ZIP » lib/deploy/ffjcext.zip » ZIP » {CAFEEFAC-0016-0000-0000-ABCDEFFEDCBA}/chrome.manifest » MIME - is OK (internal scanning not performed)
C:\Archivos de programa\Archivos comunes\Java\Update\Base Images\jre1.6.0.b105\core3.zip » ZIP » lib/resources.jar » ZIP » com/sun/org/apache/xerces/internal/impl/msg/XIncludeMessages.properties » MIME - is OK (internal scanning not performed)
C:\Archivos de programa\Archivos comunes\Java\Update\Base Images\jre1.6.0.b105\core3.zip » ZIP » lib/resources.jar » ZIP » com/sun/xml/internal/fastinfoset/resources/ResourceBundle.properties » MIME - is OK (internal scanning not performed)
C:\Archivos de programa\Archivos comunes\Java\Update\Base Images\jre1.6.0.b105\core3.zip » ZIP » lib/resources.jar » ZIP » javax/xml/bind/Messages.properties » MIME - is OK (internal scanning not performed)
C:\Archivos de programa\Archivos comunes\Mozilla Shared\chrome\browser.manifest » MIME - is OK (internal scanning not performed)
C:\Archivos de programa\Archivos comunes\Mozilla Shared\chrome\comm.manifest » MIME - is OK (internal scanning not performed)
C:\Archivos de programa\Archivos comunes\Mozilla Shared\chrome\reporter.manifest » MIME - is OK (internal scanning not performed)
C:\Archivos de programa\Archivos comunes\Mozilla Shared\chrome\toolkit.manifest » MIME - is OK (internal scanning not performed)
C:\Archivos de programa\Intel\InfInst\license.txt » MIME - is OK (internal scanning not performed)
C:\Archivos de programa\Java\jre1.6.0_05\lib\resources.jar » ZIP » com/sun/org/apache/xerces/internal/impl/msg/XIncludeMessages.properties » MIME - is OK (internal scanning not performed)
C:\Archivos de programa\Java\jre1.6.0_05\lib\resources.jar » ZIP » com/sun/xml/internal/fastinfoset/resources/ResourceBundle.properties » MIME - is OK (internal scanning not performed)
C:\Archivos de programa\Java\jre1.6.0_05\lib\resources.jar » ZIP » javax/xml/bind/Messages.properties » MIME - is OK (internal scanning not performed)
C:\Archivos de programa\Java\jre1.6.0_05\lib\deploy\ffjcext.zip » ZIP » {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA}/chrome.manifest » MIME - is OK (internal scanning not performed)
C:\Archivos de programa\Mozilla Firefox\chrome\browser.manifest » MIME - is OK (internal scanning not performed)
C:\Archivos de programa\Mozilla Firefox\chrome\comm.manifest » MIME - is OK (internal scanning not performed)
C:\Archivos de programa\Mozilla Firefox\chrome\es-ES.jar » ZIP » locale/es-ES/global/css.properties » MIME - is OK (internal scanning not performed)
C:\Archivos de programa\Mozilla Firefox\chrome\pippki.manifest » MIME - is OK (internal scanning not performed)
C:\Archivos de programa\Mozilla Firefox\chrome\toolkit.manifest » MIME - is OK (internal scanning not performed)
C:\Archivos de programa\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA}\chrome.manifest » MIME - is OK (internal scanning not performed)
C:\Documents and Settings\LocalService\NTUSER.DAT - error opening [4]
C:\Documents and Settings\LocalService\ntuser.dat.LOG - error opening [4]
C:\Documents and Settings\LocalService\Configuración local\Datos de programa\Microsoft\Windows\UsrClass.dat - error opening [4]
C:\Documents and Settings\LocalService\Configuración local\Datos de programa\Microsoft\Windows\UsrClass.dat.LOG - error opening [4]
C:\Documents and Settings\NetworkService\NTUSER.DAT - error opening [4]
C:\Documents and Settings\NetworkService\ntuser.dat.LOG - error opening [4]
C:\Documents and Settings\NetworkService\Configuración local\Datos de programa\Microsoft\Windows\UsrClass.dat - error opening [4]
C:\Documents and Settings\NetworkService\Configuración local\Datos de programa\Microsoft\Windows\UsrClass.dat.LOG - error opening [4]
C:\Documents and Settings\User\NTUSER.DAT - error opening [4]
C:\Documents and Settings\User\ntuser.dat.LOG - error opening [4]
C:\Documents and Settings\User\Configuración local\Datos de programa\Identities\{3A3A95CD-B037-4880-8805-5A19D6958B28}\Microsoft\Outlook Express\Bandeja de entrada.dbx » DBX - is OK (internal scanning not performed)
C:\Documents and Settings\User\Configuración local\Datos de programa\Microsoft\Windows\UsrClass.dat - error opening [4]
