Propaganda molesta, algo mal (SOLUCIONADO)

[Lawson_fr]

Hola me salen una ventanas molestas, he pasado el Panda y el Ad-aware y no detecta nada extraño, pero las ventanas siguen, os dejo el hijacktis que hice:



Logfile of HijackThis v1.99.1

Scan saved at 23:02:42, on 24/06/2008

Platform: Windows XP SP2 (WinNT 5.01.2600)

MSIE: Internet Explorer v7.00 (7.00.6000.16674)



Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\SYSTEM32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\Ati2evxx.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\system32\svchost.exe

C:\Archivos de programa\Panda Security\Panda Internet Security 2008\TPSrv.exe

C:\WINDOWS\system32\svchost.exe

C:\Archivos de programa\Intel\Wireless\Bin\EvtEng.exe

C:\Archivos de programa\Intel\Wireless\Bin\S24EvMon.exe

C:\Archivos de programa\Lavasoft\Ad-Aware\aawservice.exe

C:\WINDOWS\system32\spoolsv.exe

c:\archivos de programa\archivos comunes\logitech\lvmvfm\LVPrcSrv.exe

C:\Acer\Empowering Technology\ePerformance\MemCheck.exe

c:\Archivos de programa\WIDCOMM\Bluetooth Software\bin\btwdins.exe

c:\WINDOWS\system32\IFXSPMGT.exe

c:\WINDOWS\system32\IFXTCS.exe

C:\Archivos de programa\Archivos comunes\LightScribe\LSSrvc.exe

C:\WINDOWS\system32\o2flash.exe

C:\Archivos de programa\Panda Security\Panda Internet Security 2008\PsCtrls.exe

C:\Archivos de programa\Panda Security\Panda Internet Security 2008\PavFnSvr.exe

C:\Archivos de programa\Archivos comunes\Panda Software\PavShld\pavprsrv.exe

C:\Archivos de programa\Panda Security\Panda Internet Security 2008\pavsrv51.exe

c:\Archivos de programa\Infineon\Security Platform Software\PSDsrvc.EXE

C:\Archivos de programa\Panda Security\Panda Internet Security 2008\AVENGINE.EXE

C:\Archivos de programa\Panda Security\Panda Internet Security 2008\AntiSpam\pskmssvc.exe

c:\archivos de programa\panda security\panda internet security 2008\firewall\PSHOST.EXE

C:\Archivos de programa\Panda Security\Panda Internet Security 2008\PsImSvc.exe

C:\Archivos de programa\Intel\Wireless\Bin\RegSrvc.exe

C:\Archivos de programa\CyberLink\Shared Files\RichVideo.exe

C:\WINDOWS\system32\svchost.exe

C:\Acer\Empowering Technology\eLock\Service\eLockServ.exe

C:\WINDOWS\SYSTEM32\Ati2evxx.exe

C:\WINDOWS\Explorer.EXE

c:\Archivos de programa\Infineon\Security Platform Software\PSDrt.exe

c:\Archivos de programa\Infineon\Security Platform Software\SpTna.exe

C:\WINDOWS\system32\rundll32.exe

C:\Archivos de programa\Synaptics\SynTP\SynTPEnh.exe

C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe

C:\Acer\Empowering Technology\ePresentation\ePresentation.exe

C:\Archivos de programa\ATI Technologies\ATI.ACE\cli.exe

C:\Acer\Empowering Technology\ePower\ePower_DMC.exe

C:\Acer\Empowering Technology\eRecovery\eRAgent.exe

C:\ARCHIV~1\LAUNCH~1\LManager.exe

C:\Acer\GraviSense\GraviSense.exe

C:\WINDOWS\system32\LVCOMSX.EXE

C:\Archivos de programa\Acer\OrbiCam\CameraAssistant.exe

C:\WINDOWS\system32\ElkCtrl.exe

F:\Power2Go\CLMLSvc.exe

C:\Archivos de programa\Java\jre1.6.0_05\bin\jusched.exe

C:\Archivos de programa\Panda Security\Panda Internet Security 2008\APVXDWIN.EXE

C:\WINDOWS\RTHDCPL.EXE

C:\WINDOWS\system32\wbem\unsecapp.exe

C:\Archivos de programa\Archivos comunes\Real\Update_OB\realsched.exe

C:\Archivos de programa\OLYMPUS\OLYMPUS Master 2\MMonitor.exe

C:\WINDOWS\system32\ctfmon.exe

C:\Archivos de programa\Nokia\Nokia PC Suite 6\PCSuite.exe

C:\Archivos de programa\WIDCOMM\Bluetooth Software\BTTray.exe

C:\Archivos de programa\Logitech\SetPoint\SetPoint.exe

C:\Archivos de programa\ATI Technologies\ATI.ACE\cli.exe

C:\Archivos de programa\ATI Technologies\ATI.ACE\cli.exe

C:\Archivos de programa\Panda Security\Panda Internet Security 2008\SRVLOAD.EXE

C:\Archivos de programa\Panda Security\Panda Internet Security 2008\WebProxy.exe

C:\Archivos de programa\Internet Explorer\IEXPLORE.EXE

C:\Archivos de programa\Internet Explorer\IEXPLORE.EXE

C:\Archivos de programa\PC Connectivity Solution\ServiceLayer.exe

C:\Archivos de programa\Archivos comunes\Logishrd\KHAL2\KHALMNPR.EXE

C:\Archivos de programa\Panda Security\Panda Internet Security 2008\PavBckPT.exe

C:\Archivos de programa\PC Connectivity Solution\Transports\NclUSBSrv.exe

C:\Archivos de programa\PC Connectivity Solution\Transports\NclRSSrv.exe

C:\Archivos de programa\PC Connectivity Solution\Transports\NclBCBTSrv.exe

c:\ARCHIV~1\WIDCOMM\BLUETO~1\BTSTAC~1.EXE

C:\DOCUME~1\JOSELU~1\CONFIG~1\Temp\RtkBtMnt.exe

C:\Archivos de programa\TuneUp Utilities 2008\OneClick.exe

C:\Archivos de programa\TuneUp Utilities 2008\RegistryCleaner.exe

C:\WINDOWS\System32\TuneUpDefragService.exe

C:\Archivos de programa\Internet Explorer\iexplore.exe

C:\Archivos de programa\Internet Explorer\iexplore.exe

C:\ARCHIV~1\WINZIP\winzip32.exe

C:\Archivos de programa\Internet Explorer\IEXPLORE.EXE

C:\Documents and Settings\Jose Luis\Mis documentos\HijackThis.exe



R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://es.msn.com

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.es/

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://es.msn.com

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://es.msn.com

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Vínculos

R3 - URLSearchHook: RadarSyncBar Toolbar - {7a3a9c78-3715-4fab-a21f-150dbd3d3d90} - C:\Archivos de programa\RadarSyncBar\tbRad0.dll

R3 - URLSearchHook: Share Accelerator MM Toolbar - {4596013b-6c31-408b-a266-deae5c086dc2} - C:\Archivos de programa\Share_Accelerator_MM\tbShar.dll

R3 - URLSearchHook: Online_TV Toolbar - {40d1c3a7-4ffb-4443-b3a0-a64b2df7fc3b} - C:\Archivos de programa\Online_TV\tbOnl1.dll

O2 - BHO: Aplicación auxiliar de vínculos de Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Archivos de programa\Archivos comunes\Adobe\Acrobat\ActiveX\AcroIEHelper.dll

O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Archivos de programa\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll

O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Archivos de programa\Real\RealPlayer\rpbrowserrecordplugin.dll

O2 - BHO: Online_TV Toolbar - {40d1c3a7-4ffb-4443-b3a0-a64b2df7fc3b} - C:\Archivos de programa\Online_TV\tbOnl1.dll

O2 - BHO: Share Accelerator MM Toolbar - {4596013b-6c31-408b-a266-deae5c086dc2} - C:\Archivos de programa\Share_Accelerator_MM\tbShar.dll

O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Archivos de programa\Java\jre1.6.0_05\bin\ssv.dll

O2 - BHO: RadarSyncBar Toolbar - {7a3a9c78-3715-4fab-a21f-150dbd3d3d90} - C:\Archivos de programa\RadarSyncBar\tbRad0.dll

O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)

O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Archivos de programa\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll

O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Archivos de programa\MSN Apps\MSN Toolbar\01.02.5000.1021\es\msntb.dll

O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\WINDOWS\system32\eDStoolbar.dll

O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Archivos de programa\MSN Apps\MSN Toolbar\01.02.5000.1021\es\msntb.dll

