De nuevo el "doble acento" (SOLUCIONADO)

gccela · Mensaje por **gccela** » 09 May 2012, 00:29

Hola, que tal?? Antes de nada, un saludo a todos.

Quería comentaros que de repente me ha aparecido el famoso "doble acento". Mirando los abundantes posts anteriores con el mismo problema, he descargado el EliStarA, que he pasado primeramente en modo normal y posteriormente en modo seguro. Ha eliminado un troyano y varias entradas pero no se ha solucionado lo del doble acento. Y siguiendo el hilo de otro post anterior que decia: " Y si en el informe no se detectara nada ni pidiera muestra para analizar, proceder con el SPROCES ", pues me he descargado el SPROCESS y lo he ejecutado como administrador. Entonces me ha salido un error repetidamente que decía: "Visualizador de Módulos y Procesos activos dejó de funcionar", pero me ha creado un log, así que no sé si habrá funcionado o no, en cualquier caso, pego los log del ElistarA y del Sprocess por si me podéis ayudar.

Por cierto, no sé porqué escribiendo aquí no me sale el doble acento... :D

EliStarA

(8-5-2012 21:20:10 (GMT))

EliStartPage v25.43 (c)2012 S.G.H. / Satinfo S.L. (Actualizado el 8 de Mayo del 2012)

--------------------------------------------------

Usuario: Germán

ID de Usuario: S-1-5-21-4122449117-2652599759-3059582784-1000

Lista de Acciones (por Acción Directa):

C:\PROGRAM FILES (X86)\ASK.COM\GENERICASKTOOLBAR.DLL --> Eliminado ASKToolbar(bho/tb)

Eliminada Class, "{00000000-6E41-4FD3-8538-502F5495E5FC}" -> C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll

Eliminada Class, "{9AFB8248-617F-460D-9366-D71CDEDA3179}" -> NULL1

Eliminada Class, "{D4027C7F-154A-4066-A1AD-4243D8127440}" -> C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll

Detectado HOSTS no Standar.

Restaurado HOSTS por el Original.

Eliminadas las Paginas de Inicio y de Busqueda del IE

Eliminados Ficheros Temporales del IE

(8-5-2012 21:30:17 (GMT))

EliStartPage v25.43 (c)2012 S.G.H. / Satinfo S.L. (Actualizado el 8 de Mayo del 2012)

--------------------------------------------------

Usuario: Germán

ID de Usuario: S-1-5-21-4122449117-2652599759-3059582784-1000

Lista de Acciones (por Exploración):

Explorando "C:\"

Nº Total de Directorios: 29503

Nº Total de Ficheros: 163778

Nº de Ficheros Analizados: 51327

Nº de Ficheros Infectados: 0

Nº de Ficheros Limpiados: 0

(8-5-2012 21:47:20 (GMT))

EliStartPage v25.43 (c)2012 S.G.H. / Satinfo S.L. (Actualizado el 8 de Mayo del 2012)

--------------------------------------------------

Usuario: Germán

ID de Usuario: S-1-5-21-4122449117-2652599759-3059582784-1000

Lista de Acciones (por Acción Directa):

Eliminadas las Paginas de Inicio y de Busqueda del IE

Eliminados Ficheros Temporales del IE

(8-5-2012 21:57:48 (GMT))

EliStartPage v25.43 (c)2012 S.G.H. / Satinfo S.L. (Actualizado el 8 de Mayo del 2012)

--------------------------------------------------

Usuario: Germán

ID de Usuario: S-1-5-21-4122449117-2652599759-3059582784-1000

Lista de Acciones (por Exploración):

Explorando "C:\"

Nº Total de Directorios: 29614

Nº Total de Ficheros: 168203

Nº de Ficheros Analizados: 51348

Nº de Ficheros Infectados: 0

Nº de Ficheros Limpiados: 0

SPROCESS

(8-5-2012 22:15:13 GMT)

SProces v6.3 (c)2012 S.G.H. / Satinfo S.L.

-------------------------------------------

Sistema Operativo: Windows 7 Home Premium (v6.1.7600)