C:\Documents and Settings\User\Configuración local\Datos de programa\Microsoft\Windows\UsrClass.dat.LOG - error opening [4]
C:\Documents and Settings\User\Datos de programa\Mozilla\Firefox\Profiles\1o3wggto.default\extensions\{0784CD66-62FE-4cef-ABF4-F8ED9B654ACC}\chrome.manifest » MIME - is OK (internal scanning not performed)
C:\Documents and Settings\User\Mis documentos\Kaspersky Keys.zip » ZIP » Kaspersky Keys/Importante - Leer.txt - error - password-protected file
C:\Documents and Settings\User\Mis documentos\Kaspersky Keys.zip » ZIP » Kaspersky Keys/Kaspersky 5 - Personal/KAV5_2008-07-01_001C3F99.key - error - password-protected file
C:\Documents and Settings\User\Mis documentos\Kaspersky Keys.zip » ZIP » Kaspersky Keys/Kaspersky 5 - Personal/KAV5_2008-07-01_001C3FE8.key - error - password-protected file
C:\Documents and Settings\User\Mis documentos\Kaspersky Keys.zip » ZIP » Kaspersky Keys/Kaspersky 5 - Personal/KAV5_2008-07-01_001C417E.key - error - password-protected file
C:\Documents and Settings\User\Mis documentos\Kaspersky Keys.zip » ZIP » Kaspersky Keys/Kaspersky 5 - Personal/KAV5_2008-07-01_001C4193.key - error - password-protected file
C:\Documents and Settings\User\Mis documentos\Kaspersky Keys.zip » ZIP » Kaspersky Keys/Kaspersky 5 - Personal/KAV5_2008-07-01_001C432C.key - error - password-protected file
C:\Documents and Settings\User\Mis documentos\Kaspersky Keys.zip » ZIP » Kaspersky Keys/Kaspersky 5 - Personal/KAV5_2008-07-10_030A99C9.key - error - password-protected file
C:\Documents and Settings\User\Mis documentos\Kaspersky Keys.zip » ZIP » Kaspersky Keys/Kaspersky 5 - Personal/KAV5_2008-07-25_030AC597.key - error - password-protected file
C:\Documents and Settings\User\Mis documentos\Kaspersky Keys.zip » ZIP » Kaspersky Keys/Kaspersky 5 - Personal/KAV5_2008-07-28_00280D15.key - error - password-protected file
C:\Documents and Settings\User\Mis documentos\Kaspersky Keys.zip » ZIP » Kaspersky Keys/Kaspersky 5 - Personal/KAV5_2008-07-30_02956557.key - error - password-protected file
C:\Documents and Settings\User\Mis documentos\Kaspersky Keys.zip » ZIP » Kaspersky Keys/Kaspersky 6/03_2010.key - error - password-protected file
C:\Documents and Settings\User\Mis documentos\Kaspersky Keys.zip » ZIP » Kaspersky Keys/Kaspersky 6/KAV6_2008-06-28_012D5790.key - error - password-protected file
C:\Documents and Settings\User\Mis documentos\Kaspersky Keys.zip » ZIP » Kaspersky Keys/Kaspersky 6/KAV6_2008-06-30_00DB6970.key - error - password-protected file
C:\Documents and Settings\User\Mis documentos\Kaspersky Keys.zip » ZIP » Kaspersky Keys/Kaspersky 6/KAV6_2008-07-01_012E3EF1.key - error - password-protected file
C:\Documents and Settings\User\Mis documentos\Kaspersky Keys.zip » ZIP » Kaspersky Keys/Kaspersky 6/KAV6_2008-07-01_x3_0156CFE1.key - error - password-protected file
C:\Documents and Settings\User\Mis documentos\Kaspersky Keys.zip » ZIP » Kaspersky Keys/Kaspersky 6/KAV6_2008-07-07_00B196C6.key - error - password-protected file
C:\Documents and Settings\User\Mis documentos\Kaspersky Keys.zip » ZIP » Kaspersky Keys/Kaspersky 6/KAV6_2008-07-07_x5_017B653A.key - error - password-protected file
C:\Documents and Settings\User\Mis documentos\Kaspersky Keys.zip » ZIP » Kaspersky Keys/Kaspersky 6/KAV6_2008-07-09_01609E3C.key - error - password-protected file
C:\Documents and Settings\User\Mis documentos\Kaspersky Keys.zip » ZIP » Kaspersky Keys/Kaspersky 6/KAV6_2008-07-09_0160A47E.key - error - password-protected file
C:\Documents and Settings\User\Mis documentos\Kaspersky Keys.zip » ZIP » Kaspersky Keys/Kaspersky 6/KAV6_2008-07-11_0127DFE2.key - error - password-protected file
C:\Documents and Settings\User\Mis documentos\Kaspersky Keys.zip » ZIP » Kaspersky Keys/Kaspersky 6/KAV6_2008-07-12_0335916C.key - error - password-protected file
C:\Documents and Settings\User\Mis documentos\Kaspersky Keys.zip » ZIP » Kaspersky Keys/Kaspersky 6/KAV6_2008-07-15_0153759A.key - error - password-protected file
C:\Documents and Settings\User\Mis documentos\Kaspersky Keys.zip » ZIP » Kaspersky Keys/Kaspersky 6/KAV6_2008-07-19_011E55DE.key - error - password-protected file