O3 - Toolbar: (no name) - {1962c5bc-e475-465b-823b-133e711bceb9} - (no file)

O3 - Toolbar: RadarSyncBar Toolbar - {7a3a9c78-3715-4fab-a21f-150dbd3d3d90} - C:\Archivos de programa\RadarSyncBar\tbRad0.dll

O3 - Toolbar: Share Accelerator MM Toolbar - {4596013b-6c31-408b-a266-deae5c086dc2} - C:\Archivos de programa\Share_Accelerator_MM\tbShar.dll

O3 - Toolbar: Online_TV Toolbar - {40d1c3a7-4ffb-4443-b3a0-a64b2df7fc3b} - C:\Archivos de programa\Online_TV\tbOnl1.dll

O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent

O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE

O4 - HKLM\..\Run: [AzMixerSel] C:\Archivos de programa\Realtek\InstallShield\AzMixerSel.exe

O4 - HKLM\..\Run: [SynTPEnh] C:\Archivos de programa\Synaptics\SynTP\SynTPEnh.exe

O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32

O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC

O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC

O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName

O4 - HKLM\..\Run: [eDataSecurity Loader] C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe 0

O4 - HKLM\..\Run: [Acer ePresentation HPD] C:\Acer\Empowering Technology\ePresentation\ePresentation.exe

O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe

O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe

O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe

O4 - HKLM\..\Run: [ATICCC] "C:\Archivos de programa\ATI Technologies\ATI.ACE\cli.exe" runtime -Delay

O4 - HKLM\..\Run: [ePower_DMC] C:\Acer\Empowering Technology\ePower\ePower_DMC.exe

O4 - HKLM\..\Run: [Boot] C:\Acer\Empowering Technology\ePower\Boot.exe

O4 - HKLM\..\Run: [eRecoveryService] C:\Acer\Empowering Technology\eRecovery\eRAgent.exe

O4 - HKLM\..\Run: [LManager] C:\ARCHIV~1\LAUNCH~1\LManager.exe

O4 - HKLM\..\Run: [GraviSense] C:\Acer\GraviSense\GraviSense.exe

O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE

O4 - HKLM\..\Run: [LogitechCameraAssistant] C:\Archivos de programa\Acer\OrbiCam\CameraAssistant.exe

O4 - HKLM\..\Run: [LogitechVideo[inspector]] C:\Archivos de programa\Acer\OrbiCam\InstallHelper.exe /inspect

O4 - HKLM\..\Run: [LogitechCameraService(E)] C:\WINDOWS\system32\ElkCtrl.exe /automation

O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE

O4 - HKLM\..\Run: [EPSON PictureMate] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I2P1.EXE /P17 "EPSON PictureMate" /O5 "LPT1:" /M "PictureMate"

O4 - HKLM\..\Run: [CLMLServer] "F:\Power2Go\CLMLSvc.exe"

O4 - HKLM\..\Run: [Power2GoExpress] "F:\Power2Go\Power2GoExpress.exe" /Startup

O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Archivos de programa\Java\jre1.6.0_05\bin\jusched.exe"

O4 - HKLM\..\Run: [OM2_Monitor] "C:\Archivos de programa\OLYMPUS\OLYMPUS Master 2\FirstStart.exe" /OM

O4 - HKLM\..\Run: [APVXDWIN] "C:\Archivos de programa\Panda Security\Panda Internet Security 2008\APVXDWIN.EXE" /s

O4 - HKLM\..\Run: [SCANINICIO] "C:\Archivos de programa\Panda Security\Panda Internet Security 2008\Inicio.exe"

O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE

O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE

O4 - HKLM\..\Run: [TomTomHOME.exe] "C:\Archivos de programa\TomTom HOME\TomTomHOME.exe" -s

O4 - HKLM\..\Run: [MATH DOES FIRST MODE] C:\Documents and Settings\All Users\Datos de programa\live 64 math does\frag browse.exe

O4 - HKLM\..\Run: [TkBellExe] "C:\Archivos de programa\Archivos comunes\Real\Update_OB\realsched.exe" -osboot

O4 - HKCU\..\Run: [LaunchList] C:\Archivos de programa\Pinnacle\TVCenter Pro\LaunchList2.exe

O4 - HKCU\..\Run: [OM2_Monitor] "C:\Archivos de programa\OLYMPUS\OLYMPUS Master 2\MMonitor.exe"

O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe

O4 - HKCU\..\Run: [TomTomHOME.exe] "C:\Archivos de programa\TomTom HOME 2\HOMERunner.exe"

O4 - HKCU\..\Run: [blah keep] C:\DOCUME~1\JOSELU~1\DATOSD~1\PROXYB~1\multimpeg.exe

O4 - HKCU\..\Run: [PC Suite Tray] "C:\Archivos de programa\Nokia\Nokia PC Suite 6\PCSuite.exe" -onlytray

O4 - Global Startup: BTTray.lnk = ?

O4 - Global Startup: Logitech SetPoint.lnk = C:\Archivos de programa\Logitech\SetPoint\SetPoint.exe

O8 - Extra context menu item: E&xportar a Microsoft Excel - res://C:\ARCHIV~1\MICROS~2\OFFICE11\EXCEL.EXE/3000

O8 - Extra context menu item: Enviar a &Bluetooth - c:\Archivos de programa\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm

O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Archivos de programa\Java\jre1.6.0_05\bin\ssv.dll

O9 - Extra 'Tools' menuitem: Consola de Sun Java - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Archivos de programa\Java\jre1.6.0_05\bin\ssv.dll

O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Archivos de programa\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll

O9 - Extra button: Referencia - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\ARCHIV~1\MICROS~2\OFFICE11\REFIEBAR.DLL

O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\Archivos de programa\WIDCOMM\Bluetooth Software\btsendto_ie.htm

O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\Archivos de programa\WIDCOMM\Bluetooth Software\btsendto_ie.htm

O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)

O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)

O9 - Extra button: @C:\Archivos de programa\Messenger\Msgslang.dll,-61144 - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Archivos de programa\Messenger\msmsgs.exe (file missing)

O9 - Extra 'Tools' menuitem: @C:\Archivos de programa\Messenger\Msgslang.dll,-61144 - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Archivos de programa\Messenger\msmsgs.exe (file missing)

O11 - Options group: [INTERNATIONAL] International*

O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204

O16 - DPF: {2D8ED06D-3C30-438B-96AE-4D110FDC1FB8} (ActiveScan 2.0 Installer Class) - http://acs.pandasoftware.com/activescan/cabs/as2stubie.cab

O16 - DPF: {BCBF3856-68F9-4FEE-ADA0-9D8D255B9F24} - https://empresas.gruposantander.es/bsch/gestion/suite/descarga/paquetes/instalacion/local/TransfCheques.cab

O16 - DPF: {D4DCE020-AF15-49B5-B86D-E92A28ADBBA5} (Install_GPS100 Control) - http://www.guepardgps.com/es/actualizaciones/bin/PLUS_GPS_SS.cab

O16 - DPF: {FE0BD779-44EE-4A4B-AA2E-743C63F2E5E6} (IWinAmpActiveX Class) - http://pdl.stream.aol.com/downloads/aol/unagi/ampx_en_dl.cab

O17 - HKLM\System\CCS\Services\Tcpip\..\{4D643CCD-B492-4FB8-8E43-F992E882B324}: NameServer = 80.58.61.254,80.58.61.250

O17 - HKLM\System\CCS\Services\Tcpip\..\{6FBCAC0C-AFBF-4B59-A8B9-651687684F92}: NameServer = 80.58.0.33,80.58.32.97

O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Archivos de programa\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll

O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\ARCHIV~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL

O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\ARCHIV~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL

O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\ARCHIV~1\ARCHIV~1\Skype\SKYPE4~1.DLL

O20 - Winlogon Notify: avldr - C:\WINDOWS\SYSTEM32\avldr.dll

O20 - Winlogon Notify: IfxWlxEN - C:\WINDOWS\SYSTEM32\IfxWlxEN.dll

O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxdev.dll

O20 - Winlogon Notify: LBTWlgn - c:\archivos de programa\archivos comunes\logitech\bluetooth\LBTWlgn.dll

O20 - Winlogon Notify: psfus - C:\WINDOWS\SYSTEM32\psqlpwd.dll

O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll

O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Archivos de programa\Lavasoft\Ad-Aware\aawservice.exe

O23 - Service: Memory Check Service (AcerMemUsageCheckService) - Acer Inc. - C:\Acer\Empowering Technology\ePerformance\MemCheck.exe