Internet Explorer: (v9.0.8112.16421) 0

Equipo: GERMÁN-VAIO

Usuario: Germán

Sesión de Usuario: Germán

86 Procesos Activos:

C:\WINDOWS\SYSTEM32\SMSS.EXE

C:\WINDOWS\SYSTEM32\CSRSS.EXE

C:\WINDOWS\SYSTEM32\WININIT.EXE

C:\WINDOWS\SYSTEM32\CSRSS.EXE

C:\WINDOWS\SYSTEM32\SERVICES.EXE

C:\WINDOWS\SYSTEM32\WINLOGON.EXE

C:\WINDOWS\SYSTEM32\LSASS.EXE

C:\WINDOWS\SYSTEM32\LSM.EXE

C:\WINDOWS\SYSTEM32\SVCHOST.EXE

C:\WINDOWS\SYSTEM32\SVCHOST.EXE

C:\WINDOWS\SYSTEM32\ATIESRXX.EXE

C:\WINDOWS\SYSTEM32\SVCHOST.EXE

C:\WINDOWS\SYSTEM32\SVCHOST.EXE

C:\WINDOWS\SYSTEM32\SVCHOST.EXE

C:\WINDOWS\SYSTEM32\SVCHOST.EXE

C:\WINDOWS\SYSTEM32\SVCHOST.EXE

C:\WINDOWS\SYSTEM32\ATIECLXX.EXE

C:\WINDOWS\SYSTEM32\SPOOLSV.EXE

C:\PROGRAM FILES (X86)\AVIRA\ANTIVIR DESKTOP\SCHED.EXE

C:\WINDOWS\SYSTEM32\SVCHOST.EXE

C:\PROGRAM FILES (X86)\COMMON FILES\ARCSOFT\CONNECTION SERVICE\BIN\ACSERVICE.EXE

C:\WINDOWS\SYSTEM32\TASKHOST.EXE

C:\WINDOWS\SYSTEM32\DWM.EXE

C:\WINDOWS\SYSTEM32\BTWDINS.EXE

C:\PROGRAM FILES (X86)\INTEL\INTEL(R) MANAGEMENT ENGINE COMPONENTS\LMS\LMS.EXE

C:\WINDOWS\SYSTEM32\EXPLORER.EXE

C:\PROGRAM FILES (X86)\SONY\PMB\PMBDEVICEINFOPROVIDER.EXE

C:\WINDOWS\SYSTEM32\SVCHOST.EXE

C:\PROGRAM FILES (X86)\ARCSOFT\MAGIC-I VISUAL EFFECTS 2\UCAMMONITOR.EXE

C:\PROGRAM FILES (X86)\SONY\VAIO EVENT SERVICE\VESMGR.EXE

C:\WINDOWS\SYSTEM32\TASKENG.EXE

C:\WINDOWS\SYSTEM32\TASKENG.EXE

C:\WINDOWS\SYSTEM32\VAIO GATE.EXE

C:\PROGRAM FILES\SONY\VAIO CARE\VCSPT.EXE

C:\WINDOWS\SYSTEM32\SPMGR.EXE

C:\WINDOWS\SYSTEM32\RAVBG64.EXE

C:\WINDOWS\SYSTEM32\VSNSERVICE.EXE

C:\WINDOWS\SYSTEM32\WLIDSVC.EXE

C:\WINDOWS\SYSTEM32\VAIOUPDT.EXE

C:\WINDOWS\SYSWOW64\DLLHOST.EXE

C:\WINDOWS\SYSTEM32\VSNCLIENT.EXE

C:\WINDOWS\SYSTEM32\WLIDSVCM.EXE

C:\PROGRAM FILES (X86)\SONY\VAIO EVENT SERVICE\VESMGRSUB.EXE

C:\PROGRAM FILES (X86)\SAMSUNG\KIES\KIESTRAYAGENT.EXE

C:\PROGRAM FILES (X86)\SPYBOT - SEARCH & DESTROY\TEATIMER.EXE

C:\PROGRAM FILES (X86)\SAMSUNG\KIES\EXTERNAL\FIRMWAREUPDATE\KIESPDLR.EXE

C:\USERS\GERMáN\APPDATA\ROAMING\IWOT\UMYMY.EXE

C:\WINDOWS\SYSTEM32\BTTRAY.EXE

C:\WINDOWS\SYSWOW64\RUNDLL32.EXE

C:\WINDOWS\SYSTEM32\WMIPRVSE.EXE

C:\PROGRAM FILES (X86)\INTEL\INTEL(R) RAPID STORAGE TECHNOLOGY\IASTORICON.EXE

C:\PROGRAM FILES (X86)\SONY\ISB UTILITY\ISBMGR.EXE

C:\WINDOWS\SYSTEM32\MOM.EXE

C:\PROGRAM FILES (X86)\SONY\PMB\PMBVOLUMEWATCHER.EXE

C:\PROGRAM FILES (X86)\COMMON FILES\ARCSOFT\CONNECTION SERVICE\BIN\ACDAEMON.EXE

C:\WINDOWS\SYSTEM32\WMIPRVSE.EXE

C:\WINDOWS\SYSWOW64\DLLHOST.EXE

C:\PROGRAM FILES (X86)\COMMON FILES\ARCSOFT\CONNECTION SERVICE\BIN\ARCCON.AC

C:\PROGRAM FILES (X86)\COMMON FILES\NIKON\MONITOR\NKMONITOR.EXE

C:\PROGRAM FILES (X86)\COMMON FILES\JAVA\JAVA UPDATE\JUSCHED.EXE

C:\PROGRAM FILES (X86)\AVIRA\ANTIVIR DESKTOP\AVGNT.EXE

C:\PROGRAM FILES (X86)\ASK.COM\UPDATER\UPDATER.EXE

C:\WINDOWS\SYSTEM32\SEARCHINDEXER.EXE

C:\WINDOWS\SYSTEM32\CCC.EXE

C:\WINDOWS\SYSTEM32\SVCHOST.EXE

C:\WINDOWS\SYSTEM32\SVCHOST.EXE

C:\WINDOWS\SYSTEM32\VCSYSTRAY.EXE

C:\WINDOWS\SYSTEM32\PRESENTATIONFONTCACHE.EXE

C:\PROGRAM FILES (X86)\INTEL\INTEL(R) RAPID STORAGE TECHNOLOGY\IASTORDATAMGRSVC.EXE

C:\PROGRAM FILES (X86)\NERO\UPDATE\NASVC.EXE

C:\WINDOWS\SYSTEM32\VCPERFSERVICE.EXE

C:\PROGRAM FILES\SONY\VAIO CARE\LISTENER.EXE

C:\PROGRAM FILES (X86)\INTEL\INTEL(R) MANAGEMENT ENGINE COMPONENTS\UNS\UNS.EXE

C:\WINDOWS\SYSTEM32\SPMSERVICE.EXE

C:\WINDOWS\SYSTEM32\SVCHOST.EXE

C:\WINDOWS\SYSTEM32\WMPNETWK.EXE

C:\WINDOWS\SYSTEM32\WUAUCLT.EXE

C:\WINDOWS\SYSTEM32\VUAGENT.EXE

C:\WINDOWS\SYSTEM32\IEXPLORE.EXE

C:\WINDOWS\SYSTEM32\IEXPLORE.EXE

C:\WINDOWS\SYSTEM32\AUDIODG.EXE

C:\WINDOWS\SYSTEM32\SPLWOW64.EXE

C:\WINDOWS\SYSTEM32\IEXPLORE.EXE

C:\WINDOWS\SYSTEM32\SEARCHPROTOCOLHOST.EXE

C:\WINDOWS\SYSTEM32\SEARCHFILTERHOST.EXE

C:\USERS\GERMáN\DESKTOP\SPROCES.EXE

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.ya.com

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = <local> (0)

R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - C:\Windows\SysWOW64\ieframe.dll

F2 - REG:system.ini: Taskman=

F2 - REG:system.ini: UserInit=userinit.exe,

O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll

O2 - BHO: Aplicación auxiliar de inicio de sesión de Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll

O4 - HKCU\..\Run: [Update Service] C:\PROGRA~2\COMMON~1\TEKNUM~1\update.exe /startup

O4 - HKCU\..\Run: [Google Update] "C:\Users\Germán\AppData\Local\Google\Update\GoogleUpdate.exe" /c

O4 - HKCU\..\Run: [KiesHelper] C:\Program Files (x86)\Samsung\Kies\KiesHelper.exe /s

O4 - HKCU\..\Run: [KiesTrayAgent] C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe

O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe

O4 - HKCU\..\Run: [AlcoholAutomount] "C:\Program Files (x86)\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe" -automount

O4 - HKCU\..\Run: [KiesPDLR] C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe

O4 - HKCU\..\Run: [Peanelez] C:\Users\Germán\AppData\Roaming\Iwot\umymy.exe

O4 - HKLM\..\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe

O4 - HKLM\..\Run: [ISBMgr.exe] "C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe"

O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun

O4 - HKLM\..\Run: [PMBVolumeWatcher] C:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe

O4 - HKLM\..\Run: [ArcSoft Connection Service] C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe

O4 - HKLM\..\Run: [Nikon Transfer Monitor] C:\Program Files (x86)\Common Files\Nikon\Monitor\NkMonitor.exe

O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"

O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"

O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

O4 - HKLM\..\Run: [UnlockerAssistant] "C:\Program Files (x86)\Unlocker\UnlockerAssistant.exe"

O4 - HKLM\..\Run: [facemoods] "C:\Program Files (x86)\facemoods.com\facemoods\1.4.17.11\facemoodssrv.exe" /md I

O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"

O4 - HKLM\..\Run: [avgnt] "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min

O4 - HKLM\..\Run: [ApnUpdater] "C:\Program Files (x86)\Ask.com\Updater\Updater.exe"

O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'Servicio Local')

O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'Servicio de red')

O4 - Global Startup: Bluetooth.lnk = C:\Program Files (x86)\WIDCOMM\Bluetooth Software\BTTray.exe

O8 - Extra context menu item: E&xportar a Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000

O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_96D6FF0C6D236BF8.dll/cmsidewiki.html

O9 - Extra button: Enviar a OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll

O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL

O9 - Extra button: Add to Evernote - {E0B8C461-F8FB-49b4-8373-FE32E92528A6} - C:\Program Files (x86)\Evernote\Evernote3.5\enbar.dll

O10 - Unknown file in Winsock LSP: C:\PROGRAM FILES (X86)\COMMON FILES\MICROSOFT SHARED\WINDOWS LIVE\WLIDNSP.DLL

O10 - Unknown file in Winsock LSP: C:\PROGRAM FILES (X86)\COMMON FILES\MICROSOFT SHARED\WINDOWS LIVE\WLIDNSP.DLL

O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics

O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Plug-in 1.6.0_29) - http://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab

O16 - DPF: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} (Java Plug-in 1.6.0_29) - http://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab

O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} (Java Plug-in 1.6.0_29) - http://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab

O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll

O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.dll

O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Program Files (x86)\Common Files\Microsoft Shared\Help\hxds.dll

O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.dll

O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - (no file)

O22 - ShellExecuteHooks: Groove GFS Stub Execution Hook - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll

Información Adicional:

----------------------

Listado de Servicios (Carga Automatica):

----------------------------------------

O23 - Service: ArcSoft Connect Daemon (ACDaemon) - ArcSoft Inc. - C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe

O23 - Service: AMD External Events Utility - AMD - C:\WINDOWS\system32\atiesrxx.exe (file missing)

