Utilizamos Cookies de terceros para generar estadísticas de audiencia y mostrar publicidad personalizada analizando tu navegación. Si sigues navegando estarás aceptando su uso. Más información X
PortadaForo AyudaTutoriales
InicioForosForo Virus

Bagle y win 32

rrd_1984
2008-11-19 15:06 - Respuestas: 1 - Tema nº: 2555285


Características: Windows XP Profesional Windows XP Profesional, Windows Xp Service Pack 2,10.

Hola, recientemente abriendo un email me aparecio un mensaje del Kaspersky 6.0 (el que uso) de que el fichero estaba infectado, entonces le di a eliminar directamente, desde eso mi ordenador no vale ni como chatarra.

Me explico, segun le pulse, el kaspersky desaparecio del menu de inicio y ahora cada vez que intento ejecutarlo me sale "opcion de win 32 no valida" o algo asi. Intente pasar los siguientes programas y me sale la misma ventana:

_Hijack this
_SUPERAntiSpyware Professional
_Spyboot

Y nada, asi que me puse a mirar por hay y baje e instale los siguientes programas los cuales FUNCIONARON:

_Trojan Remover, y este es el fichero que creo:
***** THE SYSTEM HAS BEEN RESTARTED *****
15/11/2008 2:09:29: Trojan Remover has been restarted
C:\WINDOWS\system32\drivers\srosa.sys has been deleted (if it existed)
C:\WINDOWS\system32\dllhosts.exe - process is either not running or could not be terminated
C:\WINDOWS\system32\dllhosts.exe has been renamed to C:\WINDOWS\system32\dllhosts.exe.vir
C:\WINDOWS\system32\mdelk.exe - process is either not running or could not be terminated
C:\WINDOWS\system32\mdelk.exe has been deleted
=
Removing the following registry keys:
HKLM\SYSTEM\CurrentControlSet\Services\srosa - already removed (or did not exist)
=
=
Deleting the following registry value(s):
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run\[NT Printing Services6] - deleted
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\[german.exe] - already deleted
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\[mule_st_key] - already deleted
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\[drvsyskit] - already deleted
=
15/11/2008 2:09:29: Trojan Remover closed

_Elibagle, me decia que estaba infectado y me elimino 5 archivos
_Ad-aware 2008, me ha eliminado Win32.Trojan.Buzus y el Downloader.Agent
_Ccleaner, para limpiar el registro y los temporales
_Malwarebytes' Anti-Malware y este el fichero que me creo:

Malwarebytes' Anti-Malware 1.30
Versión de la Base de Datos: 1399
Windows 5.1.2600 Service Pack 2

15/11/2008 2:25:06
mbam-log-2008-11-15 (02-25-06).txt

Tipo de examen : Examen Rápido
Objetos examinados: 64849
Tiempo transcurrido: 11 minute(s), 26 second(s)

Procesos en Memoria Infectados: 0
Módulos en Memoria Infectados: 0
Claves del Registro Infectadas: 20
Valores del Registro Infectados: 1
Elementos de Datos del Registro Infectados: 0
Carpetas Infectadas: 3
Ficheros Infectados: 177

Procesos en Memoria Infectados:
(No se han detectado elementos maliciosos)

Módulos en Memoria Infectados:
(No se han detectado elementos maliciosos)

Claves del Registro Infectadas:
HKEY_CLASSES_ROOT\TypeLib\{51b5287b-1776-4dd7-8ec2-9ef1beaf4102} (Rogue.MalwareScanner) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{1ed66e9b-5a1b-4354-9a00-8ce8c809f0a0} (Rogue.MalwareScanner) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{1fd72a8c-e2ce-41eb-9aa4-3d2e18dca49f} (Rogue.MalwareScanner) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{3f6fc238-3d6c-455f-b1ad-203f3f9de391} (Rogue.MalwareScanner) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{6f7c160f-ece1-4dfc-a4c1-ae0d0aa5cd20} (Rogue.MalwareScanner) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{8573fcf1-941e-4d3a-880b-3f34b380104b} (Rogue.MalwareScanner) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{99102376-125c-4a3b-b236-b5f2a94c4259} (Rogue.MalwareScanner) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{9f2d645b-c067-4001-9212-f5dc813415fe} (Rogue.MalwareScanner) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{a8999341-7238-4aee-806f-2d2fea37c255} (Rogue.MalwareScanner) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{c0f24fd7-d91a-4858-be9b-fcf1da5b2a31} (Rogue.MalwareScanner) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{e09c0c3d-3c14-4f65-b4d1-cf7dd53f7af3} (Rogue.MalwareScanner) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{09c38747-4633-4aee-9c9a-efa67f08ab13} (Rogue.MalwareScanner) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{11b75807-e720-460b-99c5-d750581d9f3a} (Rogue.MalwareScanner) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{2fa44b26-f9a8-469c-af7e-c5d301e1bf4b} (Rogue.MalwareScanner) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{5c6289f4-c822-45d0-9bbe-06bce8a7a8eb} (Rogue.MalwareScanner) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{6a0cc99a-3471-4fc3-9bf9-e9dfd9cf7a05} (Rogue.MalwareScanner) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{84fd864b-8b6b-41ac-8ce3-15f3bbbae904} (Rogue.MalwareScanner) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{c9f99872-310a-4f9d-9e36-ed5c8fd6a5b0} (Rogue.MalwareScanner) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\malware scanner_is1 (Rogue.MalwareScanner) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Malware Scanner (Rogue.MalwareScanner) -> Quarantined and deleted successfully.