O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe

O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - c:\Archivos de programa\WIDCOMM\Bluetooth Software\bin\btwdins.exe

O23 - Service: eLock Service (eLockService) - - C:\Acer\Empowering Technology\eLock\Service\eLockServ.exe

O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Archivos de programa\Intel\Wireless\Bin\EvtEng.exe

O23 - Service: Firebird Server - MAGIX Instance (FirebirdServerMAGIXInstance) - MAGIX® - F:\Archivos de programa\MAGIX\Common\Database\bin\fbserver.exe

O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - c:\Archivos de programa\Archivos comunes\InstallShield\Driver\11\Intel 32\IDriverT.exe

O23 - Service: Security Platform Management Service (IFXSpMgtSrv) - Infineon Technologies AG - c:\WINDOWS\system32\IFXSPMGT.exe

O23 - Service: Trusted Platform Core Service (IFXTCS) - Infineon Technologies AG - c:\WINDOWS\system32\IFXTCS.exe

O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Archivos de programa\Archivos comunes\Logitech\Bluetooth\LBTServ.exe

O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Archivos de programa\Archivos comunes\LightScribe\LSSrvc.exe

O23 - Service: Logitech Process Monitor (LVPrcSrv) - Logitech - c:\archivos de programa\archivos comunes\logitech\lvmvfm\LVPrcSrv.exe

O23 - Service: O2Micro Flash Memory (O2Flash) - Unknown owner - C:\WINDOWS\system32\o2flash.exe

O23 - Service: Panda Software Controller - Panda Software International - C:\Archivos de programa\Panda Security\Panda Internet Security 2008\PsCtrls.exe

O23 - Service: Panda Function Service (PAVFNSVR) - Panda Software International - C:\Archivos de programa\Panda Security\Panda Internet Security 2008\PavFnSvr.exe

O23 - Service: Panda Process Protection Service (PavPrSrv) - Panda Software - C:\Archivos de programa\Archivos comunes\Panda Software\PavShld\pavprsrv.exe

O23 - Service: Panda anti-virus service (PAVSRV) - Panda Software International - C:\Archivos de programa\Panda Security\Panda Internet Security 2008\pavsrv51.exe

O23 - Service: Personal Secure Drive Service (PersonalSecureDriveService) - Infineon Technologies AG - c:\Archivos de programa\Infineon\Security Platform Software\PSDsrvc.EXE

O23 - Service: Panda Antispam Engine (pmshellsrv) - Panda Software International - C:\Archivos de programa\Panda Security\Panda Internet Security 2008\AntiSpam\pskmssvc.exe

O23 - Service: Panda Host Service (PSHost) - Panda Software International - c:\archivos de programa\panda security\panda internet security 2008\firewall\PSHOST.EXE

O23 - Service: Panda IManager Service (PSIMSVC) - Panda Software International - C:\Archivos de programa\Panda Security\Panda Internet Security 2008\PsImSvc.exe

O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Archivos de programa\Intel\Wireless\Bin\RegSrvc.exe

O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Archivos de programa\CyberLink\Shared Files\RichVideo.exe

O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini (file missing)

O23 - Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) - Intel Corporation - C:\Archivos de programa\Intel\Wireless\Bin\S24EvMon.exe

O23 - Service: ServiceLayer - Nokia. - C:\Archivos de programa\PC Connectivity Solution\ServiceLayer.exe

O23 - Service: Panda TPSrv (TPSrv) - Panda Software International - C:\Archivos de programa\Panda Security\Panda Internet Security 2008\TPSrv.exe

O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software GmbH - C:\WINDOWS\System32\TuneUpDefragService.exe

O23 - Service: UPnPService - Magix AG - C:\Archivos de programa\Archivos comunes\MAGIX Shared\UPnPService\UPnPService.exe

O23 - Service: BlueSoleilCS (vvq2o94ome6aulaf) - Unknown owner - C:\WINDOWS\system32\mjkfn.exe (file missing)

O23 - Service: CommServer (xpo1otaiu4y2q) - Unknown owner - C:\WINDOWS\system32\fszca.exe (file missing)

[lucl]

Antes de nada pasa estos dos antitrojanos que te indico nos pegas el log que te dejaran en C infosat.txt y dime si conoces esto



:\WINDOWS\system32\IFXSPMGT.exe

c:\WINDOWS\system32\IFXTCS.exe



saludos





http://www.zonavirus.com/descargas/elistara.asp



http://www.zonavirus.com/descargas/elitriip.asp

[Lawson_fr]

El Elitriip lo pase ya antes de la consulta y todo bien, solo me dijo que me faltaba el SP3. El EliStara lo paso ahora y te cuento despues.



Las entradas estas no las conozco de nada:



IFXSPMGT.exe

IFXTCS.exe







Gracias

[lucl]

Pues subelas a virustotal y analizalas, nos pegas el log con el resultado de cada una de ellas, saludos



http://www.virustotal.com

[msc hotline sat]

Y vemos estos ficheros sospechosos:



C:\Archivos de programa\RadarSyncBar\tbRad0.dll



C:\Documents and Settings\All Users\Datos de programa\live 64 math does\frag browse.exe



C:\DOCUME~1\JOSELU~1\DATOSD~1\PROXYB~1\multimpeg.exe



Envianos muestra de los mismos para analizar:



[b]¿Como enviar las muestras a zonavirus? - Para ello recordar[/b]:

https://foros.zonavirus.com/viewtopic.php?f=5&t=14253





saludos



ms, 25-06-2008

[Lawson_fr]

La prueba con virustotal del primer archivo:



Motor antivirus Versión Última actualización Resultado

AhnLab-V3 2008.6.25.0 2008.06.25 -

AntiVir 7.8.0.59 2008.06.25 -

Authentium 5.1.0.4 2008.06.24 -

Avast 4.8.1195.0 2008.06.25 -

AVG 7.5.0.516 2008.06.25 -

BitDefender 7.2 2008.06.25 -

CAT-QuickHeal 9.50 2008.06.23 -

ClamAV 0.93.1 2008.06.25 -

DrWeb 4.44.0.09170 2008.06.25 -

eSafe 7.0.17.0 2008.06.25 -

eTrust-Vet 31.6.5904 2008.06.25 -

Ewido 4.0 2008.06.25 -

F-Prot 4.4.4.56 2008.06.24 -

F-Secure 7.60.13501.0 2008.06.24 -

Fortinet 3.14.0.0 2008.06.25 -

GData 2.0.7306.1023 2008.06.25 -

Ikarus T3.1.1.26.0 2008.06.25 -

Kaspersky 7.0.0.125 2008.06.25 -

McAfee 5324 2008.06.24 -

Microsoft 1.3604 2008.06.25 -

NOD32v2 3217 2008.06.25 -

Norman 5.80.02 2008.06.24 -

Panda 9.0.0.4 2008.06.25 -

Prevx1 V2 2008.06.25 -

Rising 20.50.22.00 2008.06.25 -

Sophos 4.30.0 2008.06.25 -

Sunbelt 3.0.1153.1 2008.06.15 -

Symantec 10 2008.06.25 -

TheHacker 6.2.92.361 2008.06.25 -

TrendMicro 8.700.0.1004 2008.06.25 -

VBA32 3.12.6.8 2008.06.25 -

VirusBuster 4.5.11.0 2008.06.23 -

Webwasher-Gateway 6.6.2 2008.06.25 -

Información adicional

Tamano archivo: 507904 bytes

MD5...: 22ffe23332f1c5ed2b1ce886dc587f1b

SHA1..: 06de94b00391127df8153437a256874aadfbdf15

SHA256: d8881bbd004e1db8097ec8bf160c23d95b9a5d248931c205dea8a2ef102f888a

SHA512: 2152d959fb0083b43f81d69ee0c73d875cd152dd372bd6faa7219c956aeb7ca0

3da7e6b83da27cd4bf2f115463ceeb03907514439af165d1b19011b183e13098

PEiD..: -

PEInfo: PE Structure information



( base data )

entrypointaddress.: 0x4588d4

timedatestamp.....: 0x441190a1 (Fri Mar 10 14:43:45 2006)

machinetype.......: 0x14c (I386)



( 4 sections )

name viradd virsiz rawdsiz ntrpy md5

.text 0x1000 0x5ef78 0x5f000 6.00 35bf87e5e3a88d1b1b615cf966c82168

.rdata 0x60000 0x11fca 0x12000 5.20 2ed04836a08eeca7f632fd8e6792dda0

.data 0x72000 0x97a0 0x7000 2.42 917f81f7215c8c273e7ff1a6d3a448f9

.rsrc 0x7c000 0x2c78 0x3000 4.96 e48cc64d7aa30f1e20a7ae3779003a3c



( 15 imports )