O23 - Service: Avira Programador (AntiVirSchedulerService) - Avira Operations GmbH & Co. KG - C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe

O23 - Service: Avira Realtime Protection (AntiVirService) - Avira Operations GmbH & Co. KG - C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe

O23 - Service: Avira Web Protection (AntiVirWebService) - Avira Operations GmbH & Co. KG - C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE

O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe

**O23 - Service: @%SystemRoot%\system32\wevtsvc.dll,-200 (eventlog) - Unknown owner - %SystemRoot%\System32\svchost.exe -k LocalServiceNetworkRestricted - C:\WINDOWS\SYSTEM32\NULL1 (file missing)

O23 - Service: Servicio Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe

O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

O23 - Service: @C:\Program Files (x86)\Nero\Update\NASvc.exe,-200 (NAUpdate) - Nero AG - C:\Program Files (x86)\Nero\Update\NASvc.exe

O23 - Service: PMBDeviceInfoProvider - Sony Corporation - C:\Program Files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe

O23 - Service: rimspci - REDC - C:\WINDOWS\system32\drivers\rimssne64.sys (file missing)

O23 - Service: risdsnpe - REDC - C:\WINDOWS\system32\drivers\risdsne64.sys (file missing)

O23 - Service: VAIO Care Performance Service (SampleCollector) - Sony Corporation - C:\Program Files\Sony\VAIO Care\VCPerfService.exe

Listado de Servicios (Carga Manual):

------------------------------------

O23 - Service: Adobe Active File Monitor V8 (AdobeActiveFileMonitor8.0) - Adobe Systems Incorporated - C:\Program Files (x86)\Adobe\Elements Organizer 8.0\PhotoshopElementsFileAgent.exe

O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

O23 - Service: adp94xx - Adaptec, Inc. - C:\WINDOWS\system32\drivers\adp94xx.sys (file missing)

O23 - Service: adpahci - Adaptec, Inc. - C:\WINDOWS\system32\drivers\adpahci.sys (file missing)

O23 - Service: adpu320 - Adaptec, Inc. - C:\WINDOWS\system32\drivers\adpu320.sys (file missing)

O23 - Service: aliide - Acer Laboratories Inc. - C:\WINDOWS\system32\drivers\aliide.sys (file missing)

O23 - Service: amdsata - Advanced Micro Devices - C:\WINDOWS\system32\drivers\amdsata.sys (file missing)

O23 - Service: amdsbs - AMD Technologies Inc. - C:\WINDOWS\system32\drivers\amdsbs.sys (file missing)

O23 - Service: Alps Pointing-device Filter Driver (ApfiltrService) - Unknown owner - C:\WINDOWS\system32\drivers\Apfiltr.sys (file missing)

O23 - Service: arc - Adaptec, Inc. - C:\WINDOWS\system32\drivers\arc.sys (file missing)

O23 - Service: arcsas - Adaptec, Inc. - C:\WINDOWS\system32\drivers\arcsas.sys (file missing)

O23 - Service: ArcSoft Magic-I Visual Effect (ArcSoftKsUFilter) - ArcSoft, Inc. - C:\WINDOWS\SYSTEM32\DRIVERS\ArcSoftKsUFilter.sys (file missing)

O23 - Service: Atheros Extensible Wireless LAN device driver (athr) - Atheros Communications, Inc. - C:\WINDOWS\SYSTEM32\DRIVERS\athrx.sys (file missing)

O23 - Service: atikmdag - ATI Technologies Inc. - C:\WINDOWS\SYSTEM32\DRIVERS\atikmdag.sys (file missing)

O23 - Service: Broadcom NetXtreme II VBD (b06bdrv) - Broadcom Corporation - C:\WINDOWS\system32\drivers\bxvbda.sys (file missing)

O23 - Service: Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0 (b57nd60a) - Broadcom Corporation - C:\WINDOWS\SYSTEM32\DRIVERS\b57nd60a.sys (file missing)

O23 - Service: Controlador de filtro inferior de almacenamiento USB Brother (BrFiltLo) - Brother Industries, Ltd. - C:\WINDOWS\system32\drivers\BrFiltLo.sys (file missing)

O23 - Service: Controlador de filtro superior de almacenamiento USB Brother (BrFiltUp) - Brother Industries, Ltd. - C:\WINDOWS\system32\drivers\BrFiltUp.sys (file missing)

O23 - Service: Controlador de interfaz de puerto serie Brother MFC (WDM) (Brserid) - Brother Industries Ltd. - C:\WINDOWS\System32\Drivers\Brserid.sys (file missing)

O23 - Service: Controlador serie WDM de Brother (BrSerWdm) - Brother Industries Ltd. - C:\WINDOWS\System32\Drivers\BrSerWdm.sys (file missing)

O23 - Service: Módem Brother MFC USB sólo Fax (BrUsbMdm) - Brother Industries Ltd. - C:\WINDOWS\System32\Drivers\BrUsbMdm.sys (file missing)

O23 - Service: Controlador WDM de serie USB Brother MFC (BrUsbSer) - Brother Industries Ltd. - C:\WINDOWS\System32\Drivers\BrUsbSer.sys (file missing)

O23 - Service: Bluetooth AMP USB Filter (btwampfl) - Broadcom Corporation. - C:\WINDOWS\SYSTEM32\drivers\btwampfl.sys (file missing)

O23 - Service: Dispositivo de audio Bluetooth (btwaudio) - Broadcom Corporation. - C:\WINDOWS\SYSTEM32\drivers\btwaudio.sys (file missing)

O23 - Service: Bluetooth AVDT Service (btwavdt) - Broadcom Corporation. - C:\WINDOWS\SYSTEM32\drivers\btwavdt.sys (file missing)

O23 - Service: Bluetooth L2CAP Service (btwl2cap) - Broadcom Corporation. - C:\WINDOWS\SYSTEM32\DRIVERS\btwl2cap.sys (file missing)

O23 - Service: btwrchid - Broadcom Corporation. - C:\WINDOWS\SYSTEM32\DRIVERS\btwrchid.sys (file missing)

O23 - Service: cmdide - CMD Technology, Inc. - C:\WINDOWS\system32\drivers\cmdide.sys (file missing)

O23 - Service: SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.) (dg_ssudbus) - DEVGURU Co., LTD.(http://www.devguru.co.kr) - C:\WINDOWS\SYSTEM32\DRIVERS\ssudbus.sys (file missing)

O23 - Service: Broadcom NetXtreme II 10 GigE VBD (ebdrv) - Broadcom Corporation - C:\WINDOWS\system32\drivers\evbda.sys (file missing)

O23 - Service: elxstor - Emulex - C:\WINDOWS\system32\drivers\elxstor.sys (file missing)

O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe

O23 - Service: Servicio de Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

O23 - Service: Hauppauge Consumer Infrared Receiver (hcw85cir) - Hauppauge Computer Works, Inc. - C:\WINDOWS\system32\drivers\hcw85cir.sys (file missing)

O23 - Service: Intel(R) Management Engine Interface (HECIx64) - Intel Corporation - C:\WINDOWS\system32\drivers\HECIx64.sys (file missing)

O23 - Service: HpSAMD - Hewlett-Packard Company - C:\WINDOWS\system32\drivers\HpSAMD.sys (file missing)

O23 - Service: Controladora RAID de Intel para Windows 7 (iaStorV) - Intel Corporation - C:\WINDOWS\system32\drivers\iaStorV.sys (file missing)

O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe

O23 - Service: igfx - Intel Corporation - C:\WINDOWS\SYSTEM32\DRIVERS\igdkmd64.sys (file missing)

O23 - Service: iirsp - Intel Corp./ICP vortex GmbH - C:\WINDOWS\system32\drivers\iirsp.sys (file missing)

O23 - Service: Impcd - Intel Corporation - C:\WINDOWS\system32\drivers\Impcd.sys (file missing)