Valores del Registro Infectados:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run\Windows Printing Driver (Trojan.Agent) -> Quarantined and deleted successfully.

Elementos de Datos del Registro Infectados:
(No se han detectado elementos maliciosos)

Carpetas Infectadas:
C:\Archivos de programa\MalwareRemover.com (Rogue.MalwareScanner) -> Quarantined and deleted successfully.
C:\Archivos de programa\MalwareRemover.com\Malware Scanner (Rogue.MalwareScanner) -> Quarantined and deleted successfully.
C:\Archivos de programa\MalwareRemover.com\Malware Scanner\Patches (Rogue.MalwareScanner) -> Quarantined and deleted successfully.

Ficheros Infectados:
C:\WINDOWS\system32\drivers\downld\105703.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\105734.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\106515.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\107312.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\107343.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\107750.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\108265.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\108781.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\109250.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\109437.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\109843.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\110484.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\111859.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\114203.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\114578.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\115343.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\115484.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\115640.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\115843.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\115859.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\116015.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\116031.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\116812.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\117546.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\117562.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\117859.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\118265.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\118484.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\118875.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\118906.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\119046.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\119078.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\120578.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\120718.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\121171.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\1222375.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\122984.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\123390.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\123406.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\123593.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\126046.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\126484.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\127796.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\128375.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\129531.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\130734.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\130984.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\132562.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\136296.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\1374031.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\140187.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\1402078.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\140406.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\142328.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\145171.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\145234.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\146000.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\14702156.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\14704171.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\14715062.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\14716234.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\14748843.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\14753921.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\14759218.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\147843.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\148125.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\149234.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\149281.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\149968.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\150843.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\153187.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\154171.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\154328.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\154546.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\154859.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\155203.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\156421.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\157500.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\158062.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\158531.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\158687.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\160406.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\161187.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\162890.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\163406.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\164671.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\165828.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\166921.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\167203.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\168031.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\168046.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\168250.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\168890.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\169687.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\169843.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\170812.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\170890.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\173625.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\173687.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\173718.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\175359.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\176375.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\181031.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\181218.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\182343.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\186328.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\190000.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\199750.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\204265.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\206687.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\213156.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\216234.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\255453.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\261343.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\267593.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\272187.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\273625.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\273656.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\276375.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\276859.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\278625.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\279062.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\279312.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\280781.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\281328.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\287328.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\289875.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\290000.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\291296.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\291968.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\292171.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\294281.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\294531.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\296062.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\296531.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\297468.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\306375.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\306718.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\308781.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\309500.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\311609.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\313515.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\332187.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\341250.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\346109.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\349796.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\360734.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\367000.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\430812.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\94015.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\97734.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Archivos de programa\MalwareRemover.com\Malware Scanner\Core.dll (Rogue.MalwareScanner) -> Quarantined and deleted successfully.
C:\Archivos de programa\MalwareRemover.com\Malware Scanner\Crack.eXe (Rogue.MalwareScanner) -> Quarantined and deleted successfully.
C:\Archivos de programa\MalwareRemover.com\Malware Scanner\DataBase.ini (Rogue.MalwareScanner) -> Quarantined and deleted successfully.
C:\Archivos de programa\MalwareRemover.com\Malware Scanner\DB1.ms (Rogue.MalwareScanner) -> Quarantined and deleted successfully.
C:\Archivos de programa\MalwareRemover.com\Malware Scanner\DB2.ms (Rogue.MalwareScanner) -> Quarantined and deleted successfully.
C:\Archivos de programa\MalwareRemover.com\Malware Scanner\DB3.ms (Rogue.MalwareScanner) -> Quarantined and deleted successfully.
C:\Archivos de programa\MalwareRemover.com\Malware Scanner\DB4.ms (Rogue.MalwareScanner) -> Quarantined and deleted successfully.
C:\Archivos de programa\MalwareRemover.com\Malware Scanner\DB5.ms (Rogue.MalwareScanner) -> Quarantined and deleted successfully.
C:\Archivos de programa\MalwareRemover.com\Malware Scanner\English.inf (Rogue.MalwareScanner) -> Quarantined and deleted successfully.
C:\Archivos de programa\MalwareRemover.com\Malware Scanner\English.jpg (Rogue.MalwareScanner) -> Quarantined and deleted successfully.
C:\Archivos de programa\MalwareRemover.com\Malware Scanner\Errors.txt (Rogue.MalwareScanner) -> Quarantined and deleted successfully.
C:\Archivos de programa\MalwareRemover.com\Malware Scanner\Fire.ms (Rogue.MalwareScanner) -> Quarantined and deleted successfully.
C:\Archivos de programa\MalwareRemover.com\Malware Scanner\Help.chm (Rogue.MalwareScanner) -> Quarantined and deleted successfully.
C:\Archivos de programa\MalwareRemover.com\Malware Scanner\hosts (Rogue.MalwareScanner) -> Quarantined and deleted successfully.
C:\Archivos de programa\MalwareRemover.com\Malware Scanner\MalScr.exe (Rogue.MalwareScanner) -> Quarantined and deleted successfully.
C:\Archivos de programa\MalwareRemover.com\Malware Scanner\MsgBox.ms (Rogue.MalwareScanner) -> Quarantined and deleted successfully.
C:\Archivos de programa\MalwareRemover.com\Malware Scanner\Purchase.ms (Rogue.MalwareScanner) -> Quarantined and deleted successfully.
C:\Archivos de programa\MalwareRemover.com\Malware Scanner\Scan Session.txt (Rogue.MalwareScanner) -> Quarantined and deleted successfully.
C:\Archivos de programa\MalwareRemover.com\Malware Scanner\Scanner.ms (Rogue.MalwareScanner) -> Quarantined and deleted successfully.
C:\Archivos de programa\MalwareRemover.com\Malware Scanner\scanning.ms (Rogue.MalwareScanner) -> Quarantined and deleted successfully.
C:\Archivos de programa\MalwareRemover.com\Malware Scanner\Splash.spl (Rogue.MalwareScanner) -> Quarantined and deleted successfully.
C:\Archivos de programa\MalwareRemover.com\Malware Scanner\unins000.dat (Rogue.MalwareScanner) -> Quarantined and deleted successfully.
C:\Archivos de programa\MalwareRemover.com\Malware Scanner\unins000.exe (Rogue.MalwareScanner) -> Quarantined and deleted successfully.
C:\Archivos de programa\MalwareRemover.com\Malware Scanner\update.cli (Rogue.MalwareScanner) -> Quarantined and deleted successfully.
C:\Archivos de programa\MalwareRemover.com\Malware Scanner\update.exe (Rogue.MalwareScanner) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\doskeys.exe (Trojan.Agent) -> Quarantined and deleted successfully.