C:\Documents and Settings\User\Mis documentos\Kaspersky Keys.zip » ZIP » Kaspersky Keys/Kaspersky 6/KAV6_2008-07-20_018E18D3.key - error - password-protected file
C:\Documents and Settings\User\Mis documentos\Kaspersky Keys.zip » ZIP » Kaspersky Keys/Kaspersky 6/KAV6_2008-07-22_02BBBD9F.key - error - password-protected file
C:\Documents and Settings\User\Mis documentos\Kaspersky Keys.zip » ZIP » Kaspersky Keys/Kaspersky 6/KAV6_2008-07-25_0123D1FD.key - error - password-protected file
C:\Documents and Settings\User\Mis documentos\Kaspersky Keys.zip » ZIP » Kaspersky Keys/Kaspersky 6/KAV6_2008-07-28_0113C8F8.key - error - password-protected file
C:\Documents and Settings\User\Mis documentos\Kaspersky Keys.zip » ZIP » Kaspersky Keys/Kaspersky 6/KAV6_2008-08-01_01444A43.key - error - password-protected file
C:\Documents and Settings\User\Mis documentos\Kaspersky Keys.zip » ZIP » Kaspersky Keys/Kaspersky 6/KAV6_2008-08-01_01444B30.key - error - password-protected file
C:\Documents and Settings\User\Mis documentos\Kaspersky Keys.zip » ZIP » Kaspersky Keys/Kaspersky 6/KAV6_2008-08-02_01460155.key - error - password-protected file
C:\Documents and Settings\User\Mis documentos\Kaspersky Keys.zip » ZIP » Kaspersky Keys/Kaspersky 6/KAV6_2008-08-05_00939300.key - error - password-protected file
C:\Documents and Settings\User\Mis documentos\Kaspersky Keys.zip » ZIP » Kaspersky Keys/Kaspersky 6/KAV6_2008-08-05_01937F7E.key - error - password-protected file
C:\Documents and Settings\User\Mis documentos\Kaspersky Keys.zip » ZIP » Kaspersky Keys/Kaspersky 6/KAV6_2008-08-09_01837D4B.key - error - password-protected file
C:\Documents and Settings\User\Mis documentos\Kaspersky Keys.zip » ZIP » Kaspersky Keys/Kaspersky 6/KAV6_2008-08-12_019CC235.key - error - password-protected file
C:\Documents and Settings\User\Mis documentos\Kaspersky Keys.zip » ZIP » Kaspersky Keys/Kaspersky 6/KAV6_2008-08-18_037A6507.key - error - password-protected file
C:\Documents and Settings\User\Mis documentos\Kaspersky Keys.zip » ZIP » Kaspersky Keys/Kaspersky 6/KAV6_2008-08-19_018E0FEB.key - error - password-protected file
C:\Documents and Settings\User\Mis documentos\Kaspersky Keys.zip » ZIP » Kaspersky Keys/Kaspersky 6/KAV6_2008-08-19_037B4109.key - error - password-protected file
C:\Documents and Settings\User\Mis documentos\Kaspersky Keys.zip » ZIP » Kaspersky Keys/Kaspersky 6/KAV6_2008-08-20_01313899.key - error - password-protected file
C:\Documents and Settings\User\Mis documentos\Kaspersky Keys.zip » ZIP » Kaspersky Keys/Kaspersky 6/KAV6_2008-08-20_01AC3962.key - error - password-protected file
C:\Documents and Settings\User\Mis documentos\Kaspersky Keys.zip » ZIP » Kaspersky Keys/Kaspersky 6/KAV6_2008-08-21_01937F76.key - error - password-protected file
C:\Documents and Settings\User\Mis documentos\Kaspersky Keys.zip » ZIP » Kaspersky Keys/Kaspersky 6/KAV6_2008-08-21_01937F7F.key - error - password-protected file
C:\Documents and Settings\User\Mis documentos\Kaspersky Keys.zip » ZIP » Kaspersky Keys/Kaspersky 6/KAV6_2008-08-21_01937F80.key - error - password-protected file
C:\Documents and Settings\User\Mis documentos\Kaspersky Keys.zip » ZIP » Kaspersky Keys/Kaspersky 6/KAV6_2008-08-21_01937F81.key - error - password-protected file
C:\Documents and Settings\User\Mis documentos\Kaspersky Keys.zip » ZIP » Kaspersky Keys/Kaspersky 6/KAV6_2008-08-21_01937F82.key - error - password-protected file
C:\Documents and Settings\User\Mis documentos\Kaspersky Keys.zip » ZIP » Kaspersky Keys/Kaspersky 6/KAV6_2008-08-21_01937F83.key - error - password-protected file
C:\Documents and Settings\User\Mis documentos\Kaspersky Keys.zip » ZIP » Kaspersky Keys/Kaspersky 6/KAV6_2008-08-26_00DFB03C.key - error - password-protected file
C:\Documents and Settings\User\Mis documentos\Kaspersky Keys.zip » ZIP » Kaspersky Keys/Kaspersky 6/KAV6_2008-08-29_0187A9E5.key - error - password-protected file
C:\Documents and Settings\User\Mis documentos\Kaspersky Keys.zip » ZIP » Kaspersky Keys/Kaspersky 6/KAV6_2008-09-04_00DE2FA2.key - error - password-protected file