> VERSION.dll: VerQueryValueW, GetFileVersionInfoSizeW, GetFileVersionInfoW

> CRYPT32.dll: CertSerializeCertificateStoreElement, CertFindCertificateInStore, CertGetCertificateContextProperty, CertFreeCertificateContext, CertEnumCertificatesInStore, CertControlStore, CertOpenStore, CertCloseStore

> USERENV.dll: DestroyEnvironmentBlock, CreateEnvironmentBlock

> MFC71U.DLL: -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -

> MSVCR71.dll: realloc, __1type_info@@UAE@XZ, __security_error_handler, _CRT_RTC_INIT, __dllonexit, _onexit, _terminate@@YAXXZ, _controlfp, __p__fmode, __p__commode, _adjust_fdiv, __setusermatherr, _initterm, memcmp, memset, __CxxFrameHandler, _CxxThrowException, memcpy, _except_handler3, __wgetmainargs, free, __0exception@@QAE@ABV0@@Z, __1exception@@UAE@XZ, __0exception@@QAE@XZ, _beginthreadex, memmove, wcsncpy, wcslen, _purecall, malloc, __set_app_type, __0bad_cast@@QAE@ABV0@@Z, __1bad_cast@@UAE@XZ, __0bad_cast@@QAE@PBD@Z, _snwprintf, wcstol, swprintf, _wcsicmp, swscanf, wcscmp, _c_exit, _exit, _XcptFilter, _cexit, exit, _wcmdln, _amsg_exit

> KERNEL32.dll: lstrcmpiW, GetProcessHeap, HeapFree, HeapAlloc, GetModuleFileNameA, DebugBreak, LoadLibraryA, GetVersionExA, GetSystemTimeAsFileTime, GetCurrentProcessId, ExpandEnvironmentStringsW, FreeLibrary, GetLastError, GetVersionExW, InterlockedExchange, GetACP, GetLocaleInfoA, GetThreadLocale, CloseHandle, ResetEvent, Sleep, SetEvent, OpenEventW, EnterCriticalSection, LeaveCriticalSection, InitializeCriticalSection, DeleteCriticalSection, RaiseException, VirtualQuery, VirtualAlloc, VirtualFree, VirtualProtect, GetCurrentThread, GetExitCodeProcess, WaitForSingleObject, WaitForMultipleObjects, CreateEventW, GetExitCodeThread, CreateThread, SetThreadPriority, GetThreadPriority, GetCurrentThreadId, RegisterWaitForSingleObject, UnregisterWait, GetCommandLineW, GetModuleFileNameW, InterlockedIncrement, InterlockedDecrement, lstrlenW, GetModuleHandleW, lstrcpyW, MultiByteToWideChar, SizeofResource, LoadResource, FindResourceW, LoadLibraryExW, lstrcpynW, lstrcatW, GetCurrentProcess, CreateMutexW, ReleaseMutex, SetLastError, LocalFree, GetComputerNameW, GetProcAddress, LoadLibraryW, GetUserDefaultUILanguage, GetSystemDefaultUILanguage, VerifyVersionInfoW, VerSetConditionMask, GetFullPathNameW, GetStringTypeExW, GetDriveTypeW, GetModuleHandleA, GetStartupInfoW, ExitProcess, QueryPerformanceCounter, GetTickCount

> USER32.dll: GetMessageW, LoadStringW, SetForegroundWindow, DispatchMessageW, AttachThreadInput, GetWindowThreadProcessId, GetForegroundWindow, TranslateMessage, PostThreadMessageW, CharNextW, UnregisterClassW, GetDC, UnregisterClassA, ReleaseDC, wsprintfW, MsgWaitForMultipleObjects, SetFocus, PeekMessageW

> GDI32.dll: CreateFontW, GetDeviceCaps

> ADVAPI32.dll: QueryServiceStatusEx, DuplicateToken, OpenThreadToken, DuplicateTokenEx, CreateProcessAsUserW, RegDeleteValueW, RegCloseKey, RegCreateKeyExW, RegOpenKeyExW, RegQueryValueExW, RegSetValueExW, CloseServiceHandle, StartServiceW, OpenServiceW, OpenSCManagerW, RegisterServiceCtrlHandlerExW, SetServiceStatus, SetSecurityDescriptorDacl, InitializeSecurityDescriptor, ChangeServiceConfig2W, CreateServiceW, DeleteService, ControlService, StartServiceCtrlDispatcherW, RegOpenKeyW, RevertToSelf, ImpersonateLoggedOnUser, FileEncryptionStatusW, DecryptFileW, RegLoadKeyW, RegUnLoadKeyW, LookupPrivilegeValueW, AdjustTokenPrivileges, ConvertStringSidToSidW, LookupAccountSidW, AllocateAndInitializeSid, CheckTokenMembership, FreeSid, RegisterEventSourceW, ReportEventW, DeregisterEventSource, GetUserNameW, LookupAccountNameW, ConvertSidToStringSidW, CryptGenRandom, CryptAcquireContextW, CryptCreateHash, CryptHashData, CryptGetHashParam, CryptDestroyHash, CryptReleaseContext, RegEnumValueW, RegOpenCurrentUser, GetTokenInformation, OpenProcessToken, SetSecurityDescriptorGroup, IsValidSid, GetLengthSid, CopySid, SetSecurityDescriptorOwner, RegQueryInfoKeyW, RegEnumKeyExW, RegDeleteKeyW

> SHELL32.dll: SHCreateDirectoryExW, SHFileOperationW, SHGetFolderPathW

> SHLWAPI.dll: PathFindExtensionW, PathRenameExtensionW, PathRemoveFileSpecW, PathRemoveBackslashW, PathAddBackslashW, PathIsDirectoryW, PathFileExistsW

> ole32.dll: CoTaskMemFree, CoRevertToSelf, CoImpersonateClient, StringFromCLSID, CLSIDFromProgID, CoCreateInstance, CoUninitialize, CoInitializeEx, CoQueryClientBlanket, CoInitialize, CoSuspendClassObjects, CoResumeClassObjects, CoInitializeSecurity, CoTaskMemAlloc, CoTaskMemRealloc, CoRegisterClassObject, CoRevokeClassObject, StringFromGUID2, CoCreateGuid