Pues todavia despues de todo esto el ordenador sigue apareciendo el susodicho mensajito asi como no me deja abrir varios programas que necesito y si ademas añadimos la costumbre que tiene ahora el ordenador de reiniciarse continuamente, pues ya no se que hacer.

No he podido pasar ningun escaner on-line, porque se reinicia.

Ya el ultimo informe que les pongo es el que me da el programa Trend Micro HijackThis es el siguiente:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 14:42:12, on 19/11/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16473)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Archivos de programa\Lavasoft\Ad-Aware\aawservice.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\ARCHIVOS DE PROGRAMA\A-SQUARED FREE\a2service.exe
C:\Archivos de programa\Archivos comunes\ABBYY\FineReader\9.00\Licensing\PE\NetworkLicenseServer.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\CTsvcCDA.EXE
C:\Archivos de programa\Diskeeper Corporation\Diskeeper\DkService.exe
C:\Archivos de programa\Y'z Dock\YzDock.exe
c:\Archivos de programa\Archivos comunes\Protexis\License Service\PsiService_2.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\wbem\wmiapsrv.exe
C:\Archivos de programa\Lavasoft\Ad-Aware\Ad-Aware.exe
C:\Archivos de programa\Mozilla Firefox\firefox.exe
C:\Archivos de programa\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Vínculos
O2 - BHO: SnagIt Toolbar Loader - {00C6482D-C502-44C8-8409-FCE54AD9C208} - C:\Archivos de programa\TechSmith\SnagIt 9\SnagItBHO.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Archivos de programa\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Archivos de programa\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: (no name) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - (no file)
O3 - Toolbar: Babylon - {965B54B0-71E0-4611-8DE7-F73FA0B20E26} - C:\Archivos de programa\Babylon\Babylon Toolbar\BabylonIEToolBar.dll
O3 - Toolbar: SnagIt - {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} - C:\Archivos de programa\TechSmith\SnagIt 9\SnagItIEAddin.dll
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [AVP] "C:\Archivos de programa\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe"
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICIO LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Servicio de red')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Acceso directo a YzDock.lnk = C:\Archivos de programa\Y'z Dock\YzDock.exe
O8 - Extra context menu item: E&xportar a Microsoft Excel - res://C:\ARCHIV~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Translate with &Babylon - res://C:\Archivos de programa\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll/Translate.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Archivos de programa\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Consola de Sun Java - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Archivos de programa\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: Web Anti-Virus - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Archivos de programa\Kaspersky Lab\Kaspersky Anti-Virus 6.0\scieplugin.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\ARCHIV~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Archivos de programa\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Archivos de programa\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Archivos de programa\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Archivos de programa\Messenger\msmsgs.exe
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O20 - Winlogon Notify: !SASWinLogon - C:\Archivos de programa\SUPERAntiSpyware\SASWINLO.dll