C:\Documents and Settings\User\Mis documentos\Kaspersky Keys.zip » ZIP » Kaspersky Keys/Kaspersky 6/KAV6_2008-09-21_00DE6892.key - error - password-protected file
C:\Documents and Settings\User\Mis documentos\Kaspersky Keys.zip » ZIP » Kaspersky Keys/Kaspersky 6/KAV6_2008-10-10_x3_0014CA78.key - error - password-protected file
C:\Documents and Settings\User\Mis documentos\Kaspersky Keys.zip » ZIP » Kaspersky Keys/Kaspersky 6/KAV6_2008-11-12_0167AD47.key - error - password-protected file
C:\Documents and Settings\User\Mis documentos\Kaspersky Keys.zip » ZIP » Kaspersky Keys/Kaspersky 6/KAV6_2009-03-20_0083C774.key - error - password-protected file
C:\Documents and Settings\User\Mis documentos\Kaspersky Keys.zip » ZIP » Kaspersky Keys/Kaspersky 7/KAV7_2008-08-12_02C375D7.key - error - password-protected file
C:\Documents and Settings\User\Mis documentos\Kaspersky Keys.zip » ZIP » Kaspersky Keys/Kaspersky 7/KAV7_2008-10-25_02214FF2.key - error - password-protected file
C:\Documents and Settings\User\Mis documentos\Kaspersky Keys.zip » ZIP » Kaspersky Keys/Kaspersky 7/KAV7_2008-10-25_022150A3.key - error - password-protected file
C:\Documents and Settings\User\Mis documentos\Kaspersky Keys.zip » ZIP » Kaspersky Keys/Kaspersky 7 sin llaves.txt - error - password-protected file
C:\Documents and Settings\User\Mis documentos\Kaspersky Keys.zip » ZIP » Kaspersky Keys/Kaspersky 8 (2009)/KAV7_20090228_02FB4896.KEY - error - password-protected file
C:\Documents and Settings\User\Mis documentos\Kaspersky Keys.zip » ZIP » Kaspersky Keys/Kaspersky 8 (2009)/KAV7_20090228_02FB5078.KEY - error - password-protected file
C:\Documents and Settings\User\Mis documentos\Kaspersky Keys.zip » ZIP » Kaspersky Keys/Kaspersky 8 (2009)/KAV7_20090228_02FB6D84.KEY - error - password-protected file
C:\Documents and Settings\User\Mis documentos\Kaspersky Keys.zip » ZIP » Kaspersky Keys/Kaspersky 8 (2009)/KAV7_20090228_02FB7194.KEY - error - password-protected file
C:\Documents and Settings\User\Mis documentos\Kaspersky Keys.zip » ZIP » Kaspersky Keys/Kaspersky 8 (2009)/KAV7_20090228_02FBC845.KEY - error - password-protected file
C:\Documents and Settings\User\Mis documentos\Kaspersky Keys.zip » ZIP » Kaspersky Keys/Kaspersky 8 (2009)/KAV7_20090228_02FBFBD3.KEY - error - password-protected file
C:\Documents and Settings\User\Mis documentos\Kaspersky Keys.zip » ZIP » Kaspersky Keys/Kaspersky 8 (2009)/KAV7_20090228_02FBFC73.KEY - error - password-protected file
C:\Documents and Settings\User\Mis documentos\Kaspersky Keys.zip » ZIP » Kaspersky Keys/Kaspersky 8 (2009)/KAV7_20090228_02FC5360.KEY - error - password-protected file
C:\Documents and Settings\User\Mis documentos\Kaspersky Keys.zip » ZIP » Kaspersky Keys/Kaspersky 8 (2009)/KAV7_20090228_02FC5DA3.KEY - error - password-protected file
C:\Documents and Settings\User\Mis documentos\Kaspersky Keys.zip » ZIP » Kaspersky Keys/Kaspersky 8 (2009)/KAV7_20090228_02FC5F0F.KEY - error - password-protected file
C:\Documents and Settings\User\Mis documentos\Kaspersky Keys.zip » ZIP » Kaspersky Keys/Kaspersky 8 (2009)/KAV7_20090228_02FC5F1B.KEY - error - password-protected file
C:\Documents and Settings\User\Mis documentos\Kaspersky Keys.zip » ZIP » Kaspersky Keys/Kaspersky 8 (2009)/KAV7_20090402_02FF2985.KEY - incorrect CRC checksum, the file may be damaged
C:\Documents and Settings\User\Mis documentos\Kaspersky Keys.zip » ZIP » Kaspersky Keys/Kaspersky 8 (2009)/KAV7_20090415_025FEE1E.KEY - error - password-protected file
C:\Documents and Settings\User\Mis documentos\Kaspersky Keys.zip » ZIP » Kaspersky Keys/Kaspersky 8 (2009)/Seriales.txt - error - password-protected file
C:\Documents and Settings\User\Mis documentos\Kaspersky Keys.zip » ZIP » Kaspersky Keys/Kaspersky Internet Security 6/22-08-2008 Antihacker.key - error - password-protected file
C:\Documents and Settings\User\Mis documentos\Kaspersky Keys.zip » ZIP » Kaspersky Keys/Kaspersky Internet Security 6/KIS6_2008-06-28_00861D70.key - error - password-protected file
C:\Documents and Settings\User\Mis documentos\Kaspersky Keys.zip » ZIP » Kaspersky Keys/Kaspersky Internet Security 6/KIS6_2008-07-03_x3_011BC4F0.key - error - password-protected file
