| dudu34 |  |
|
2006-10-28 18:23 - Respuestas: 30 - Tema nº: 2424443
hola. no soy nada experto pero creo que tengo algun tipo de virus (tracking cookies quizas) que me redirige a ciertas paginas web cuando busco algo en google y pincho en el link. he pasado el ad-aware, el spybot (que por cierto tarda una eternidad), el cwshredder y el easycleaner sin exito. ademas tengo el norton con licencia y no encuentra nada. no se si sera grave pero estoy preocupado por la seguridad de mi equipo, pues hago operaciones de banco a traves de internet. agradezco de antemano cualquier sugerencia e informacion. y enhorabuena por este foro. saludos desde valencia | |
|
|
| tordanxa |  |
|
Re: Tracking cookies - 2006-10-28 20:37 - Respuesta 2
A ver paisano, pega el log del HijackThis y le echamos un vistazo. (Debes hacer clic en la opción scan and save log y pegar el contenido del bloc de notas).
Saludos
| |
|
|
| dudu34 | |
|
Re: Tracking cookies - 2006-10-28 23:43 - Respuesta 3
alla va:
y gracias de antemano en un dia como hoy con tanta moto...
Logfile of HijackThis v1.99.1
Scan saved at 11:41:59 PM, on 10/28/2006
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2600.0000)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\DRIVERS\CDANTSRV.EXE
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\TOSHIBA\E-KEY\CeEKey.exe
C:\Program Files\TOSHIBA\TouchPadNF\TPTray.exe
C:\PROGRA~1\NORTON~1\navapw32.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\WINDOWS\System32\wuauclt.exe
C:\toshiba\ivp\ism\ivpsvmgr.exe
C:\Toshiba\Ivp\netint\netint.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Documents and Settings\Eduardo Fdz-Moscoso\Desktop\hijackthis\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.es/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.toshiba.com/
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [CeEKey.exe] C:\Program Files\TOSHIBA\E-KEY\CeEKey.exe
O4 - HKLM\..\Run: [TPNF] C:\Program Files\TOSHIBA\TouchPadNF\TPTray.exe
O4 - HKLM\..\Run: [NAV Agent] C:\PROGRA~1\NORTON~1\navapw32.exe
O4 - HKLM\..\Run: [Pinger] c:\toshiba\ivp\ism\pinger.exe /run
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
O4 - HKLM\..\Run: [SSC_UserPrompt] C:\Program Files\Common Files\Symantec Shared\Security Center\UsrPrmpt.exe
O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [IVPServiceMgr] C:\toshiba\ivp\ism\ivpsvmgr.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - Global Startup: Acelerador de inicio de AutoCAD.lnk = C:\Program Files\Common Files\Autodesk Shared\acstart16.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O23 - Service: Autodesk Licensing Service - Autodesk, Inc. - C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: C-DillaSrv - C-Dilla Ltd - C:\WINDOWS\System32\DRIVERS\CDANTSRV.EXE
O23 - Service: Norton AntiVirus Auto Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
| |
|
|
| tordanxa | |
|
Re: Tracking cookies - 2006-10-29 07:37 - Respuesta 4
En el log no se detecta nada. Pasa el ewido scan online
y pega aquí el informe.
Saludos
PD: mejor no mentemos las motos | |
|
|
| dudu34 | |
|
Re: Tracking cookies - 2006-10-29 10:07 - Respuesta 5
aqui lo tienes.
disculpas por el comentario.