O23 - Service: a-squared Free Service (a2free) - Emsi Software GmbH - C:\ARCHIVOS DE PROGRAMA\A-SQUARED FREE\a2service.exe
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Archivos de programa\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: ABBYY FineReader 9.0 PE Licensing Service (ABBYY.Licensing.FineReader.Professional.9.0) - ABBYY (BIT Software) - C:\Archivos de programa\Archivos comunes\ABBYY\FineReader\9.00\Licensing\PE\NetworkLicenseServer.exe
O23 - Service: Autodesk Licensing Service - Autodesk - C:\Archivos de programa\Archivos comunes\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: Kaspersky Anti-Virus 6.0 (AVP) - Kaspersky Lab - C:\Archivos de programa\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.EXE
O23 - Service: Diskeeper - Diskeeper Corporation - C:\Archivos de programa\Diskeeper Corporation\Diskeeper\DkService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Archivos de programa\Archivos comunes\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: NMIndexingService - Nero AG - C:\Archivos de programa\Archivos comunes\Ahead\Lib\NMIndexingService.exe
O23 - Service: Protexis Licensing V2 (PSI_SVC_2) - Protexis Inc. - c:\Archivos de programa\Archivos comunes\Protexis\License Service\PsiService_2.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Archivos de programa\CyberLink\Shared Files\RichVideo.exe
O23 - Service: SolidWorks Licensing Service - SolidWorks - C:\Archivos de programa\Archivos comunes\SolidWorks Shared\Service\SolidWorksLicensing.exe


Gracias, y enhorabuena sino has muerto de aburrimiento por leer todo esto.


Comentarios adicionales: No había instalado ningún programa, ni cambiado nada de hardware en el PC.
Posibles soluciones:
Bagle y win 32Bagle y win 32
W32.bagle   W32.bagle
Troyano bagle.naeTroyano bagle.nae
Bagle. bl  gusano infectando!!!!!Bagle. bl gusano infectando!!!!!
Virus rootkit.bagleVirus rootkit.bagle
tordanxa

Re: Bagle y win 32 - 2008-11-19 15:58 - Respuesta 2

Pasa a tu ordenador tu antivirus (o uno online: Panda Activescan ; ESET Online Scanner;
F-Secure Online Scanner
; Kaspersky Online Scanner ) y los siguientes programas actualizados y en modo a prueba de fallos:

SUPERAntiSpyware Free
Ad-Aware 2008 Free
Dr.Web CureIt! 4.44

El Ad-Aware pásalo con la opción Full Scan

Limpia el ordenador de archivos y entradas de registro innecesarias con el CCleaner

Y si aún así no has solucionado el problema el Trend Micro HijackThis

En este último programa debes de hacer lo siguiente:
1.- Descarga e instala el programa
2.- En Modo normal haz doble clic en dicho archivo
3.- Selecciona la opción do a system scan and save logfile
4.- Se abrirá una ventana y el bloc de notas. Pega el contenido de este último aquí (en este mismo post) para que podamos revisarlo.

Saludos
Página:1

Respuestas relacionadas:

Virus bagle y googleVirus bagle y googleForo
Problema con srosa (bagle)Problema con srosa (bagle)Foro
Virus bagle sin solucionVirus bagle sin solucionForo
Win32.bagle.svi (solucionado)Win32.bagle.svi (solucionado)Foro
Ayuda problemas con el bagleAyuda problemas con el bagleForo
Virus win32/bagleVirus win32/bagleForo
Bagle con funcionalidades rootkitBagle con funcionalidades rootkitForo
Como desinfectar el pc del gusano bagleComo desinfectar el pc del gusano bagleForo
Virus bagle no me deja acceder a la biosVirus bagle no me deja acceder a la biosForo
Buenos dias   como quitar  un virus  vin nt bagle.geBuenos dias como quitar un virus vin nt bagle.geForo
InicioSecciones
^ SubirAviso legal
Política Privacidad
Configurarequipos23 Diciembre 2024