C:\Documents and Settings\User\Mis documentos\Kaspersky Keys.zip » ZIP » Kaspersky Keys/Kaspersky Internet Security 6/KIS6_2008-07-04_011E5941.key - error - password-protected file
C:\Documents and Settings\User\Mis documentos\Kaspersky Keys.zip » ZIP » Kaspersky Keys/Kaspersky Internet Security 6/KIS6_2008-07-05_01748EA5.key - error - password-protected file
C:\Documents and Settings\User\Mis documentos\Kaspersky Keys.zip » ZIP » Kaspersky Keys/Kaspersky Internet Security 6/KIS6_2008-07-17_012DF686.key - error - password-protected file
C:\Documents and Settings\User\Mis documentos\Kaspersky Keys.zip » ZIP » Kaspersky Keys/Kaspersky Internet Security 6/KIS6_2008-07-23_014E52D5.key - error - password-protected file
C:\Documents and Settings\User\Mis documentos\Kaspersky Keys.zip » ZIP » Kaspersky Keys/Kaspersky Internet Security 6/KIS6_2009-05-01_01788C19.key - error - password-protected file
C:\Documents and Settings\User\Mis documentos\Kaspersky Keys.zip » ZIP » Kaspersky Keys/Kaspersky Internet Security 7/KIS7_2009-01-03_03BD0D07.key - error - password-protected file
C:\Documents and Settings\User\Mis documentos\Kaspersky Keys.zip » ZIP » Kaspersky Keys/Kaspersky Internet Security 7/KIS7_2009-03-17_x10_02B780BF.key - error - password-protected file
C:\Documents and Settings\User\Mis documentos\Kaspersky Keys.zip » ZIP » Kaspersky Keys/Kaspersky Internet Security 7/KIS7_2009-05-02_02FD1D9F.key - error - password-protected file
C:\Documents and Settings\User\Mis documentos\Kaspersky Keys.zip » ZIP » Kaspersky Keys/Kaspersky Internet Security 8/2008-08-17_03DA7548.key - error - password-protected file
C:\Documents and Settings\User\Mis documentos\Kaspersky Keys.zip » ZIP » Kaspersky Keys/Kaspersky Internet Security 8/Seriales.txt - error - password-protected file
C:\Documents and Settings\User\Mis documentos\Kaspersky Keys.zip » ZIP » Kaspersky Keys/Kaspersky Personal/03_2010.key - error - password-protected file
C:\Documents and Settings\User\Mis documentos\Kaspersky Keys.zip » ZIP » Kaspersky Keys/Kaspersky Personal/06_2008.key - error - password-protected file
C:\Documents and Settings\User\Mis documentos\Kaspersky Keys.zip » ZIP » Kaspersky Keys/Kaspersky Personal/06_2008_J.key - error - password-protected file
C:\Documents and Settings\User\Mis documentos\Kaspersky Keys.zip » ZIP » Kaspersky Keys/Kaspersky Personal/09-03-2010.key - error - password-protected file
C:\Documents and Settings\User\Mis documentos\Kaspersky Keys.zip » ZIP » Kaspersky Keys/Kaspersky Personal/09_2008.key - error - password-protected file
C:\Documents and Settings\User\Mis documentos\Kaspersky Keys.zip » ZIP » Kaspersky Keys/Kaspersky Personal/Kapersky 2010.key - error - password-protected file
C:\Eclipse\EclipseEuropa\plugins\org.eclipse.datatools.sqltools.common.ui_1.0.0.200706181.jar » ZIP » org/eclipse/datatools/sqltools/common/ui/util/messages.properties » MIME - is OK (internal scanning not performed)
C:\Eclipse\EclipseEuropa\plugins\org.eclipse.datatools.sqltools.routineeditor_1.0.0.200706181.jar » ZIP » org/eclipse/datatools/sqltools/routineeditor/launching/messages.properties » MIME - is OK (internal scanning not performed)
C:\Eclipse\EclipseEuropa\plugins\org.eclipse.datatools.sqltools.routineeditor_1.0.0.200706181.jar » ZIP » org/eclipse/datatools/sqltools/routineeditor/ui/actions/messages.properties » MIME - is OK (internal scanning not performed)
C:\Eclipse\EclipseEuropa\plugins\org.eclipse.datatools.sqltools.sqleditor_1.0.0.200706181.jar » ZIP » org/eclipse/datatools/sqltools/sqleditor/internal/actions/messages.properties » MIME - is OK (internal scanning not performed)
C:\Eclipse\EclipseEuropa\plugins\org.eclipse.tomcat_4.1.230.v20070531\catalina.jar » ZIP » org/apache/catalina/startup/LocalStrings.properties » MIME - is OK (internal scanning not performed)
C:\Eclipse\EclipseEuropa\plugins\org.eclipse.tomcat_4.1.230.v20070531\catalina.jar » ZIP » org/apache/catalina/startup/LocalStrings_fr.properties » MIME - is OK (internal scanning not performed)
C:\Eclipse\EclipseEuropa\plugins\org.eclipse.tomcat_4.1.230.v20070531\catalina.jar » ZIP » org/apache/catalina/startup/LocalStrings_ja.properties » MIME - is OK (internal scanning not performed)
