ANALYSIS: 2008-08-22 15:51:20
PROTECTIONS: 2
MALWARE: 24
SUSPECTS: 4
;***********************************************************************************************************************************************************************************
PROTECTIONS
Description Version Active Updated
;===================================================================================================================================================================================
Windows Defender 1.1.3109.0 No No
Norton Antivirus Internet Security 2007 14.1.3 No No
;===================================================================================================================================================================================
MALWARE
Id Description Type Active Severity Disinfectable Disinfected Location
;===================================================================================================================================================================================
00139060 Cookie/Casalemedia TrackingCookie No 0 Yes No C:\Users\Juaancho\AppData\Roaming\Microsoft\Windows\Cookies\Low\juaancho@casalemedia[1].txt
00139061 Cookie/Doubleclick TrackingCookie No 0 Yes No C:\Users\Juaancho\AppData\Roaming\Microsoft\Windows\Cookies\Low\juaancho@doubleclick[1].txt
00139061 Cookie/Doubleclick TrackingCookie No 0 Yes No C:\Users\Juaancho\AppData\Roaming\Microsoft\Windows\Cookies\juaancho@doubleclick[1].txt
00139064 Cookie/Atlas DMT TrackingCookie No 0 Yes No C:\Users\Juaancho\AppData\Roaming\Microsoft\Windows\Cookies\Low\juaancho@atdmt[2].txt
00139064 Cookie/Atlas DMT TrackingCookie No 0 Yes No C:\Users\Juaancho\AppData\Roaming\Microsoft\Windows\Cookies\juaancho@atdmt[2].txt
00145393 Cookie/Tradedoubler TrackingCookie No 0 Yes No C:\Users\Juaancho\AppData\Roaming\Microsoft\Windows\Cookies\Low\juaancho@tradedoubler[1].txt
00145457 Cookie/FastClick TrackingCookie No 0 Yes No C:\Users\Juaancho\AppData\Roaming\Microsoft\Windows\Cookies\Low\juaancho@fastclick[2].txt
00145731 Cookie/Tribalfusion TrackingCookie No 0 Yes No C:\Users\Juaancho\AppData\Roaming\Microsoft\Windows\Cookies\Low\juaancho@tribalfusion[2].txt
00167753 Cookie/Statcounter TrackingCookie No 0 Yes No C:\Users\Juaancho\AppData\Roaming\Microsoft\Windows\Cookies\Low\juaancho@statcounter[1].txt
00167759 Cookie/Sextracker TrackingCookie No 0 Yes No C:\Users\Juaancho\AppData\Roaming\Microsoft\Windows\Cookies\Low\
00168056 Cookie/YieldManager TrackingCookie No 0 Yes No C:\Users\Juaancho\AppData\Roaming\Microsoft\Windows\Cookies\
00168076 Cookie/BurstNet TrackingCookie No 0 Yes No C:\Users\Juaancho\AppData\Roaming\Microsoft\Windows\Cookies\Low\juaancho@burstnet[2].txt
00168090 Cookie/Serving-sys TrackingCookie No 0 Yes No C:\Users\Juaancho\AppData\Roaming\Microsoft\Windows\Cookies\Low\juaancho@serving-sys[2].txt
00168093 Cookie/Serving-sys TrackingCookie No 0 Yes No C:\Users\Juaancho\AppData\Roaming\Microsoft\Windows\Cookies\Low\
00168109 Cookie/Adtech TrackingCookie No 0 Yes No C:\Users\Juaancho\AppData\Roaming\Microsoft\Windows\Cookies\Low\juaancho@adtech[1].txt
00169190 Cookie/Advertising TrackingCookie No 0 Yes No C:\Users\Juaancho\AppData\Roaming\Microsoft\Windows\Cookies\Low\juaancho@advertising[2].txt
00169286 Cookie/Sextracker TrackingCookie No 0 Yes No C:\Users\Juaancho\AppData\Roaming\Microsoft\Windows\Cookies\Low\juaancho@sextracker[1].txt
00170304 Cookie/WebtrendsLive TrackingCookie No 0 Yes No C:\Users\Juaancho\AppData\Roaming\Microsoft\Windows\Cookies\Low\
00170495 Cookie/PointRoll TrackingCookie No 0 Yes No C:\Users\Juaancho\AppData\Roaming\Microsoft\Windows\Cookies\
00170554 Cookie/Overture TrackingCookie No 0 Yes No C:\Users\Juaancho\AppData\Roaming\Microsoft\Windows\Cookies\Low\juaancho@overture[1].txt
00180153 Cookie/Sextracker TrackingCookie No 0 Yes No C:\Users\Juaancho\AppData\Roaming\Microsoft\Windows\Cookies\Low\
00184846 Cookie/Adrevolver TrackingCookie No 0 Yes No C:\Users\Juaancho\AppData\Roaming\Microsoft\Windows\Cookies\Low\juaancho@adrevolver[1].txt
00191644 Cookie/adultfriendfinder TrackingCookie No 0 Yes No C:\Users\Juaancho\AppData\Roaming\Microsoft\Windows\Cookies\Low\juaancho@adultfriendfinder[2].txt
00262020 Cookie/Atwola TrackingCookie No 0 Yes No C:\Users\Juaancho\AppData\Roaming\Microsoft\Windows\Cookies\Low\juaancho@atwola[2].txt
03441810 Generic Trojan Virus/Trojan No 0 No No C:\Users\Juaancho\instaladores\Cambio_de_IP.rar[Cambio de IP\Cambio de IP.exe]
03456512 Generic Malware Virus/Trojan No 0 Yes No C:\Users\Juaancho\instaladores\dap81-es.exe
;===================================================================================================================================================================================
SUSPECTS
Sent Location �K�X�as5
;===================================================================================================================================================================================
No C:\Program Files\mIRC\mirc.exe �K�X�as5
No C:\Users\Juaancho\Documents\Mis archivos recibidos\patch.exe �K�X�as5
No D:\Nero 8 Lite\keymaker.exe �K�X�as5
No D:\Nero_8_Lite.rar[Nero 8 Lite\keymaker.exe] �K�X�as5
;===================================================================================================================================================================================
VULNERABILITIES
Id Severity Description �K�X�as5
;===================================================================================================================================================================================
;===================================================================================================================================================================================
Agradezco de antemano....
msc hotline sat Virus Research Engineer