O23 - Service: Service for Realtek HD Audio (WDM) (IntcAzAudAddService) - Realtek Semiconductor Corp. - C:\WINDOWS\SYSTEM32\drivers\RTKVHD64.sys (file missing)

O23 - Service: Intel(R) Display Audio (IntcDAud) - Intel(R) Corporation - C:\WINDOWS\SYSTEM32\DRIVERS\IntcDAud.sys (file missing)

O23 - Service: LSI_FC - LSI Corporation - C:\WINDOWS\system32\drivers\lsi_fc.sys (file missing)

O23 - Service: LSI_SAS - LSI Corporation - C:\WINDOWS\system32\drivers\lsi_sas.sys (file missing)

O23 - Service: LSI_SAS2 - LSI Corporation - C:\WINDOWS\system32\drivers\lsi_sas2.sys (file missing)

O23 - Service: LSI_SCSI - LSI Corporation - C:\WINDOWS\system32\drivers\lsi_scsi.sys (file missing)

O23 - Service: megasas - LSI Corporation - C:\WINDOWS\system32\drivers\megasas.sys (file missing)

O23 - Service: MegaSR - LSI Corporation, Inc. - C:\WINDOWS\system32\drivers\MegaSR.sys (file missing)

O23 - Service: nfrd960 - IBM Corporation - C:\WINDOWS\system32\drivers\nfrd960.sys (file missing)

O23 - Service: nvraid - NVIDIA Corporation - C:\WINDOWS\system32\drivers\nvraid.sys (file missing)

O23 - Service: nvstor - NVIDIA Corporation - C:\WINDOWS\system32\drivers\nvstor.sys (file missing)

O23 - Service: ql2300 - QLogic Corporation - C:\WINDOWS\system32\drivers\ql2300.sys (file missing)

O23 - Service: ql40xx - QLogic Corporation - C:\WINDOWS\system32\drivers\ql40xx.sys (file missing)

O23 - Service: Service for HDMI (RTHDMIAzAudService) - Realtek Semiconductor Corp. - C:\WINDOWS\SYSTEM32\drivers\RtHDMIVX.sys (file missing)

O23 - Service: Prolific Serial port driver (Ser2pl) - Prolific Technology Inc. - C:\WINDOWS\SYSTEM32\DRIVERS\ser2pl64.sys (file missing)

O23 - Service: Sony Firmware Extension Parser (SFEP) - Sony Corporation - C:\WINDOWS\system32\drivers\SFEP.sys (file missing)

O23 - Service: SiSRaid2 - Silicon Integrated Systems Corp. - C:\WINDOWS\system32\drivers\SiSRaid2.sys (file missing)

O23 - Service: SiSRaid4 - Silicon Integrated Systems - C:\WINDOWS\system32\drivers\sisraid4.sys (file missing)

O23 - Service: VAIO Media plus Content Importer (SOHCImp) - Sony Corporation - C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHCImp.exe

O23 - Service: VAIO Media plus Digital Media Server (SOHDms) - Sony Corporation - C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDms.exe

O23 - Service: VAIO Media plus Device Searcher (SOHDs) - Sony Corporation - C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDs.exe

O23 - Service: VAIO Entertainment Common Service (SpfService) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\SPF\SpfService64.exe

O23 - Service: SAMSUNG Android USB Composite Device driver (WDM) (ssadbus) - MCCI Corporation - C:\WINDOWS\SYSTEM32\DRIVERS\ssadbus.sys (file missing)

O23 - Service: SAMSUNG Android USB Modem (Filter) (ssadmdfl) - MCCI Corporation - C:\WINDOWS\SYSTEM32\DRIVERS\ssadmdfl.sys (file missing)

O23 - Service: SAMSUNG Android USB Modem Drivers (ssadmdm) - MCCI Corporation - C:\WINDOWS\SYSTEM32\DRIVERS\ssadmdm.sys (file missing)

O23 - Service: SAMSUNG USB Composite Device driver (WDM) (sscdbus) - MCCI Corporation - C:\WINDOWS\SYSTEM32\DRIVERS\sscdbus.sys (file missing)

O23 - Service: SAMSUNG Mobile Modem Filter (sscdmdfl) - MCCI Corporation - C:\WINDOWS\SYSTEM32\DRIVERS\sscdmdfl.sys (file missing)

O23 - Service: SAMSUNG Mobile Modem Drivers (sscdmdm) - MCCI Corporation - C:\WINDOWS\SYSTEM32\DRIVERS\sscdmdm.sys (file missing)

O23 - Service: SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.) (ssudmdm) - DEVGURU Co., LTD.(http://www.devguru.co.kr) - C:\WINDOWS\SYSTEM32\DRIVERS\ssudmdm.sys (file missing)

O23 - Service: stexstor - Promise Technology - C:\WINDOWS\system32\drivers\stexstor.sys (file missing)

O23 - Service: VAIO Content Folder Watcher (VCFw) - Sony Corporation - C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe

O23 - Service: VAIO Content Metadata Intelligent Analyzing Manager (VcmIAlzMgr) - Sony Corporation - C:\Program Files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe

O23 - Service: VAIO Content Metadata Intelligent Network Service Manager (VcmINSMgr) - Sony Corporation - C:\Program Files\Sony\VCM Intelligent Network Service Manager\VcmINSMgr.exe

O23 - Service: VAIO Content Metadata XML Interface (VcmXmlIfHelper) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VcmXml\VcmXmlIfHelper64.exe

O23 - Service: viaide - VIA Technologies, Inc. - C:\WINDOWS\system32\drivers\viaide.sys (file missing)

O23 - Service: vsmraid - VIA Technologies Inc.,Ltd - C:\WINDOWS\system32\drivers\vsmraid.sys (file missing)

O23 - Service: VUAgent - Sony Corporation - C:\Program Files\Sony\VAIO Update 5\VUAgent.exe

O23 - Service: NDIS6.2 Miniport Driver for Marvell Yukon Ethernet Controller (yukonw7) - Marvell - C:\WINDOWS\SYSTEM32\DRIVERS\yk62x64.sys (file missing)

Listado de Servicios (Deshabilitados):

--------------------------------------

94 Servicios.

15 de Carga Automatica.

79 de Carga Manual.

0 Deshabilitados.

Mensaje por **msc hotline sat** » 09 May 2012, 09:22

Pues podría ser por culpa de cualquiera de estos ficheros que no conoccemos, envianodlos para analizar:

C:\WINDOWS\SYSTEM32\VSNCLIENT.EXE

C:\WINDOWS\SYSTEM32\WLIDSVCM.EXE

C:\USERS\GERMáN\APPDATA\ROAMING\IWOT\UMYMY.EXE

C:\WINDOWS\SYSTEM32\VCPERFSERVICE.EXE

C:\WINDOWS\SYSTEM32\VUAGENT.EXE

C:\Program Files (x86)\facemoods.com\facemoods\1.4.17.11\facemoodssrv.exe

y estos otros, aunque probablemente sean drivers de SONY VAIO, envianoslos tambien para analizar:

C:\PROGRAM FILES (X86)\SONY\PMB\PMBDEVICEINFOPROVIDER.EXE

C:\WINDOWS\SYSTEM32\VAIO GATE.EXE

C:\PROGRAM FILES\SONY\VAIO CARE\VCSPT.EXE

C:\PROGRAM FILES\SONY\VAIO CARE\LISTENER.EXE

[quote]

ENVIO DE MUESTRAS:

https://foros.zonavirus.com/viewtopic.php?f=5&t=14253

Tras recibirlo/s, lo/s analizaremos e implementaremos su control y eliminación, si procede, en nuestras utilidades, de lo cual informaremos

[/quote]

saludos

ms, 9-5-2012

gccela · Mensaje por **gccela** » 10 May 2012, 00:08

Hola, que tal?? Disculpa mi tardanza pero es que esta semana trabajo de tarde y llego a casa a las tantas... Decirte que os he enviado un fichero consólo 4 de los archivos que me pedíais, pero es que, aunque pareza extraño, no he conseguido encontrar la mayoria de ellos. Los que os he enviado son:

C:\USERS\GERMáN\APPDATA\ROAMING\IWOT\UMYMY.EXE

C:\PROGRAM FILES (X86)\SONY\PMB\PMBDEVICEINFOPROVIDER.EXE

C:\PROGRAM FILES\SONY\VAIO CARE\LISTENER.EXE

C:\PROGRAM FILES\SONY\VAIO CARE\VCSPT.EXE

Por si sirviera para aclarar algo, he vuelto a lanzar el SProces y está claro que algunos de ellos repiten... pero incluso me han parecido raros los MOM.exe y el CCC.exe y mirando en el explorador tampoco me aparecen... :(

(9-5-2012 21:54:29 GMT)

SProces v6.3 (c)2012 S.G.H. / Satinfo S.L.