C:\Eclipse\EclipseEuropa\plugins\org.eclipse.tomcat_4.1.230.v20070531\naming-common.jar » ZIP » org/apache/naming/LocalStrings.properties » MIME - is OK (internal scanning not performed)
C:\Eclipse\EclipseEuropa\plugins\org.eclipse.tomcat_4.1.230.v20070531\naming-common.jar » ZIP » org/apache/naming/LocalStrings_fr.properties » MIME - is OK (internal scanning not performed)
C:\Eclipse\EclipseEuropa\plugins\org.eclipse.tomcat_4.1.230.v20070531\naming-common.jar » ZIP » org/apache/naming/LocalStrings_ja.properties » MIME - is OK (internal scanning not performed)
C:\Eclipse\EclipseEuropa\plugins\org.eclipse.tomcat_4.1.230.v20070531\tomcat-util.jar » ZIP » org/apache/tomcat/util/threads/res/LocalStrings.properties » MIME - is OK (internal scanning not performed)
C:\Eclipse\EclipseEuropa\plugins\org.eclipse.tomcat_4.1.230.v20070531\tomcat-util.jar » ZIP » org/apache/tomcat/util/threads/res/LocalStrings_ja.properties » MIME - is OK (internal scanning not performed)
C:\WINDOWS\$hf_mig$\KB873339\update\eula.txt » MIME - is OK (internal scanning not performed)
C:\WINDOWS\$hf_mig$\KB885835\update\eula.txt » MIME - is OK (internal scanning not performed)
C:\WINDOWS\$hf_mig$\KB885836\update\eula.txt » MIME - is OK (internal scanning not performed)
C:\WINDOWS\$hf_mig$\KB886185\update\eula.txt » MIME - is OK (internal scanning not performed)
C:\WINDOWS\$hf_mig$\KB887472\update\eula.txt » MIME - is OK (internal scanning not performed)
C:\WINDOWS\$hf_mig$\KB888302\update\eula.txt » MIME - is OK (internal scanning not performed)
C:\WINDOWS\$hf_mig$\KB890046\update\eula.txt » MIME - is OK (internal scanning not performed)
C:\WINDOWS\$hf_mig$\KB890859\update\eula.txt » MIME - is OK (internal scanning not performed)
C:\WINDOWS\$hf_mig$\KB891781\update\eula.txt » MIME - is OK (internal scanning not performed)
C:\WINDOWS\$hf_mig$\KB894391\update\eula.txt » MIME - is OK (internal scanning not performed)
C:\WINDOWS\$hf_mig$\KB896358\update\eula.txt » MIME - is OK (internal scanning not performed)
C:\WINDOWS\$hf_mig$\KB896428\update\eula.txt » MIME - is OK (internal scanning not performed)
C:\WINDOWS\$hf_mig$\KB898461\update\eula.txt » MIME - is OK (internal scanning not performed)
C:\WINDOWS\SoftwareDistribution\Download\23d05521fb1aec684bacd565b7fe17ea\update\eula.txt » MIME - is OK (internal scanning not performed)
C:\WINDOWS\SoftwareDistribution\Download\bcc2a48ebee444f647dd455abde790bd\BITF.tmp » CAB » MAINSP2ff.msp - archive damaged - the file could not be extracted.
C:\WINDOWS\SoftwareDistribution\Download\d18cf16bebd5e300bd873baac433fe74\update\eula.txt » MIME - is OK (internal scanning not performed)
C:\WINDOWS\SoftwareDistribution\EventCache\{DF43DAC5-D4A8-4533-A1DA-B34A4A30E6E4}.bin - error opening [4]
C:\WINDOWS\system32\atmlibg.dll - Win32/TrojanClicker.Delf.AGH trojan - error while cleaning (Access denied)
C:\WINDOWS\system32\atmlibg.dll.bak - Win32/TrojanClicker.Delf.AGH trojan - error while cleaning (Access denied)
C:\WINDOWS\system32\config\default - error opening [4]
C:\WINDOWS\system32\config\default.LOG - error opening [4]
C:\WINDOWS\system32\config\SAM - error opening [4]
C:\WINDOWS\system32\config\SAM.LOG - error opening [4]
C:\WINDOWS\system32\config\SECURITY - error opening [4]
C:\WINDOWS\system32\config\SECURITY.LOG - error opening [4]
C:\WINDOWS\system32\config\software - error opening [4]
C:\WINDOWS\system32\config\software.LOG - error opening [4]
C:\WINDOWS\system32\config\system - error opening [4]
C:\WINDOWS\system32\config\system.LOG - error opening [4]
C:\WINDOWS\system32\drivers\xdnscjvy.dat - error opening [4]
C:\WINDOWS\system32\drivers\xfdutmli.dat - error opening [4]
E:\autorun.inf - Win32/PSW.OnLineGames.NMY trojan - cleaned by deleting - quarantined [1]
Number of scanned objects: 382625
Number of threats found: 4
Number of cleaned objects: 2
Time of completion: 09:30:28 p.m.  Total scanning time: 1664 sec (00:27:44)
Notes:
[1] Object has been deleted as it only contained the virus body.
[4] Object cannot be opened. It may be in use by another application or operating system.