_______________________
ewido anti-spyware online scanner
http://www.ewido.net
_______________________
Name: TrackingCookie.Addynamix
***********************
Name: Downloader.Agent.uj
Path: [532] VM_00D90000
Risk: High
Name: Downloader.Agent.uj
Path: [556] VM_00C40000
Risk: High
Name: Downloader.Agent.uj
Path: [276] VM_007B0000
Risk: High
Name: Downloader.Agent.uj
Path: [392] VM_00950000
Risk: High
Name: Downloader.Agent.uj
Path: [412] VM_00900000
Risk: High
Name: Downloader.Agent.uj
Path: [424] VM_00890000
Risk: High
Name: Downloader.Agent.uj
Path: [524] VM_003B0000
Risk: High
Name: Downloader.Agent.uj
Path: [576] VM_003F0000
Risk: High
Name: Downloader.Agent.uj
Path: [1376] VM_008F0000
Risk: High
Name: Downloader.Agent.uj
Path: C:\System Volume Information\_restore{9AA24420-C424-48E2-9836-6F9DF6A317C5}\RP31\A0003946.exe
Risk: High
Name: Downloader.Agent.uj
Path: C:\System Volume Information\_restore{9AA24420-C424-48E2-9836-6F9DF6A317C5}\RP31\A0003952.exe
Risk: High
Name: Trojan.Small.fb
Path: C:\System Volume Information\_restore{9AA24420-C424-48E2-9836-6F9DF6A317C5}\RP31\A0003956.exe
Risk: High
Name: Downloader.Agent.uj
Path: C:\System Volume Information\_restore{9AA24420-C424-48E2-9836-6F9DF6A317C5}\RP31\A0004138.exe
Risk: High
Name: Trojan.Small.fb
Path: C:\System Volume Information\_restore{9AA24420-C424-48E2-9836-6F9DF6A317C5}\RP31\A0004144.exe
Risk: High
Name: Downloader.Agent.uj
Path: C:\System Volume Information\_restore{9AA24420-C424-48E2-9836-6F9DF6A317C5}\RP31\A0004155.exe
Risk: High
Name: Trojan.Small.fb
Path: C:\System Volume Information\_restore{9AA24420-C424-48E2-9836-6F9DF6A317C5}\RP31\A0004159.exe
Risk: High
Name: Downloader.Agent.uj
Path: C:\System Volume Information\_restore{9AA24420-C424-48E2-9836-6F9DF6A317C5}\RP31\A0004166.exe
Risk: High
Name: Trojan.Small.fb
Path: C:\System Volume Information\_restore{9AA24420-C424-48E2-9836-6F9DF6A317C5}\RP31\A0004169.exe
Risk: High
Name: Downloader.Agent.uj
Path: C:\System Volume Information\_restore{9AA24420-C424-48E2-9836-6F9DF6A317C5}\RP31\A0004190.exe
Risk: High
Name: Trojan.Small.fb
Path: C:\System Volume Information\_restore{9AA24420-C424-48E2-9836-6F9DF6A317C5}\RP31\A0004192.exe
Risk: High
Name: Downloader.Agent.uj
Path: C:\System Volume Information\_restore{9AA24420-C424-48E2-9836-6F9DF6A317C5}\RP31\A0004198.exe
Risk: High
Name: Trojan.Small.fb
Path: C:\System Volume Information\_restore{9AA24420-C424-48E2-9836-6F9DF6A317C5}\RP31\A0004202.exe
Risk: High
Name: Downloader.Agent.uj
Path: C:\System Volume Information\_restore{9AA24420-C424-48E2-9836-6F9DF6A317C5}\RP33\A0004402.exe
Risk: High
Name: Trojan.Small.fb
Path: C:\System Volume Information\_restore{9AA24420-C424-48E2-9836-6F9DF6A317C5}\RP33\A0004405.exe
Risk: High
Name: Downloader.Agent.uj
Path: C:\System Volume Information\_restore{9AA24420-C424-48E2-9836-6F9DF6A317C5}\RP33\A0004421.exe