-------------------------------------------

Sistema Operativo: Windows 7 Home Premium (v6.1.7600)

Internet Explorer: (v9.0.8112.16421) 0

Equipo: GERMÁN-VAIO

Usuario: Germán

Sesión de Usuario: Germán

82 Procesos Activos:

C:\WINDOWS\SYSTEM32\SMSS.EXE

C:\WINDOWS\SYSTEM32\CSRSS.EXE

C:\WINDOWS\SYSTEM32\WININIT.EXE

C:\WINDOWS\SYSTEM32\CSRSS.EXE

C:\WINDOWS\SYSTEM32\SERVICES.EXE

C:\WINDOWS\SYSTEM32\LSASS.EXE

C:\WINDOWS\SYSTEM32\LSM.EXE

C:\WINDOWS\SYSTEM32\WINLOGON.EXE

C:\WINDOWS\SYSTEM32\SVCHOST.EXE

C:\WINDOWS\SYSTEM32\SVCHOST.EXE

C:\WINDOWS\SYSTEM32\ATIESRXX.EXE

C:\WINDOWS\SYSTEM32\SVCHOST.EXE

C:\WINDOWS\SYSTEM32\SVCHOST.EXE

C:\WINDOWS\SYSTEM32\SVCHOST.EXE

C:\WINDOWS\SYSTEM32\SVCHOST.EXE

C:\WINDOWS\SYSTEM32\SVCHOST.EXE

C:\WINDOWS\SYSTEM32\ATIECLXX.EXE

C:\WINDOWS\SYSTEM32\SPOOLSV.EXE

C:\PROGRAM FILES (X86)\AVIRA\ANTIVIR DESKTOP\SCHED.EXE

C:\WINDOWS\SYSTEM32\SVCHOST.EXE

C:\PROGRAM FILES (X86)\COMMON FILES\ARCSOFT\CONNECTION SERVICE\BIN\ACSERVICE.EXE

C:\WINDOWS\SYSTEM32\DWM.EXE

C:\WINDOWS\SYSTEM32\BTWDINS.EXE

C:\PROGRAM FILES (X86)\INTEL\INTEL(R) MANAGEMENT ENGINE COMPONENTS\LMS\LMS.EXE

C:\WINDOWS\SYSTEM32\TASKHOST.EXE

C:\WINDOWS\SYSTEM32\EXPLORER.EXE

C:\PROGRAM FILES (X86)\SONY\PMB\PMBDEVICEINFOPROVIDER.EXE

C:\WINDOWS\SYSTEM32\SVCHOST.EXE

C:\PROGRAM FILES (X86)\ARCSOFT\MAGIC-I VISUAL EFFECTS 2\UCAMMONITOR.EXE

C:\PROGRAM FILES (X86)\SONY\VAIO EVENT SERVICE\VESMGR.EXE

C:\WINDOWS\SYSTEM32\RAVBG64.EXE

C:\WINDOWS\SYSTEM32\VSNSERVICE.EXE

C:\WINDOWS\SYSTEM32\WLIDSVC.EXE

C:\WINDOWS\SYSWOW64\DLLHOST.EXE

C:\WINDOWS\SYSTEM32\VSNCLIENT.EXE

C:\PROGRAM FILES (X86)\SAMSUNG\KIES\KIESTRAYAGENT.EXE

C:\PROGRAM FILES (X86)\SPYBOT - SEARCH & DESTROY\TEATIMER.EXE

C:\PROGRAM FILES (X86)\SAMSUNG\KIES\EXTERNAL\FIRMWAREUPDATE\KIESPDLR.EXE

C:\WINDOWS\SYSTEM32\TASKENG.EXE

C:\WINDOWS\SYSTEM32\TASKENG.EXE

C:\WINDOWS\SYSTEM32\WLIDSVCM.EXE

C:\PROGRAM FILES\SONY\VAIO CARE\VCSPT.EXE

C:\WINDOWS\SYSTEM32\SPMGR.EXE

C:\PROGRAM FILES (X86)\SONY\VAIO EVENT SERVICE\VESMGRSUB.EXE

C:\WINDOWS\SYSTEM32\BTTRAY.EXE

C:\WINDOWS\SYSWOW64\RUNDLL32.EXE

C:\WINDOWS\SYSTEM32\VAIOUPDT.EXE

C:\PROGRAM FILES (X86)\INTEL\INTEL(R) RAPID STORAGE TECHNOLOGY\IASTORICON.EXE

C:\PROGRAM FILES (X86)\SONY\ISB UTILITY\ISBMGR.EXE

C:\WINDOWS\SYSTEM32\MOM.EXE

C:\PROGRAM FILES (X86)\SONY\PMB\PMBVOLUMEWATCHER.EXE

C:\PROGRAM FILES (X86)\COMMON FILES\ARCSOFT\CONNECTION SERVICE\BIN\ACDAEMON.EXE

C:\PROGRAM FILES (X86)\COMMON FILES\NIKON\MONITOR\NKMONITOR.EXE

C:\PROGRAM FILES (X86)\COMMON FILES\ARCSOFT\CONNECTION SERVICE\BIN\ARCCON.AC

C:\WINDOWS\SYSTEM32\WMIPRVSE.EXE

C:\WINDOWS\SYSTEM32\WMIPRVSE.EXE

C:\PROGRAM FILES (X86)\COMMON FILES\JAVA\JAVA UPDATE\JUSCHED.EXE

C:\PROGRAM FILES (X86)\AVIRA\ANTIVIR DESKTOP\AVGNT.EXE

C:\PROGRAM FILES (X86)\ASK.COM\UPDATER\UPDATER.EXE

C:\WINDOWS\SYSTEM32\SVCHOST.EXE

C:\WINDOWS\SYSTEM32\CCC.EXE

C:\WINDOWS\SYSTEM32\SEARCHINDEXER.EXE

C:\WINDOWS\SYSTEM32\SVCHOST.EXE

C:\WINDOWS\SYSTEM32\PRESENTATIONFONTCACHE.EXE

C:\USERS\GERMáN\APPDATA\ROAMING\IWOT\UMYMY.EXE

C:\WINDOWS\SYSTEM32\IEXPLORE.EXE

C:\WINDOWS\SYSTEM32\IEXPLORE.EXE

C:\WINDOWS\SYSTEM32\VCSYSTRAY.EXE

C:\PROGRAM FILES (X86)\INTEL\INTEL(R) RAPID STORAGE TECHNOLOGY\IASTORDATAMGRSVC.EXE

C:\PROGRAM FILES (X86)\NERO\UPDATE\NASVC.EXE

C:\WINDOWS\SYSTEM32\VCPERFSERVICE.EXE

C:\PROGRAM FILES\SONY\VAIO CARE\LISTENER.EXE

C:\PROGRAM FILES (X86)\INTEL\INTEL(R) MANAGEMENT ENGINE COMPONENTS\UNS\UNS.EXE

C:\WINDOWS\SYSTEM32\SPMSERVICE.EXE

C:\WINDOWS\SYSTEM32\SVCHOST.EXE

C:\WINDOWS\SYSTEM32\WMPNETWK.EXE

C:\WINDOWS\SYSTEM32\IEXPLORE.EXE

C:\WINDOWS\SYSTEM32\WUAUCLT.EXE

C:\WINDOWS\SYSTEM32\IEXPLORE.EXE

C:\PROGRAM FILES (X86)\WINDOWS LIVE\MESSENGER\MSNMSGR.EXE

C:\PROGRAM FILES (X86)\WINDOWS LIVE\CONTACTS\WLCOMM.EXE

C:\USERS\GERMáN\DOWNLOADS\SPROCES\SPROCES.EXE

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.ya.com

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = <local> (0)