El problema es con el virus Win32/TrojanClicker.Delf.AGH, el cual he intentado borrarlo con el NOD32 y el Kaspersky y nada de nada...
Please necesito su ayuda en como eliminar ese virus que me esta molestando...
Por ahora no a manifestado ningun sintoma pero igual es un virus y tengo que borrarlo...

[msc hotline sat]

Pues envianos este fichero para analizar:

C:\WINDOWS\system32\atmlibg.dll

¿Como enviar las muestras a zonavirus? - Para ello recordar:
viewtopic.php?f=5&t=14253

y aparte, prueba el ELISTARA:

http://www.zonavirus.com/descargas/elistara.asp

Tras probarlo, reiniciar y postearnos el contenido de C:\infosat.txt para ver el resultado del proceso

saludos

ms, 7-07-2008

[radicalx]

Gracias ahora tan solo espero otra respuesta para resolver este problema.... :?

[msc hotline sat]

Y como que veo que has tenido contactos con el ONLINE GAMES, que es un virus que se propaga por pendrive, vacuna tu ordenador y tus pendrives con el ELIPEN:

http://www.zonavirus.com/descargas/elipen.asp

Tras probarlo, reiniciar y postearnos el contenido de C:\infosat.txt para ver el resultado del proceso

saludos

ms, 7-07-2008

[msc hotline sat]

Recibida la muestra solicitada, se detecta en ella una nueva variante del CONHOOK que pasamos a controlar con el ELISTARA de hoy 16.66

Y descarga en la misma carpeta el ELINOTIF.DLL , que utilizará el ELISTARA si le hiciera falta:

ELISTARA:
http://www.zonavirus.com/descargas/elistara.asp
ELINOTIF.DLL
http://www.zonavirus.com/descargas/elinotif.asp

Descargar los dos en una misma carpeta y probar el ELISTARA, tras lo cual reiniciar para terminar la eliminacion y luego postearnos el contenido de C:\infosat.txt para ver el resultado del proceso

saludos

ms, 8-07-2008

[radicalx]

Bueno, al comienzo detengo el virus, me dijo que lo reiniciara y que lo iba a borrar, no aparecio nada supongo que lo borro, igual de todas formas lo sigue detentando el NOD32 como si no lo hubiera borrado...

Tue Jul 08 12:55:14 2008

EliStartPage v16.66 (c)2008 S.G.H. / Satinfo S.L. (Actualizado el 8 de Julio del 2008)

--------------------------------------------------

Lista de Acciones (por Acción Directa):

C:\WINDOWS\ALCMTR.EXE --> Eliminado SpyRealtek

Entrada Eliminada [HKLM\...\Run] "Alcmtr"="ALCMTR.EXE"

No detectado SP3 de Windows XP

Eliminadas las Paginas de Inicio y de Busqueda del IE

Eliminados Ficheros Temporales del IE



Tue Jul 08 12:56:15 2008

EliStartPage v16.66 (c)2008 S.G.H. / Satinfo S.L. (Actualizado el 8 de Julio del 2008)

--------------------------------------------------

Lista de Acciones (por Exploración):

Explorando Unidad E:\



Nº Total de Directorios: 7

Nº Total de Ficheros: 6

Nº de Ficheros Analizados: 0

Nº de Ficheros Infectados: 0

Nº de Ficheros Limpiados: 0



Tue Jul 08 12:56:20 2008

EliStartPage v16.66 (c)2008 S.G.H. / Satinfo S.L. (Actualizado el 8 de Julio del 2008)

--------------------------------------------------

Lista de Acciones (por Exploración):

Explorando Unidad E:\



Nº Total de Directorios: 7

Nº Total de Ficheros: 6

Nº de Ficheros Analizados: 0

Nº de Ficheros Infectados: 0

Nº de Ficheros Limpiados: 0



Tue Jul 08 12:56:23 2008

EliStartPage v16.66 (c)2008 S.G.H. / Satinfo S.L. (Actualizado el 8 de Julio del 2008)

--------------------------------------------------

Lista de Acciones (por Exploración):

Explorando Unidad C:\

C:\Archivos de programa\Realtek\InstallShield\ALCMTR.EXE --> Eliminado, SpyRealtek



Nº Total de Directorios: 4603

Nº Total de Ficheros: 52169

Nº de Ficheros Analizados: 27442

Nº de Ficheros Infectados: 1

Nº de Ficheros Limpiados: 1

Exploración Detenida por el Usuario.