Risk: High
Name: Trojan.Small.fb
Path: C:\System Volume Information\_restore{9AA24420-C424-48E2-9836-6F9DF6A317C5}\RP33\A0004425.exe
Risk: High
Name: Downloader.Agent.uj
Path: C:\System Volume Information\_restore{9AA24420-C424-48E2-9836-6F9DF6A317C5}\RP33\A0004446.exe
Risk: High
Name: Trojan.Small.fb
Path: C:\System Volume Information\_restore{9AA24420-C424-48E2-9836-6F9DF6A317C5}\RP33\A0004451.exe
Risk: High
Name: Downloader.Agent.uj
Path: C:\System Volume Information\_restore{9AA24420-C424-48E2-9836-6F9DF6A317C5}\RP34\A0004480.exe
Risk: High
Name: Trojan.Small.fb
Path: C:\System Volume Information\_restore{9AA24420-C424-48E2-9836-6F9DF6A317C5}\RP34\A0004485.exe
Risk: High
Name: Downloader.Agent.uj
Path: C:\System Volume Information\_restore{9AA24420-C424-48E2-9836-6F9DF6A317C5}\RP34\A0004510.exe
Risk: High
Name: Trojan.Small.fb
Path: C:\System Volume Information\_restore{9AA24420-C424-48E2-9836-6F9DF6A317C5}\RP34\A0004515.exe
Risk: High
Name: Downloader.Agent.uj
Path: C:\System Volume Information\_restore{9AA24420-C424-48E2-9836-6F9DF6A317C5}\RP34\A0004554.exe
Risk: High
Name: Trojan.Small.fb
Path: C:\System Volume Information\_restore{9AA24420-C424-48E2-9836-6F9DF6A317C5}\RP34\A0004559.exe
Risk: High
Name: Downloader.Agent.uj
Path: C:\System Volume Information\_restore{9AA24420-C424-48E2-9836-6F9DF6A317C5}\RP34\A0004579.exe
Risk: High
Name: Downloader.Agent.uj
Path: C:\System Volume Information\_restore{9AA24420-C424-48E2-9836-6F9DF6A317C5}\RP34\A0004585.exe
Risk: High
Name: Trojan.Small.fb
Path: C:\System Volume Information\_restore{9AA24420-C424-48E2-9836-6F9DF6A317C5}\RP34\A0004590.exe
Risk: High
Name: Downloader.Agent.uj
Path: C:\System Volume Information\_restore{9AA24420-C424-48E2-9836-6F9DF6A317C5}\RP34\A0004596.exe
Risk: High
Name: Trojan.Small.fb
Path: C:\System Volume Information\_restore{9AA24420-C424-48E2-9836-6F9DF6A317C5}\RP34\A0004601.exe
Risk: High
Name: Downloader.Agent.uj
Path: C:\System Volume Information\_restore{9AA24420-C424-48E2-9836-6F9DF6A317C5}\RP35\A0004645.exe
Risk: High
Name: Trojan.Small.fb
Path: C:\System Volume Information\_restore{9AA24420-C424-48E2-9836-6F9DF6A317C5}\RP35\A0004650.exe
Risk: High
Name: Downloader.Agent.uj
Path: C:\System Volume Information\_restore{9AA24420-C424-48E2-9836-6F9DF6A317C5}\RP35\A0004680.exe
Risk: High
Name: Trojan.Small.fb
Path: C:\System Volume Information\_restore{9AA24420-C424-48E2-9836-6F9DF6A317C5}\RP35\A0004685.exe
Risk: High
Name: Downloader.Agent.uj
Path: C:\System Volume Information\_restore{9AA24420-C424-48E2-9836-6F9DF6A317C5}\RP35\A0004753.exe
Risk: High
Name: Trojan.Small.fb
Path: C:\System Volume Information\_restore{9AA24420-C424-48E2-9836-6F9DF6A317C5}\RP35\A0004758.exe
Risk: High
Name: Downloader.Agent.uj
Path: C:\System Volume Information\_restore{9AA24420-C424-48E2-9836-6F9DF6A317C5}\RP35\A0004791.exe