R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - C:\Windows\SysWOW64\ieframe.dll

F2 - REG:system.ini: Taskman=

F2 - REG:system.ini: UserInit=userinit.exe,

O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll

O2 - BHO: Aplicación auxiliar de inicio de sesión de Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll

O4 - HKCU\..\Run: [Update Service] C:\PROGRA~2\COMMON~1\TEKNUM~1\update.exe /startup

O4 - HKCU\..\Run: [Google Update] "C:\Users\Germán\AppData\Local\Google\Update\GoogleUpdate.exe" /c

O4 - HKCU\..\Run: [KiesHelper] C:\Program Files (x86)\Samsung\Kies\KiesHelper.exe /s

O4 - HKCU\..\Run: [KiesTrayAgent] C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe

O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe

O4 - HKCU\..\Run: [AlcoholAutomount] "C:\Program Files (x86)\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe" -automount

O4 - HKCU\..\Run: [KiesPDLR] C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe

O4 - HKCU\..\Run: [Peanelez] C:\Users\Germán\AppData\Roaming\Iwot\umymy.exe

O4 - HKLM\..\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe

O4 - HKLM\..\Run: [ISBMgr.exe] "C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe"

O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun

O4 - HKLM\..\Run: [PMBVolumeWatcher] C:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe

O4 - HKLM\..\Run: [ArcSoft Connection Service] C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe

O4 - HKLM\..\Run: [Nikon Transfer Monitor] C:\Program Files (x86)\Common Files\Nikon\Monitor\NkMonitor.exe

O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"

O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"

O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

O4 - HKLM\..\Run: [UnlockerAssistant] "C:\Program Files (x86)\Unlocker\UnlockerAssistant.exe"

O4 - HKLM\..\Run: [facemoods] "C:\Program Files (x86)\facemoods.com\facemoods\1.4.17.11\facemoodssrv.exe" /md I

O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"

O4 - HKLM\..\Run: [avgnt] "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min

O4 - HKLM\..\Run: [ApnUpdater] "C:\Program Files (x86)\Ask.com\Updater\Updater.exe"

O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'Servicio Local')

O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'Servicio de red')

O4 - Global Startup: Bluetooth.lnk = C:\Program Files (x86)\WIDCOMM\Bluetooth Software\BTTray.exe

O8 - Extra context menu item: E&xportar a Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000

O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_96D6FF0C6D236BF8.dll/cmsidewiki.html

O9 - Extra button: Enviar a OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll

O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL

O9 - Extra button: Add to Evernote - {E0B8C461-F8FB-49b4-8373-FE32E92528A6} - C:\Program Files (x86)\Evernote\Evernote3.5\enbar.dll

O10 - Unknown file in Winsock LSP: C:\PROGRAM FILES (X86)\COMMON FILES\MICROSOFT SHARED\WINDOWS LIVE\WLIDNSP.DLL

O10 - Unknown file in Winsock LSP: C:\PROGRAM FILES (X86)\COMMON FILES\MICROSOFT SHARED\WINDOWS LIVE\WLIDNSP.DLL

O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics

O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Plug-in 1.6.0_29) - http://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab

O16 - DPF: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} (Java Plug-in 1.6.0_29) - http://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab

O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} (Java Plug-in 1.6.0_29) - http://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab

O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll

O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.dll

O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Program Files (x86)\Common Files\Microsoft Shared\Help\hxds.dll

O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.dll

O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - (no file)

O22 - ShellExecuteHooks: Groove GFS Stub Execution Hook - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll

Información Adicional:

----------------------

Listado de Servicios (Carga Automatica):

----------------------------------------

O23 - Service: ArcSoft Connect Daemon (ACDaemon) - ArcSoft Inc. - C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe

O23 - Service: AMD External Events Utility - AMD - C:\WINDOWS\system32\atiesrxx.exe (file missing)

O23 - Service: Avira Programador (AntiVirSchedulerService) - Avira Operations GmbH & Co. KG - C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe

O23 - Service: Avira Realtime Protection (AntiVirService) - Avira Operations GmbH & Co. KG - C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe

O23 - Service: Avira Web Protection (AntiVirWebService) - Avira Operations GmbH & Co. KG - C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE

O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe

**O23 - Service: @%SystemRoot%\system32\wevtsvc.dll,-200 (eventlog) - Unknown owner - %SystemRoot%\System32\svchost.exe -k LocalServiceNetworkRestricted - C:\WINDOWS\SYSTEM32\NULL1 (file missing)

O23 - Service: Servicio Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe

O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

O23 - Service: @C:\Program Files (x86)\Nero\Update\NASvc.exe,-200 (NAUpdate) - Nero AG - C:\Program Files (x86)\Nero\Update\NASvc.exe

O23 - Service: PMBDeviceInfoProvider - Sony Corporation - C:\Program Files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe

O23 - Service: rimspci - REDC - C:\WINDOWS\system32\drivers\rimssne64.sys (file missing)

O23 - Service: risdsnpe - REDC - C:\WINDOWS\system32\drivers\risdsne64.sys (file missing)

O23 - Service: VAIO Care Performance Service (SampleCollector) - Sony Corporation - C:\Program Files\Sony\VAIO Care\VCPerfService.exe

Listado de Servicios (Carga Manual):

------------------------------------

O23 - Service: Adobe Active File Monitor V8 (AdobeActiveFileMonitor8.0) - Adobe Systems Incorporated - C:\Program Files (x86)\Adobe\Elements Organizer 8.0\PhotoshopElementsFileAgent.exe

O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

O23 - Service: adp94xx - Adaptec, Inc. - C:\WINDOWS\system32\drivers\adp94xx.sys (file missing)

O23 - Service: adpahci - Adaptec, Inc. - C:\WINDOWS\system32\drivers\adpahci.sys (file missing)

O23 - Service: adpu320 - Adaptec, Inc. - C:\WINDOWS\system32\drivers\adpu320.sys (file missing)

O23 - Service: aliide - Acer Laboratories Inc. - C:\WINDOWS\system32\drivers\aliide.sys (file missing)

O23 - Service: amdsata - Advanced Micro Devices - C:\WINDOWS\system32\drivers\amdsata.sys (file missing)

O23 - Service: amdsbs - AMD Technologies Inc. - C:\WINDOWS\system32\drivers\amdsbs.sys (file missing)

O23 - Service: Alps Pointing-device Filter Driver (ApfiltrService) - Unknown owner - C:\WINDOWS\system32\drivers\Apfiltr.sys (file missing)

O23 - Service: arc - Adaptec, Inc. - C:\WINDOWS\system32\drivers\arc.sys (file missing)

O23 - Service: arcsas - Adaptec, Inc. - C:\WINDOWS\system32\drivers\arcsas.sys (file missing)

O23 - Service: ArcSoft Magic-I Visual Effect (ArcSoftKsUFilter) - ArcSoft, Inc. - C:\WINDOWS\SYSTEM32\DRIVERS\ArcSoftKsUFilter.sys (file missing)