> OLEAUT32.dll: -, -, -, -, -, -, -, -, -, -, -, -, -, -

> MSVCP71.dll: _snextc@_$basic_streambuf@DU_$char_traits@D@std@@@std@@QAEHXZ, _sgetc@_$basic_streambuf@DU_$char_traits@D@std@@@std@@QAEHXZ, _rdbuf@_$basic_ios@DU_$char_traits@D@std@@@std@@QBEPAV_$basic_streambuf@DU_$char_traits@D@std@@@2@XZ, _max_size@_$basic_string@DU_$char_traits@D@std@@V_$allocator@D@2@@std@@QBEIXZ, _width@ios_base@std@@QBEHXZ, _erase@_$basic_string@DU_$char_traits@D@std@@V_$allocator@D@2@@std@@QAEAAV12@II@Z, _npos@_$basic_string@DU_$char_traits@D@std@@V_$allocator@D@2@@std@@2IB, __1locale@std@@QAE@XZ, _getloc@ios_base@std@@QBE_AVlocale@2@XZ, __Ipfx@_$basic_istream@DU_$char_traits@D@std@@@std@@QAE_N_N@Z, __Unlock@_$basic_streambuf@DU_$char_traits@D@std@@@std@@QAEXXZ, __Lock@_$basic_streambuf@DU_$char_traits@D@std@@@std@@QAEXXZ, __1_Lockit@std@@QAE@XZ, __Register@facet@locale@std@@QAEXXZ, __Getcat@_$ctype@G@std@@SAIPAPBVfacet@locale@2@@Z, __Incref@facet@locale@std@@QAEXXZ, __Getcat@_$ctype@D@std@@SAIPAPBVfacet@locale@2@@Z, __Getfacet@locale@std@@QBEPBVfacet@12@I@Z, __Bid@locale@std@@QAEIXZ, _id@_$ctype@D@std@@2V0locale@2@A, __0_Lockit@std@@QAE@H@Z, _widen@_$basic_ios@DU_$char_traits@D@std@@@std@@QBEDD@Z, _size@_$basic_string@DU_$char_traits@D@std@@V_$allocator@D@2@@std@@QBEIXZ, _sbumpc@_$basic_streambuf@DU_$char_traits@D@std@@@std@@QAEHXZ, _to_int_type@_$char_traits@D@std@@SAHABD@Z, __A_$basic_string@DU_$char_traits@D@std@@V_$allocator@D@2@@std@@QBEABDI@Z, _sputc@_$basic_streambuf@DU_$char_traits@D@std@@@std@@QAEHD@Z, _fill@_$basic_ios@DU_$char_traits@D@std@@@std@@QBEDXZ, _flags@ios_base@std@@QBEHXZ, _flush@_$basic_ostream@DU_$char_traits@D@std@@@std@@QAEAAV12@XZ, _tie@_$basic_ios@DU_$char_traits@D@std@@@std@@QBEPAV_$basic_ostream@DU_$char_traits@D@std@@@2@XZ, _good@ios_base@std@@QBE_NXZ, __Osfx@_$basic_ostream@DU_$char_traits@D@std@@@std@@QAEXXZ, _uncaught_exception@std@@YA_NXZ, _setstate@_$basic_ios@GU_$char_traits@G@std@@@std@@QAEXH_N@Z, _append@_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@QAEAAV12@IG@Z, _is@_$ctype@G@std@@QBE_NFG@Z, _to_char_type@_$char_traits@G@std@@SAGABG@Z, _eof@_$char_traits@G@std@@SAGXZ, _snextc@_$basic_streambuf@GU_$char_traits@G@std@@@std@@QAEGXZ, _sgetc@_$basic_streambuf@GU_$char_traits@G@std@@@std@@QAEGXZ, _rdbuf@_$basic_ios@GU_$char_traits@G@std@@@std@@QBEPAV_$basic_streambuf@GU_$char_traits@G@std@@@2@XZ, _max_size@_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@QBEIXZ, _erase@_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@QAEAAV12@II@Z, _npos@_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@2IB, __Ipfx@_$basic_istream@GU_$char_traits@G@std@@@std@@QAE_N_N@Z, __Unlock@_$basic_streambuf@GU_$char_traits@G@std@@@std@@QAEXXZ, __Lock@_$basic_streambuf@GU_$char_traits@G@std@@@std@@QAEXXZ, _eq_int_type@_$char_traits@G@std@@SA_NABG0@Z, _eof@_$char_traits@D@std@@SAHXZ, _eq_int_type@_$char_traits@D@std@@SA_NABH0@Z, _to_char_type@_$char_traits@D@std@@SADABH@Z, _is@_$ctype@D@std@@QBE_NFD@Z, _append@_$basic_string@DU_$char_traits@D@std@@V_$allocator@D@2@@std@@QAEAAV12@ID@Z, _append@_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@QAEAAV12@PBG@Z, __$_9GU_$char_traits@G@std@@V_$allocator@G@1@@std@@YA_NABV_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@0@0@Z, _at@_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@QAEAAGI@Z, __$_8GU_$char_traits@G@std@@V_$allocator@G@1@@std@@YA_NABV_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@0@0@Z, _swap@_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@QAEXAAV12@@Z, __$_MGU_$char_traits@G@std@@V_$allocator@G@1@@std@@YA_NABV_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@0@0@Z, _reserve@_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@QAEXI@Z, _resize@_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@QAEXI@Z, __Osfx@_$basic_ostream@GU_$char_traits@G@std@@@std@@QAEXXZ, _tie@_$basic_ios@GU_$char_traits@G@std@@@std@@QBEPAV_$basic_ostream@GU_$char_traits@G@std@@@2@XZ, _flush@_$basic_ostream@GU_$char_traits@G@std@@@std@@QAEAAV12@XZ, _fill@_$basic_ios@GU_$char_traits@G@std@@@std@@QBEGXZ, _sputc@_$basic_streambuf@GU_$char_traits@G@std@@@std@@QAEGG@Z, __A_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@QBEABGI@Z, _to_int_type@_$char_traits@G@std@@SAGABG@Z, _sbumpc@_$basic_streambuf@GU_$char_traits@G@std@@@std@@QAEGXZ, _widen@_$basic_ios@GU_$char_traits@G@std@@@std@@QBEGD@Z, _id@_$ctype@G@std@@2V0locale@2@A, _setstate@_$basic_ios@DU_$char_traits@D@std@@@std@@QAEXH_N@Z, _width@ios_base@std@@QAEHH@Z, __Y_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@QAEAAV01@G@Z, __0_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@QAE@IG@Z, __Y_$basic_string@DU_$char_traits@D@std@@V_$allocator@D@2@@std@@QAEAAV01@D@Z, __Y_$basic_string@DU_$char_traits@D@std@@V_$allocator@D@2@@std@@QAEAAV01@PBD@Z, __0_$basic_string@DU_$char_traits@D@std@@V_$allocator@D@2@@std@@QAE@ID@Z, __Y_$basic_string@DU_$char_traits@D@std@@V_$allocator@D@2@@std@@QAEAAV01@ABV01@@Z, _size@_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@QBEIXZ, __1_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@QAE@XZ, __0_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@QAE@PBG@Z, __4_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@QAEAAV01@ABV01@@Z, __0_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@QAE@XZ, _c_str@_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@QBEPBGXZ, __4_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@QAEAAV01@PBG@Z, _empty@_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@QBE_NXZ, __1_$basic_string@DU_$char_traits@D@std@@V_$allocator@D@2@@std@@QAE@XZ, __0_$basic_string@DU_$char_traits@D@std@@V_$allocator@D@2@@std@@QAE@PBD@Z, _c_str@_$basic_string@DU_$char_traits@D@std@@V_$allocator@D@2@@std@@QBEPBDXZ, __0_$basic_string@DU_$char_traits@D@std@@V_$allocator@D@2@@std@@QAE@ABV01@@Z, __0_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@QAE@ABV01@@Z, _length@_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@QBEIXZ, __Y_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@QAEAAV01@PBG@Z, __Y_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@QAEAAV01@ABV01@@Z

> IfxSpArc.dll: _ArcCreateInstance@IFXTCGArc@@YAPAVISPArcManagement@1@W4TYPE_ARCACCESS@1@@Z, _QueryValueBinary@CSpArcConfigDataSet@IFXTCGArc@@QAEIABV_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@0AAPAEAAK@Z, __0CSPDataRecord@IFXTCGArc@@QAE@PAVCSPBaseObject@1@@Z, __0CSpArcConfigDataSet@IFXTCGArc@@QAE@XZ, __1CSPDataRecord@IFXTCGArc@@UAE@XZ, __1CSPArcArchiveWrapper@IFXTCGArc@@QAE@XZ, __0CSPArcArchiveWrapper@IFXTCGArc@@QAE@PAVISPArcManagement@1@@Z, _SetName@CSpArcConfigDataSet@IFXTCGArc@@QAEIABV_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@@Z, _QueryValueDWORD@CSpArcConfigDataSet@IFXTCGArc@@QAEIABV_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@0AAK@Z, _ArcReleaseInstance@IFXTCGArc@@YA_NXZ, _GetURI@CSpArcLinkageListDataSet@IFXTCGArc@@QAEIABV_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@AAV34@@Z, _EnumLinkageKeys@CSpArcLinkageListDataSet@IFXTCGArc@@QAEIAAV_$vector@V_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@V_$allocator@V_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@@2@@std@@@Z, __CCSPArcArchiveWrapper@IFXTCGArc@@QAEPAVCSPArchive@1@XZ, _OpenArchive@CSPArcArchiveWrapper@IFXTCGArc@@QAEIW4TYPE_SP_ARCHIVE@2@KKABV_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@11@Z, __1CSPArcStoreIterator@IFXTCGArc@@QAE@XZ, _CloseArchive@CSPArcArchiveWrapper@IFXTCGArc@@QAEIXZ, __CCSPArcStoreIterator@IFXTCGArc@@QAEPAV_$vector@PAVCSPStore@IFXTCGArc@@V_$allocator@PAVCSPStore@IFXTCGArc@@@std@@@std@@XZ, _GetAllStores@CSPArcStoreIterator@IFXTCGArc@@QAEIXZ, __0CSPArcStoreIterator@IFXTCGArc@@QAE@PAVCSPArchive@1@@Z, __BCSPArcArchiveWrapper@IFXTCGArc@@QAEPAVCSPArchive@1@XZ, _SaveArchive@CSPArcArchiveWrapper@IFXTCGArc@@QAEIXZ, __0CSpArcLinkageListDataSet@IFXTCGArc@@QAE@XZ, _SetValueDWORD@CSpArcConfigDataSet@IFXTCGArc@@QAEIABV_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@0K@Z, _SetStoreName@CSpArcCapiCertDataSet@IFXTCGArc@@QAEIABV_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@@Z, _RemoveCertificate@CSpArcCapiCertDataSet@IFXTCGArc@@QAEIABV_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@@Z, _SetCertificate@CSpArcCapiCertDataSet@IFXTCGArc@@QAEIABV_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@PAEK@Z, _EnumCertificates@CSpArcCapiCertDataSet@IFXTCGArc@@QAEIAAV_$vector@V_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@V_$allocator@V_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@@2@@std@@@Z, __0CSpArcCapiCertDataSet@IFXTCGArc@@QAE@XZ, _AddURI@CSpArcLinkageListDataSet@IFXTCGArc@@QAEIABV_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@0@Z, _RemoveURI@CSpArcLinkageListDataSet@IFXTCGArc@@QAEIABV_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@@Z, _HasURI@CSpArcLinkageListDataSet@IFXTCGArc@@QAEIABV_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@@Z