Risk: High
Name: Trojan.Small.fb
Path: C:\System Volume Information\_restore{9AA24420-C424-48E2-9836-6F9DF6A317C5}\RP35\A0004796.exe
Risk: High
Name: Downloader.Agent.uj
Path: C:\System Volume Information\_restore{9AA24420-C424-48E2-9836-6F9DF6A317C5}\RP35\A0004824.exe
Risk: High
Name: Trojan.Small.fb
Path: C:\System Volume Information\_restore{9AA24420-C424-48E2-9836-6F9DF6A317C5}\RP35\A0004829.exe
Risk: High
Name: Downloader.Agent.uj
Path: C:\System Volume Information\_restore{9AA24420-C424-48E2-9836-6F9DF6A317C5}\RP35\A0004855.exe
Risk: High
Name: Trojan.Small.fb
Path: C:\System Volume Information\_restore{9AA24420-C424-48E2-9836-6F9DF6A317C5}\RP35\A0004859.exe
Risk: High
Name: Downloader.Agent.uj
Path: C:\System Volume Information\_restore{9AA24420-C424-48E2-9836-6F9DF6A317C5}\RP35\A0004887.exe
Risk: High
Name: Trojan.Small.fb
Path: C:\System Volume Information\_restore{9AA24420-C424-48E2-9836-6F9DF6A317C5}\RP35\A0004892.exe
Risk: High
Name: Downloader.Agent.uj
Path: C:\System Volume Information\_restore{9AA24420-C424-48E2-9836-6F9DF6A317C5}\RP35\A0004897.exe
Risk: High
Name: Trojan.Small.fb
Path: C:\System Volume Information\_restore{9AA24420-C424-48E2-9836-6F9DF6A317C5}\RP35\A0004902.exe
Risk: High
Name: Downloader.Agent.uj
Path: C:\System Volume Information\_restore{9AA24420-C424-48E2-9836-6F9DF6A317C5}\RP35\A0004916.exe
Risk: High
Name: Trojan.Small.fb
Path: C:\System Volume Information\_restore{9AA24420-C424-48E2-9836-6F9DF6A317C5}\RP35\A0004921.exe
Risk: High
Name: Downloader.Agent.uj
Path: C:\System Volume Information\_restore{9AA24420-C424-48E2-9836-6F9DF6A317C5}\RP35\A0004947.exe
Risk: High
Name: Trojan.Small.fb
Path: C:\System Volume Information\_restore{9AA24420-C424-48E2-9836-6F9DF6A317C5}\RP35\A0004951.exe
Risk: High
Name: Downloader.Agent.uj
Path: C:\System Volume Information\_restore{9AA24420-C424-48E2-9836-6F9DF6A317C5}\RP36\A0004975.exe
Risk: High
Name: Trojan.Small.fb
Path: C:\System Volume Information\_restore{9AA24420-C424-48E2-9836-6F9DF6A317C5}\RP36\A0004981.exe
Risk: High
Name: Downloader.Agent.uj
Path: C:\System Volume Information\_restore{9AA24420-C424-48E2-9836-6F9DF6A317C5}\RP36\A0005013.exe
Risk: High
Name: Trojan.Small.fb
Path: C:\System Volume Information\_restore{9AA24420-C424-48E2-9836-6F9DF6A317C5}\RP36\A0005018.exe
Risk: High
Name: Downloader.Agent.uj
Path: C:\System Volume Information\_restore{9AA24420-C424-48E2-9836-6F9DF6A317C5}\RP36\A0005023.exe
Risk: High
Name: Trojan.Small.fb
Path: C:\System Volume Information\_restore{9AA24420-C424-48E2-9836-6F9DF6A317C5}\RP36\A0005027.exe
Risk: High
Name: Downloader.Agent.uj
Path: C:\System Volume Information\_restore{9AA24420-C424-48E2-9836-6F9DF6A317C5}\RP36\A0005072.exe
Risk: High
Name: Trojan.Small.fb
Path: C:\System Volume Information\_restore{9AA24420-C424-48E2-9836-6F9DF6A317C5}\RP36\A0005077.exe