Tue Jul 08 13:16:08 2008

EliStartPage v16.66 (c)2008 S.G.H. / Satinfo S.L. (Actualizado el 8 de Julio del 2008)

--------------------------------------------------

Lista de Acciones (por Acción Directa):

No detectado SP3 de Windows XP

Eliminadas las Paginas de Inicio y de Busqueda del IE

Eliminados Ficheros Temporales del IE



Tue Jul 08 13:16:22 2008

EliStartPage v16.66 (c)2008 S.G.H. / Satinfo S.L. (Actualizado el 8 de Julio del 2008)

--------------------------------------------------

Lista de Acciones (por Exploración):

Explorando Unidad C:\

C:\WINDOWS\system32\ATMLIBG.DLL --> Acceso Denegado, DownLoader.ConHook3(notify) (Reiniciar para Completar la Limpieza)

C:\WINDOWS\system32\ATMLIBG.DLL.BAK --> Acceso Denegado, DownLoader.ConHook3(notify) (Reiniciar para Completar la Limpieza)



Nº Total de Directorios: 4706

Nº Total de Ficheros: 53569

Nº de Ficheros Analizados: 28279

Nº de Ficheros Infectados: 2

Nº de Ficheros Limpiados: 0



Tue Jul 08 13:29:00 2008

EliStartPage v16.66 (c)2008 S.G.H. / Satinfo S.L. (Actualizado el 8 de Julio del 2008)

--------------------------------------------------

Lista de Acciones (por Acción Directa):

No detectado SP3 de Windows XP







Eliminadas las Paginas de Inicio y de Busqueda del IE

Eliminados Ficheros Temporales del IE



Tue Jul 08 13:29:11 2008

EliStartPage v16.66 (c)2008 S.G.H. / Satinfo S.L. (Actualizado el 8 de Julio del 2008)

--------------------------------------------------

Lista de Acciones (por Exploración):

Explorando Unidad C:\



Nº Total de Directorios: 4707

Nº Total de Ficheros: 53576

Nº de Ficheros Analizados: 28277

Nº de Ficheros Infectados: 0

Nº de Ficheros Limpiados: 0

[lucl]

Pasa elistara en modo seguro a ver si asi te lo elimina saludos

[msc hotline sat]

Pues como bien dice lucl, arranca en modo seguro y prueba de nuevo el ELISTARA , lanzandolo desde la carpeta donde tambien tengas el ELINOTIF.DLL, y si detectara aun el CONHOOK y pidiera reiniciar, lo haces, pero esta vez simplemente reiniciadno en modo normal, pues sino no se ejecutaría la clave RUN ONCE programada al efecto para lanzar de nuevo el ELISTARA/ELINOTIF antes de arrancar windows, y asi poder eliminar el CONHOOK indicado.



y además, vemos : [quote]No detectado SP3 de Windows XP[/quote]

pues lanza un windowsupdate e instalalo !!! (algunos virus actuales entran a través de los agujeros de seguridad que tiene windows XP sin dicho parche)



saludos



ms, 9-08-2008

[radicalx]

ya lo elimine mediante la Consola de Recuperacion de Windows, chevere porque ya no aparece en el mensaje del NOD32, pero igual tengo dudas en cuanto al registro, pues aun veo que hay un registro que quiere conectarse con el, eso lo saque con el RegSeeker

[msc hotline sat]

Mejor no utilices lo que no aconsejamos. Vuelve a probar el ELISTARA y si ya no detecta nada, nos lo dices para dar el Tema por solucionado.



saludos



ms, 9-08-2008

[radicalx]

Disculpen por la demora pero este tiempo tuve praticas en el instituto y he estado ocupado

Bueno ya solucione el problema del virus, a no lo detecta el elistara, mas bien me detecto otro virus pero ya lo borro al toque

Aca el dejo el log de Elistara

Fri Jul 11 15:20:08 2008

EliStartPage v16.69 (c)2008 S.G.H. / Satinfo S.L. (Actualizado el 11 de Julio del 2008)

--------------------------------------------------

Lista de Acciones (por Acción Directa):

Eliminada Carpeta "%WinDir%\PeerNet"

No detectado SP3 de Windows XP

Eliminadas las Paginas de Inicio y de Busqueda del IE

Eliminados Ficheros Temporales del IE



Fri Jul 11 15:20:16 2008

EliStartPage v16.69 (c)2008 S.G.H. / Satinfo S.L. (Actualizado el 11 de Julio del 2008)

--------------------------------------------------

Lista de Acciones (por Exploración):

Explorando Unidad C:\

C:\Archivos de programa\Apache Software Foundation\Tomcat 5.5\webapps\tomcat-docs\printer\DEVELOPERS.HTML --> Eliminado, MalWare.Celular



Nº Total de Directorios: 4775

Nº Total de Ficheros: 53693

Nº de Ficheros Analizados: 28602

Nº de Ficheros Infectados: 1

Nº de Ficheros Limpiados: 1



Gracias por su ayuda...

[msc hotline sat]

Pues con la detección y eliminación, damos por solucionado el Tema y procedemos a cerrarlo.

Si nos necesita de nuevo, ya sabe donde estamos

saludos

ms, 12-07-2008