O23 - Service: Atheros Extensible Wireless LAN device driver (athr) - Atheros Communications, Inc. - C:\WINDOWS\SYSTEM32\DRIVERS\athrx.sys (file missing)

O23 - Service: atikmdag - ATI Technologies Inc. - C:\WINDOWS\SYSTEM32\DRIVERS\atikmdag.sys (file missing)

O23 - Service: Broadcom NetXtreme II VBD (b06bdrv) - Broadcom Corporation - C:\WINDOWS\system32\drivers\bxvbda.sys (file missing)

O23 - Service: Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0 (b57nd60a) - Broadcom Corporation - C:\WINDOWS\SYSTEM32\DRIVERS\b57nd60a.sys (file missing)

O23 - Service: Controlador de filtro inferior de almacenamiento USB Brother (BrFiltLo) - Brother Industries, Ltd. - C:\WINDOWS\system32\drivers\BrFiltLo.sys (file missing)

O23 - Service: Controlador de filtro superior de almacenamiento USB Brother (BrFiltUp) - Brother Industries, Ltd. - C:\WINDOWS\system32\drivers\BrFiltUp.sys (file missing)

O23 - Service: Controlador de interfaz de puerto serie Brother MFC (WDM) (Brserid) - Brother Industries Ltd. - C:\WINDOWS\System32\Drivers\Brserid.sys (file missing)

O23 - Service: Controlador serie WDM de Brother (BrSerWdm) - Brother Industries Ltd. - C:\WINDOWS\System32\Drivers\BrSerWdm.sys (file missing)

O23 - Service: Módem Brother MFC USB sólo Fax (BrUsbMdm) - Brother Industries Ltd. - C:\WINDOWS\System32\Drivers\BrUsbMdm.sys (file missing)

O23 - Service: Controlador WDM de serie USB Brother MFC (BrUsbSer) - Brother Industries Ltd. - C:\WINDOWS\System32\Drivers\BrUsbSer.sys (file missing)

O23 - Service: Bluetooth AMP USB Filter (btwampfl) - Broadcom Corporation. - C:\WINDOWS\SYSTEM32\drivers\btwampfl.sys (file missing)

O23 - Service: Dispositivo de audio Bluetooth (btwaudio) - Broadcom Corporation. - C:\WINDOWS\SYSTEM32\drivers\btwaudio.sys (file missing)

O23 - Service: Bluetooth AVDT Service (btwavdt) - Broadcom Corporation. - C:\WINDOWS\SYSTEM32\drivers\btwavdt.sys (file missing)

O23 - Service: Bluetooth L2CAP Service (btwl2cap) - Broadcom Corporation. - C:\WINDOWS\SYSTEM32\DRIVERS\btwl2cap.sys (file missing)

O23 - Service: btwrchid - Broadcom Corporation. - C:\WINDOWS\SYSTEM32\DRIVERS\btwrchid.sys (file missing)

O23 - Service: cmdide - CMD Technology, Inc. - C:\WINDOWS\system32\drivers\cmdide.sys (file missing)

O23 - Service: SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.) (dg_ssudbus) - DEVGURU Co., LTD.(http://www.devguru.co.kr) - C:\WINDOWS\SYSTEM32\DRIVERS\ssudbus.sys (file missing)

O23 - Service: Broadcom NetXtreme II 10 GigE VBD (ebdrv) - Broadcom Corporation - C:\WINDOWS\system32\drivers\evbda.sys (file missing)

O23 - Service: elxstor - Emulex - C:\WINDOWS\system32\drivers\elxstor.sys (file missing)

O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe

O23 - Service: Servicio de Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

O23 - Service: Hauppauge Consumer Infrared Receiver (hcw85cir) - Hauppauge Computer Works, Inc. - C:\WINDOWS\system32\drivers\hcw85cir.sys (file missing)

O23 - Service: Intel(R) Management Engine Interface (HECIx64) - Intel Corporation - C:\WINDOWS\system32\drivers\HECIx64.sys (file missing)

O23 - Service: HpSAMD - Hewlett-Packard Company - C:\WINDOWS\system32\drivers\HpSAMD.sys (file missing)

O23 - Service: Controladora RAID de Intel para Windows 7 (iaStorV) - Intel Corporation - C:\WINDOWS\system32\drivers\iaStorV.sys (file missing)

O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe

O23 - Service: igfx - Intel Corporation - C:\WINDOWS\SYSTEM32\DRIVERS\igdkmd64.sys (file missing)

O23 - Service: iirsp - Intel Corp./ICP vortex GmbH - C:\WINDOWS\system32\drivers\iirsp.sys (file missing)

O23 - Service: Impcd - Intel Corporation - C:\WINDOWS\system32\drivers\Impcd.sys (file missing)

O23 - Service: Service for Realtek HD Audio (WDM) (IntcAzAudAddService) - Realtek Semiconductor Corp. - C:\WINDOWS\SYSTEM32\drivers\RTKVHD64.sys (file missing)

O23 - Service: Intel(R) Display Audio (IntcDAud) - Intel(R) Corporation - C:\WINDOWS\SYSTEM32\DRIVERS\IntcDAud.sys (file missing)

O23 - Service: LSI_FC - LSI Corporation - C:\WINDOWS\system32\drivers\lsi_fc.sys (file missing)

O23 - Service: LSI_SAS - LSI Corporation - C:\WINDOWS\system32\drivers\lsi_sas.sys (file missing)

O23 - Service: LSI_SAS2 - LSI Corporation - C:\WINDOWS\system32\drivers\lsi_sas2.sys (file missing)

O23 - Service: LSI_SCSI - LSI Corporation - C:\WINDOWS\system32\drivers\lsi_scsi.sys (file missing)

O23 - Service: megasas - LSI Corporation - C:\WINDOWS\system32\drivers\megasas.sys (file missing)

O23 - Service: MegaSR - LSI Corporation, Inc. - C:\WINDOWS\system32\drivers\MegaSR.sys (file missing)

O23 - Service: nfrd960 - IBM Corporation - C:\WINDOWS\system32\drivers\nfrd960.sys (file missing)

O23 - Service: nvraid - NVIDIA Corporation - C:\WINDOWS\system32\drivers\nvraid.sys (file missing)

O23 - Service: nvstor - NVIDIA Corporation - C:\WINDOWS\system32\drivers\nvstor.sys (file missing)

O23 - Service: ql2300 - QLogic Corporation - C:\WINDOWS\system32\drivers\ql2300.sys (file missing)

O23 - Service: ql40xx - QLogic Corporation - C:\WINDOWS\system32\drivers\ql40xx.sys (file missing)

O23 - Service: Service for HDMI (RTHDMIAzAudService) - Realtek Semiconductor Corp. - C:\WINDOWS\SYSTEM32\drivers\RtHDMIVX.sys (file missing)

O23 - Service: Prolific Serial port driver (Ser2pl) - Prolific Technology Inc. - C:\WINDOWS\SYSTEM32\DRIVERS\ser2pl64.sys (file missing)

O23 - Service: Sony Firmware Extension Parser (SFEP) - Sony Corporation - C:\WINDOWS\system32\drivers\SFEP.sys (file missing)

O23 - Service: SiSRaid2 - Silicon Integrated Systems Corp. - C:\WINDOWS\system32\drivers\SiSRaid2.sys (file missing)

O23 - Service: SiSRaid4 - Silicon Integrated Systems - C:\WINDOWS\system32\drivers\sisraid4.sys (file missing)

O23 - Service: VAIO Media plus Content Importer (SOHCImp) - Sony Corporation - C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHCImp.exe

O23 - Service: VAIO Media plus Digital Media Server (SOHDms) - Sony Corporation - C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDms.exe