( 0 exports )





Esto dice el segundo archivo:



Motor antivirus Versión Última actualización Resultado

AhnLab-V3 2008.6.25.0 2008.06.25 -

AntiVir 7.8.0.59 2008.06.25 -

Authentium 5.1.0.4 2008.06.24 -

Avast 4.8.1195.0 2008.06.25 -

AVG 7.5.0.516 2008.06.25 -

BitDefender 7.2 2008.06.25 -

CAT-QuickHeal 9.50 2008.06.23 -

ClamAV 0.93.1 2008.06.25 -

DrWeb 4.44.0.09170 2008.06.25 -

eSafe 7.0.17.0 2008.06.25 -

eTrust-Vet 31.6.5904 2008.06.25 -

Ewido 4.0 2008.06.25 -

F-Prot 4.4.4.56 2008.06.24 -

F-Secure 7.60.13501.0 2008.06.24 -

Fortinet 3.14.0.0 2008.06.25 -

GData 2.0.7306.1023 2008.06.25 -

Ikarus T3.1.1.26.0 2008.06.25 -

Kaspersky 7.0.0.125 2008.06.25 -

McAfee 5324 2008.06.24 -

Microsoft 1.3604 2008.06.25 -

NOD32v2 3217 2008.06.25 -

Norman 5.80.02 2008.06.24 -

Panda 9.0.0.4 2008.06.25 -

Prevx1 V2 2008.06.25 -

Rising 20.50.22.00 2008.06.25 -

Sophos 4.30.0 2008.06.25 -

Sunbelt 3.0.1153.1 2008.06.15 -

Symantec 10 2008.06.25 -

TheHacker 6.2.92.361 2008.06.25 -

TrendMicro 8.700.0.1004 2008.06.25 -

VBA32 3.12.6.8 2008.06.25 -

VirusBuster 4.5.11.0 2008.06.23 -

Webwasher-Gateway 6.6.2 2008.06.25 -

Información adicional

Tamano archivo: 741376 bytes

MD5...: 7d3c0ebb225b38c008ee292bae6b2c5b

SHA1..: 7c064eba01be8a627deaa6f6963965deba753e26

SHA256: d3aadb368d108c5379399d6e3290d2f5a9702f2569bfa09ef86ec0c94b1c7a84

SHA512: 01d97cd8350d9a87eeadbcdbcc6bad305b5fe535a04b6b797d8a83bc4ab38b28

d35b3eefda5892716df1bc05ea965db8886cee9eb5fff0bdbf7b36e973b67835

PEiD..: -

PEInfo: PE Structure information



( base data )

entrypointaddress.: 0x483e98

timedatestamp.....: 0x44118af5 (Fri Mar 10 14:19:33 2006)

machinetype.......: 0x14c (I386)



( 4 sections )

name viradd virsiz rawdsiz ntrpy md5

.text 0x1000 0x8ae78 0x8b000 6.08 ef936e95986e8d4ebdce851875b02eea

.rdata 0x8c000 0x1b2e4 0x1c000 4.55 322c5511147fee371d14523e7cc97da8

.data 0xa8000 0x69a4 0x5000 2.33 7aaa1e01d80af865b66d4ff1906161ce

.rsrc 0xaf000 0x74c0 0x8000 4.71 e4641bf5509f5c2e342a4654004ae492



( 13 imports )

> VERSION.dll: VerQueryValueW, GetFileVersionInfoSizeW, GetFileVersionInfoW

> MFC71U.DLL: -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -

> MSVCR71.dll: _amsg_exit, free, wcscmp, towupper, wcsncpy, _purecall, wcsncat, _vsnwprintf, _ftime, _snwprintf, _wctime, fwprintf, _wrename, _wremove, _wfopen, _wcsupr, _wsplitpath, fclose, _wcslwr, __CxxFrameHandler, _CxxThrowException, memcpy, memset, __0exception@@QAE@ABV0@@Z, __1exception@@UAE@XZ, memmove, __0exception@@QAE@XZ, wcsncmp, mbstowcs, memcmp, __0bad_cast@@QAE@ABV0@@Z, __1bad_cast@@UAE@XZ, __0bad_cast@@QAE@PBD@Z, _except_handler3, __set_new_mode@@YAHH@Z, _controlfp, _onexit, __dllonexit, _terminate@@YAXXZ, __security_error_handler, __1type_info@@UAE@XZ, _CRT_RTC_INIT, __set_app_type, __p__fmode, __p__commode, _adjust_fdiv, __setusermatherr, _initterm, __wgetmainargs, _wutime, _wcmdln, exit, _cexit, _XcptFilter, _exit, _c_exit, wcstol, realloc, malloc, wcslen, wcsstr, fflush, __set_new_handler@@YAP6AHI@ZP6AHI@Z@Z

> KERNEL32.dll: GetProcessHeap, HeapFree, HeapAlloc, GetModuleFileNameA, GetSystemTimeAsFileTime, GetTickCount, QueryPerformanceCounter, DebugBreak, LoadLibraryA, GetVersionExA, ExitProcess, GetStartupInfoW, GetModuleHandleA, GetDriveTypeW, GetStringTypeExW, GetFullPathNameW, VerSetConditionMask, VerifyVersionInfoW, GetSystemDefaultUILanguage, GetUserDefaultUILanguage, LocalFree, SetLastError, ExpandEnvironmentStringsW, GetCurrentProcess, lstrcatW, lstrcpynW, LoadLibraryExW, FindResourceW, LoadResource, SizeofResource, MultiByteToWideChar, lstrcpyW, GetModuleHandleW, lstrlenW, InterlockedDecrement, InterlockedIncrement, GetCommandLineW, lstrcmpiW, CreateEventW, CreateThread, SetEvent, GetCurrentThreadId, InitializeCriticalSection, DeleteCriticalSection, EnterCriticalSection, LeaveCriticalSection, GetVersionExW, InterlockedExchange, GetACP, GetLocaleInfoA, GetThreadLocale, RaiseException, ResetEvent, WaitForMultipleObjects, WaitForSingleObject, Sleep, SetThreadPriority, GetCurrentThread, GetLastError, ResumeThread, GetProcAddress, LoadLibraryW, FreeLibrary, OutputDebugStringW, CloseHandle, ReadFile, GetFileSize, FileTimeToSystemTime, FileTimeToLocalFileTime, GetFileTime, CreateFileW, GetVersion, GetSystemDirectoryW, GetComputerNameW, GetModuleFileNameW, OpenMutexW, CreateMutexW, ReleaseMutex, GetCurrentProcessId

> USER32.dll: UnregisterClassW, wsprintfW, PostThreadMessageW, DispatchMessageW, GetMessageW, LoadStringW, SetForegroundWindow, SetFocus, AttachThreadInput, GetWindowThreadProcessId, GetForegroundWindow, TranslateMessage, UnregisterClassA, MsgWaitForMultipleObjects, ReleaseDC, GetDC, CharNextW, PeekMessageW