Risk: High
Name: Downloader.Agent.uj
Path: C:\System Volume Information\_restore{9AA24420-C424-48E2-9836-6F9DF6A317C5}\RP36\A0005125.exe
Risk: High
Name: Trojan.Small.fb
Path: C:\System Volume Information\_restore{9AA24420-C424-48E2-9836-6F9DF6A317C5}\RP36\A0005129.exe
Risk: High
Name: Downloader.Agent.uj
Path: C:\System Volume Information\_restore{9AA24420-C424-48E2-9836-6F9DF6A317C5}\RP36\A0005147.exe
Risk: High
Name: Trojan.Small.fb
Path: C:\System Volume Information\_restore{9AA24420-C424-48E2-9836-6F9DF6A317C5}\RP36\A0005152.exe
Risk: High
Name: Downloader.Agent.uj
Path: C:\System Volume Information\_restore{9AA24420-C424-48E2-9836-6F9DF6A317C5}\RP36\A0005191.exe
Risk: High
Name: Trojan.Small.fb
Path: C:\System Volume Information\_restore{9AA24420-C424-48E2-9836-6F9DF6A317C5}\RP36\A0005198.exe
Risk: High
Name: Downloader.Agent.uj
Path: C:\System Volume Information\_restore{9AA24420-C424-48E2-9836-6F9DF6A317C5}\RP36\A0005203.exe
Risk: High
Name: Trojan.Small.fb
Path: C:\System Volume Information\_restore{9AA24420-C424-48E2-9836-6F9DF6A317C5}\RP36\A0005208.exe
Risk: High
Name: Downloader.Agent.uj
Path: C:\System Volume Information\_restore{9AA24420-C424-48E2-9836-6F9DF6A317C5}\RP36\A0005216.exe
Risk: High
Name: Trojan.Small.fb
Path: C:\System Volume Information\_restore{9AA24420-C424-48E2-9836-6F9DF6A317C5}\RP36\A0005221.exe
Risk: High
Name: Downloader.Agent.uj
Path: C:\System Volume Information\_restore{9AA24420-C424-48E2-9836-6F9DF6A317C5}\RP36\A0005242.exe
Risk: High
Name: Downloader.Agent.uj
Path: C:\System Volume Information\_restore{9AA24420-C424-48E2-9836-6F9DF6A317C5}\RP36\A0005247.exe
Risk: High
Name: Trojan.Small.fb
Path: C:\System Volume Information\_restore{9AA24420-C424-48E2-9836-6F9DF6A317C5}\RP36\A0005252.exe
Risk: High
Name: Downloader.Agent.uj
Path: C:\System Volume Information\_restore{9AA24420-C424-48E2-9836-6F9DF6A317C5}\RP37\A0005264.exe
Risk: High
Name: Trojan.Small.fb
Path: C:\System Volume Information\_restore{9AA24420-C424-48E2-9836-6F9DF6A317C5}\RP37\A0005269.exe
Risk: High
Name: Downloader.Agent.uj
Path: C:\System Volume Information\_restore{9AA24420-C424-48E2-9836-6F9DF6A317C5}\RP39\A0005758.exe
Risk: High
Name: Trojan.Small.fb
Path: C:\System Volume Information\_restore{9AA24420-C424-48E2-9836-6F9DF6A317C5}\RP39\A0005761.exe
Risk: High
Name: Downloader.Agent.uj
Path: C:\System Volume Information\_restore{9AA24420-C424-48E2-9836-6F9DF6A317C5}\RP39\A0005770.exe
Risk: High
Name: Trojan.Small.fb
Path: C:\System Volume Information\_restore{9AA24420-C424-48E2-9836-6F9DF6A317C5}\RP39\A0005773.exe
Risk: High
Name: Trojan.Small.fb
Path: C:\WINDOWS\system32\dmagt.exe
Risk: High
Name: Trojan.Small.fb
Path: C:\WINDOWS\system32\dmgfl.exe
Risk: High
[ Este mensaje fué editado por: Rahel el 31-10-2006 a las 19:56] | |
|
|
|