O23 - Service: VAIO Media plus Device Searcher (SOHDs) - Sony Corporation - C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDs.exe

O23 - Service: VAIO Entertainment Common Service (SpfService) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\SPF\SpfService64.exe

O23 - Service: SAMSUNG Android USB Composite Device driver (WDM) (ssadbus) - MCCI Corporation - C:\WINDOWS\SYSTEM32\DRIVERS\ssadbus.sys (file missing)

O23 - Service: SAMSUNG Android USB Modem (Filter) (ssadmdfl) - MCCI Corporation - C:\WINDOWS\SYSTEM32\DRIVERS\ssadmdfl.sys (file missing)

O23 - Service: SAMSUNG Android USB Modem Drivers (ssadmdm) - MCCI Corporation - C:\WINDOWS\SYSTEM32\DRIVERS\ssadmdm.sys (file missing)

O23 - Service: SAMSUNG USB Composite Device driver (WDM) (sscdbus) - MCCI Corporation - C:\WINDOWS\SYSTEM32\DRIVERS\sscdbus.sys (file missing)

O23 - Service: SAMSUNG Mobile Modem Filter (sscdmdfl) - MCCI Corporation - C:\WINDOWS\SYSTEM32\DRIVERS\sscdmdfl.sys (file missing)

O23 - Service: SAMSUNG Mobile Modem Drivers (sscdmdm) - MCCI Corporation - C:\WINDOWS\SYSTEM32\DRIVERS\sscdmdm.sys (file missing)

O23 - Service: SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.) (ssudmdm) - DEVGURU Co., LTD.(http://www.devguru.co.kr) - C:\WINDOWS\SYSTEM32\DRIVERS\ssudmdm.sys (file missing)

O23 - Service: stexstor - Promise Technology - C:\WINDOWS\system32\drivers\stexstor.sys (file missing)

O23 - Service: VAIO Content Folder Watcher (VCFw) - Sony Corporation - C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe

O23 - Service: VAIO Content Metadata Intelligent Analyzing Manager (VcmIAlzMgr) - Sony Corporation - C:\Program Files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe

O23 - Service: VAIO Content Metadata Intelligent Network Service Manager (VcmINSMgr) - Sony Corporation - C:\Program Files\Sony\VCM Intelligent Network Service Manager\VcmINSMgr.exe

O23 - Service: VAIO Content Metadata XML Interface (VcmXmlIfHelper) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VcmXml\VcmXmlIfHelper64.exe

O23 - Service: viaide - VIA Technologies, Inc. - C:\WINDOWS\system32\drivers\viaide.sys (file missing)

O23 - Service: vsmraid - VIA Technologies Inc.,Ltd - C:\WINDOWS\system32\drivers\vsmraid.sys (file missing)

O23 - Service: VUAgent - Sony Corporation - C:\Program Files\Sony\VAIO Update 5\VUAgent.exe

O23 - Service: NDIS6.2 Miniport Driver for Marvell Yukon Ethernet Controller (yukonw7) - Marvell - C:\WINDOWS\SYSTEM32\DRIVERS\yk62x64.sys (file missing)

Listado de Servicios (Deshabilitados):

--------------------------------------

94 Servicios.

15 de Carga Automatica.

79 de Carga Manual.

0 Deshabilitados.

gccela · Mensaje por **gccela** » 10 May 2012, 01:06

Hola de nuevo. Trasteando trasteando, me he descargado el Microsoft Security Essentials y se lo he pasado, y en el fichero:

C:\USERS\GERMáN\APPDATA\ROAMING\IWOT\UMYMY.EXE ha detectado un troyano. El mensaje que ha aparecido es:

PSW:Win32/Zbot.gen!Y. Le he dado a eliminar y parece que ya se ha solucionado el tema... Espero que os llegue el fichero que os he enviado con la muestra y podais analizarlo vosotros mismos...

Saludos

Mensaje por **msc hotline sat** » 10 May 2012, 10:04

Pues de las muestras recibidas, esta de UMYMY.EXE es un SPY ZBOT que pasamos a controlar a partir de ELISTARA 25.45 de hoy

El preanalisis de virustotal ofrece el siguiente informe:

SHA256: 9dc4f4c734b7e1d5a7e506787124d7addb2feba65fcfe9b1de43adeef13626ee

SHA1: d3125840d61b09365dad8e24f5d9940d930fb99c

MD5: 0a88e136ba61776400c9294d82510a9c

Tamaño: 205.5 KB ( 210432 bytes )

Nombre: umymy.exe

Tipo: DOS EXE

Detecciones: 30 / 42

Fecha de análisis: 2012-05-10 07:55:02 UTC ( hace 0 minutos )

01Más detalles

Antivirus Resultado Actualización

AhnLab-V3 - 20120509

AntiVir TR/Hijacker.Gen 20120509

Antiy-AVL - 20120510

Avast Win32:Zbot-NRC [Trj] 20120509

AVG PSW.Generic9.CFLG 20120510

BitDefender Gen:Variant.Boigy.1 20120510

ByteHero - 20120506

CAT-QuickHeal - 20120510

ClamAV Trojan.Spy.Zbot-142 20120510

Commtouch W32/Zbot.BR.gen!Eldorado 20120510

Comodo - 20120510

DrWeb DLOADER.Trojan 20120510

Emsisoft Trojan-Spy.Win32.Zbot!IK 20120510

eSafe - 20120509

eTrust-Vet Win32/Zbot.CXZ 20120509

F-Prot W32/Zbot.BR.gen!Eldorado 20120509

F-Secure Gen:Variant.Boigy.1 20120510

Fortinet W32/Zbot.AT!tr 20120508

GData Gen:Variant.Boigy.1 20120510

Ikarus Trojan-Spy.Win32.Zbot 20120510

Jiangmin - 20120510

K7AntiVirus Riskware 20120509

Kaspersky HEUR:Trojan.Win32.Generic 20120510

McAfee PWS-Zbot.gen.vo 20120510

McAfee-GW-Edition Heuristic.BehavesLike.Win32.PasswordStealer.H 20120510

Microsoft PWS:Win32/Zbot.gen!Y 20120510

NOD32 a variant of Win32/Spy.Zbot.AAO 20120510

Norman W32/Zbot.VAL 20120509

nProtect - 20120510

Panda Suspicious file 20120509

PCTools Trojan.Gen 20120510

Rising - 20120510

Sophos Mal/Behav-010 20120510

SUPERAntiSpyware - 20120510

Symantec Trojan.Gen 20120510

TheHacker - 20120510

TrendMicro Cryp_Xin1 20120509

TrendMicro-HouseCall Cryp_Xin1 20120509

VBA32 SScope.Trojan.FakeAV.01110 20120508

VIPRE Trojan.Win32.Generic!BT 20120510

ViRobot - 20120510

VirusBuster TrojanSpy.Zbot!H4ttUDODMO4 20120510

Dicha version del ELISTARA 25.45 que lo detecta y elimina estará disponible en nuestra web a partir de las 19 h CEST de hoy

saludos

ms, 10-5-2012

gccela · Mensaje por **gccela** » 10 May 2012, 23:26

Ok, pues de nuevo, gracias por vuestra ayuda e interés... hasta la próxima, ( aunque espero que tarde un poco :) ).

Saludos

Germán

Mensaje por **msc hotline sat** » 11 May 2012, 00:07

Pues hasta la próxima infección ...

Dabdo por solucionado el Tema, procedemos a cerrarlo

saludos

ms, 11-5-2012

De nuevo el "doble acento" (SOLUCIONADO)

De nuevo el "doble acento" (SOLUCIONADO)

Re: De nuevo el "doble acento"

Re: De nuevo el "doble acento"

Re: De nuevo el "doble acento"

Re: De nuevo el "doble acento"

Re: De nuevo el "doble acento"

Re: De nuevo el "doble acento"