> GDI32.dll: CreateFontW, GetDeviceCaps

> ADVAPI32.dll: RegEnumValueW, CreateServiceW, DeleteService, RegCloseKey, RegQueryValueExW, RegOpenKeyExW, DeregisterEventSource, ReportEventW, RegisterEventSourceW, GetUserNameW, CloseServiceHandle, OpenServiceW, OpenSCManagerW, RegisterServiceCtrlHandlerExW, SetServiceStatus, FileEncryptionStatusW, DecryptFileW, RegLoadKeyW, RegUnLoadKeyW, LookupPrivilegeValueW, AdjustTokenPrivileges, ConvertStringSidToSidW, LookupAccountSidW, AllocateAndInitializeSid, CheckTokenMembership, FreeSid, LookupAccountNameW, ConvertSidToStringSidW, CryptGenRandom, CryptAcquireContextW, CryptCreateHash, CryptHashData, CryptGetHashParam, CryptDestroyHash, CryptReleaseContext, ControlService, RegOpenCurrentUser, GetTokenInformation, OpenThreadToken, OpenProcessToken, SetSecurityDescriptorGroup, IsValidSid, GetLengthSid, CopySid, SetSecurityDescriptorOwner, InitializeSecurityDescriptor, RegQueryInfoKeyW, RegEnumKeyExW, RegCreateKeyExW, RegDeleteKeyW, RegSetValueExW, RegDeleteValueW, StartServiceCtrlDispatcherW, ChangeServiceConfig2W

> SHELL32.dll: SHFileOperationW, SHGetFolderPathW

> SHLWAPI.dll: PathFindExtensionW, PathFileExistsW, PathRenameExtensionW, PathRemoveFileSpecW, PathRemoveBackslashW, PathAddBackslashW, PathIsDirectoryW

> ole32.dll: CoCreateFreeThreadedMarshaler, CoCreateGuid, StringFromCLSID, StringFromGUID2, CoRevokeClassObject, CoRegisterClassObject, CoRevertToSelf, CoTaskMemAlloc, CoTaskMemFree, CoCreateInstance, CoInitialize, CoInitializeEx, CoInitializeSecurity, CoUninitialize, CoQueryClientBlanket, CoImpersonateClient, CoTaskMemRealloc

> OLEAUT32.dll: -, -, -, -, -, -

> MSVCP71.dll: __0_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@QAE@IG@Z, __Y_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@QAEAAV01@ABV01@@Z, __Y_$basic_string@DU_$char_traits@D@std@@V_$allocator@D@2@@std@@QAEAAV01@D@Z, __Y_$basic_string@DU_$char_traits@D@std@@V_$allocator@D@2@@std@@QAEAAV01@PBD@Z, __0_$basic_string@DU_$char_traits@D@std@@V_$allocator@D@2@@std@@QAE@ID@Z, __Y_$basic_string@DU_$char_traits@D@std@@V_$allocator@D@2@@std@@QAEAAV01@ABV01@@Z, __0_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@QAE@ABV01@@Z, __0_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@QAE@XZ, __4_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@QAEAAV01@ABV01@@Z, _length@_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@QBEIXZ, _c_str@_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@QBEPBGXZ, __4_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@QAEAAV01@PBG@Z, _snextc@_$basic_streambuf@GU_$char_traits@G@std@@@std@@QAEGXZ, _sgetc@_$basic_streambuf@GU_$char_traits@G@std@@@std@@QAEGXZ, _rdbuf@_$basic_ios@GU_$char_traits@G@std@@@std@@QBEPAV_$basic_streambuf@GU_$char_traits@G@std@@@2@XZ, _max_size@_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@QBEIXZ, _erase@_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@QAEAAV12@II@Z, _npos@_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@2IB, __Ipfx@_$basic_istream@GU_$char_traits@G@std@@@std@@QAE_N_N@Z, __Unlock@_$basic_streambuf@GU_$char_traits@G@std@@@std@@QAEXXZ, __Lock@_$basic_streambuf@GU_$char_traits@G@std@@@std@@QAEXXZ, __Y_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@QAEAAV01@PBG@Z, _id@_$ctype@G@std@@2V0locale@2@A, _widen@_$basic_ios@GU_$char_traits@G@std@@@std@@QBEGD@Z, _size@_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@QBEIXZ, _sbumpc@_$basic_streambuf@GU_$char_traits@G@std@@@std@@QAEGXZ, _to_int_type@_$char_traits@G@std@@SAGABG@Z, __A_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@QBEABGI@Z, _sputc@_$basic_streambuf@GU_$char_traits@G@std@@@std@@QAEGG@Z, _fill@_$basic_ios@GU_$char_traits@G@std@@@std@@QBEGXZ, _flush@_$basic_ostream@GU_$char_traits@G@std@@@std@@QAEAAV12@XZ, _tie@_$basic_ios@GU_$char_traits@G@std@@@std@@QBEPAV_$basic_ostream@GU_$char_traits@G@std@@@2@XZ, __Y_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@QAEAAV01@G@Z, _width@ios_base@std@@QAEHH@Z, _at@_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@QAEAAGI@Z, _setstate@_$basic_ios@DU_$char_traits@D@std@@@std@@QAEXH_N@Z, _append@_$basic_string@DU_$char_traits@D@std@@V_$allocator@D@2@@std@@QAEAAV12@ID@Z, _eof@_$char_traits@G@std@@SAGXZ, _eq_int_type@_$char_traits@G@std@@SA_NABG0@Z, _to_char_type@_$char_traits@G@std@@SAGABG@Z, _is@_$ctype@G@std@@QBE_NFG@Z, _append@_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@QAEAAV12@IG@Z, _setstate@_$basic_ios@GU_$char_traits@G@std@@@std@@QAEXH_N@Z, _uncaught_exception@std@@YA_NXZ, __Osfx@_$basic_ostream@DU_$char_traits@D@std@@@std@@QAEXXZ, _good@ios_base@std@@QBE_NXZ, _tie@_$basic_ios@DU_$char_traits@D@std@@@std@@QBEPAV_$basic_ostream@DU_$char_traits@D@std@@@2@XZ, _flush@_$basic_ostream@DU_$char_traits@D@std@@@std@@QAEAAV12@XZ, _flags@ios_base@std@@QBEHXZ, _fill@_$basic_ios@DU_$char_traits@D@std@@@std@@QBEDXZ, _sputc@_$basic_streambuf@DU_$char_traits@D@std@@@std@@QAEHD@Z, __A_$basic_string@DU_$char_traits@D@std@@V_$allocator@D@2@@std@@QBEABDI@Z, _to_int_type@_$char_traits@D@std@@SAHABD@Z, _sbumpc@_$basic_streambuf@DU_$char_traits@D@std@@@std@@QAEHXZ, _size@_$basic_string@DU_$char_traits@D@std@@V_$allocator@D@2@@std@@QBEIXZ, _widen@_$basic_ios@DU_$char_traits@D@std@@@std@@QBEDD@Z, __0_Lockit@std@@QAE@H@Z, _id@_$ctype@D@std@@2V0locale@2@A, __Bid@locale@std@@QAEIXZ, __Getfacet@locale@std@@QBEPBVfacet@12@I@Z, __Getcat@_$ctype@D@std@@SAIPAPBVfacet@locale@2@@Z, __Incref@facet@locale@std@@QAEXXZ, __Register@facet@locale@std@@QAEXXZ, __1_Lockit@std@@QAE@XZ, __Lock@_$basic_streambuf@DU_$char_traits@D@std@@@std@@QAEXXZ, __Unlock@_$basic_streambuf@DU_$char_traits@D@std@@@std@@QAEXXZ, __Ipfx@_$basic_istream@DU_$char_traits@D@std@@@std@@QAE_N_N@Z, _getloc@ios_base@std@@QBE_AVlocale@2@XZ, __1locale@std@@QAE@XZ, _npos@_$basic_string@DU_$char_traits@D@std@@V_$allocator@D@2@@std@@2IB, __1_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@QAE@XZ, _c_str@_$basic_string@DU_$char_traits@D@std@@V_$allocator@D@2@@std@@QBEPBDXZ, __0_$basic_string@DU_$char_traits@D@std@@V_$allocator@D@2@@std@@QAE@ABV01@@Z, __0_$basic_string@DU_$char_traits@D@std@@V_$allocator@D@2@@std@@QAE@PBD@Z, __1_$basic_string@DU_$char_traits@D@std@@V_$allocator@D@2@@std@@QAE@XZ, __0_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@QAE@PBG@Z, _clear@_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@QAEXXZ, _empty@_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@QBE_NXZ, __$_8GU_$char_traits@G@std@@V_$allocator@G@1@@std@@YA_NABV_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@0@PBG@Z, _reserve@_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@QAEXI@Z, _erase@_$basic_string@DU_$char_traits@D@std@@V_$allocator@D@2@@std@@QAEAAV12@II@Z, _width@ios_base@std@@QBEHXZ, _max_size@_$basic_string@DU_$char_traits@D@std@@V_$allocator@D@2@@std@@QBEIXZ, _rdbuf@_$basic_ios@DU_$char_traits@D@std@@@std@@QBEPAV_$basic_streambuf@DU_$char_traits@D@std@@@2@XZ, _sgetc@_$basic_streambuf@DU_$char_traits@D@std@@@std@@QAEHXZ, _snextc@_$basic_streambuf@DU_$char_traits@D@std@@@std@@QAEHXZ, _eof@_$char_traits@D@std@@SAHXZ, _eq_int_type@_$char_traits@D@std@@SA_NABH0@Z, _to_char_type@_$char_traits@D@std@@SADABH@Z, __Getcat@_$ctype@G@std@@SAIPAPBVfacet@locale@2@@Z, _is@_$ctype@D@std@@QBE_NFD@Z, __Osfx@_$basic_ostream@GU_$char_traits@G@std@@@std@@QAEXXZ, _resize@_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@QAEXI@Z

> IfxSpArc.dll: _SetName@CSpArcConfigDataSet@IFXTCGArc@@QAEIABV_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@@Z, _QueryValueBinary@CSpArcConfigDataSet@IFXTCGArc@@QAEIABV_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@0AAPAEAAK@Z, _SetKeyBindData@CSpArcTssPsKeyDataSet@IFXTCGArc@@QAEIKPAE@Z, _GetParentKeyInfo@CSpArcTssPsKeyDataSet@IFXTCGArc@@QAEIAAV_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@0@Z, _GetBinaryKeyData@CSpArcTssPsKeyDataSet@IFXTCGArc@@QAEIAAKAAPAEAA_N@Z, __0CSpArcTssPsKeyDataSet@IFXTCGArc@@QAE@XZ, _SetUUID@CSpArcTssPsKeyDataSet@IFXTCGArc@@QAEIABV_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@@Z, _SetParentKeyInfo@CSpArcTssPsKeyDataSet@IFXTCGArc@@QAEIABV_$basic_string@GU_$char_traits@G@std@@V_$allocator@G@2@@std@@0@Z, _SetBinaryKeyData@CSpArcTssPsKeyDataSet@IFXTCGArc@@QAEIKPAE@Z, _ArcReleaseInstance@IFXTCGArc@@YA_NXZ, __0CSPDataRecord@IFXTCGArc@@QAE@PAVCSPBaseObject@1@@Z, __0CSpArcConfigDataSet@IFXTCGArc@@QAE@XZ, __1CSPDataRecord@IFXTCGArc@@UAE@XZ, _ArcCreateInstance@IFXTCGArc@@YAPAVISPArcManagement@1@W4TYPE_ARCACCESS@1@@Z



( 0 exports )

[msc hotline sat]

Te pedimos que nos envies estos tres archivos:



C:\Archivos de programa\RadarSyncBar\tbRad0.dll



C:\Documents and Settings\All Users\Datos de programa\live 64 math does\frag browse.exe



C:\DOCUME~1\JOSELU~1\DATOSD~1\PROXYB~1\multimpeg.exe



y que tras ejecutar nuestras utilidades postees el c:\infosat.txt, nada del virustotal ??? !!!







ms.

[Lawson_fr]

Por partes he copiado de virustotal arriba, nose si tenia que copiar algo mas, el infosat de Elitriip solo me decia que me faltaba el servipack3, ahora estoy adjuntando las muestras, aunque la primera de ellas la conozco es de un programa que tengo que escanea el pc en busca de actualizaciones de drivers, sobre el infosat de Elistara ahora en un rato lo pongo que esta mañana se me ha pasado.

[msc hotline sat]

De lo que conozcas y sea voluntario, ya no hace falta que nos envies muestra, pues lo que queremos son las muestras de los sospechosos desconocidos...



saludos



ms, 25-06-2008

[Lawson_fr]

Vale el Elistara ha sacado tela:



Wed Jun 25 17:17:42 2008

EliStartPage v16.56 (c)2008 S.G.H. / Satinfo S.L. (Actualizado el 23 de Junio del 2008)

--------------------------------------------------

Lista de Acciones (por Acción Directa):

No detectado SP3 de Windows XP

Eliminadas las Paginas de Inicio y de Busqueda del IE

Eliminados Ficheros Temporales del IE

Detectado AUTORUN.INF en la Unidad (J)

Open=TVCenterPro.exe -autorun

Si Desconoce la Aplicación, por favor envienosla

acompañada del AUTORUN.INF a "virus@satinfo.es". Gracias.



Wed Jun 25 17:19:32 2008

EliStartPage v16.56 (c)2008 S.G.H. / Satinfo S.L. (Actualizado el 23 de Junio del 2008)

--------------------------------------------------

Lista de Acciones (por Exploración):

Explorando Unidad C:\

C:\Sysinfo\Plantinum\SRVANY.EXE --> Eliminado, HackTool-SRunner

C:\WINDOWS\SRVANY.EXE --> Eliminado, HackTool-SRunner

C:\Documents and Settings\Jose Luis\Escritorio\RealTek Audio Driver 5.10.0.5282\Audio\WDM\ALCMTR.EXE --> Eliminado, SpyRealtek

C:\Archivos de programa\Realtek\InstallShield\ALCMTR.EXE --> Eliminado, SpyRealtek

C:\Archivos de programa\NewTech Infosystems\NTI Backup NOW! 4.5\PART32.DLL --> Eliminado, WinAntiVirus Pro 2006(cpl)

C:\Archivos de programa\AIMP2\Icons\AIMP2.DLL --> Eliminado, Clicker.Small.TO

C:\Archivos de programa\AIMP2\Icons\AIMP2_LIGHT.DLL --> Eliminado, Clicker.Small.TO

C:\Archivos de programa\Skype\Plugin Manager\SPMSERVICES.DLL --> Eliminado, Clicker.Small.TO

C:\System Volume Information\_restore{E86A7F12-0BB8-46EC-8FA7-E909A060C48F}\RP110\A0038680.EXE --> Eliminado, SpyRealtek

C:\System Volume Information\_restore{E86A7F12-0BB8-46EC-8FA7-E909A060C48F}\RP110\A0038715.EXE --> Eliminado, SpyRealtek

C:\System Volume Information\_restore{E86A7F12-0BB8-46EC-8FA7-E909A060C48F}\RP128\A0042340.EXE --> Eliminado, SpyRealtek

C:\System Volume Information\_restore{E86A7F12-0BB8-46EC-8FA7-E909A060C48F}\RP128\A0042351.EXE --> Eliminado, HackTool-SRunner

C:\System Volume Information\_restore{E86A7F12-0BB8-46EC-8FA7-E909A060C48F}\RP128\A0042352.EXE --> Eliminado, HackTool-SRunner

C:\System Volume Information\_restore{E86A7F12-0BB8-46EC-8FA7-E909A060C48F}\RP128\A0042353.EXE --> Eliminado, SpyRealtek

C:\System Volume Information\_restore{E86A7F12-0BB8-46EC-8FA7-E909A060C48F}\RP128\A0042354.EXE --> Eliminado, SpyRealtek

C:\System Volume Information\_restore{E86A7F12-0BB8-46EC-8FA7-E909A060C48F}\RP128\A0042355.DLL --> Eliminado, WinAntiVirus Pro 2006(cpl)

C:\System Volume Information\_restore{E86A7F12-0BB8-46EC-8FA7-E909A060C48F}\RP128\A0042356.DLL --> Eliminado, Clicker.Small.TO

C:\System Volume Information\_restore{E86A7F12-0BB8-46EC-8FA7-E909A060C48F}\RP128\A0042357.DLL --> Eliminado, Clicker.Small.TO

C:\System Volume Information\_restore{E86A7F12-0BB8-46EC-8FA7-E909A060C48F}\RP128\A0042358.DLL --> Eliminado, Clicker.Small.TO



Nº Total de Directorios: 7278

Nº Total de Ficheros: 77541

Nº de Ficheros Analizados: 22023

Nº de Ficheros Infectados: 19

Nº de Ficheros Limpiados: 19

[msc hotline sat]

Pues sí, pero muchos ya estaban en el RESTORE...



Tras reiniciar mira si persiste alguan anomalia o ya podemos dar por solucionado el Tema, gracias



saludos



ms, 25-06-2008

[Lawson_fr]

Tras el reinicio, todo va perfecto menos un problema de sonido que ya abro otro hilo en su correspondiente apartado. Gracias

[lucl]

Bien pues cerramos el tema dandolo por solucionado, saludos