elhacker.net cabecera Bienvenido(a), Visitante. Por favor Ingresar o Registrarse
¿Perdiste tu email de activación?.

 

 


Tema destacado: Guía actualizada para evitar que un ransomware ataque tu empresa


  Mostrar Mensajes
Páginas: 1 2 [3]
21  Seguridad Informática / Seguridad / Re: me redirecciona a una pagina abnow.com en: 10 Febrero 2012, 22:08 pm
Y he pasado este programa y me sale lo siguiente:

LOG:
21:54:22.0671 2668   TDSS rootkit removing tool 2.7.11.0 Feb  9 2012 10:12:57
21:54:22.0984 2668   ============================================================
21:54:22.0984 2668   Current date / time: 2012/02/10 21:54:22.0984
21:54:22.0984 2668   SystemInfo:
21:54:22.0984 2668   
21:54:22.0984 2668   OS Version: 5.1.2600 ServicePack: 2.0
21:54:22.0984 2668   Product type: Workstation
21:54:22.0984 2668   ComputerName: PC-CAROL
21:54:22.0984 2668   UserName: Carol
21:54:22.0984 2668   Windows directory: C:\WINDOWS
21:54:22.0984 2668   System windows directory: C:\WINDOWS
21:54:22.0984 2668   Processor architecture: Intel x86
21:54:22.0984 2668   Number of processors: 1
21:54:22.0984 2668   Page size: 0x1000
21:54:22.0984 2668   Boot type: Normal boot
21:54:22.0984 2668   ============================================================
21:54:25.0375 2668   Drive \Device\Harddisk1\DR1 - Size: 0x2E93E36000 (186.31 Gb), SectorSize: 0x200, Cylinders: 0x5F01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000058
21:54:25.0406 2668   Drive \Device\Harddisk0\DR0 - Size: 0x25433D6000 (149.05 Gb), SectorSize: 0x200, Cylinders: 0x4C01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000054
21:54:25.0421 2668   Drive \Device\Harddisk2\DR8 - Size: 0x3B9C00000 (14.90 Gb), SectorSize: 0x200, Cylinders: 0x799, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'W'
21:54:25.0421 2668   \Device\Harddisk1\DR1:
21:54:25.0421 2668   MBR used
21:54:25.0421 2668   \Device\Harddisk1\DR1\Partition0: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x16534314
21:54:25.0437 2668   \Device\Harddisk0\DR0:
21:54:25.0437 2668   MBR used
21:54:25.0437 2668   \Device\Harddisk0\DR0\Partition0: MBR, Type 0x7, StartLBA 0x3EC1, BlocksNum 0x4FFD625
21:54:25.0437 2668   \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x50014E6, BlocksNum 0xDA175DB
21:54:25.0437 2668   \Device\Harddisk2\DR8:
21:54:25.0437 2668   MBR used
21:54:25.0437 2668   \Device\Harddisk2\DR8\Partition0: MBR, Type 0xC, StartLBA 0x1F80, BlocksNum 0x1DCC080
21:54:25.0531 2668   Initialize success
21:54:25.0531 2668   ============================================================
21:54:30.0640 2856   ============================================================
21:54:30.0640 2856   Scan started
21:54:30.0640 2856   Mode: Manual;
21:54:30.0640 2856   ============================================================
21:54:30.0859 2856   Abiosdsk - ok
21:54:30.0890 2856   abp480n5 - ok
21:54:30.0953 2856   ACPI            (33d1373ee875ce8b063777f7e77815b7) C:\WINDOWS\system32\DRIVERS\ACPI.sys
21:54:30.0953 2856   ACPI - ok
21:54:31.0000 2856   ACPIEC          (1c905333c0b9f3d7c68ddf25e54b00f9) C:\WINDOWS\system32\drivers\ACPIEC.sys
21:54:31.0000 2856   ACPIEC - ok
21:54:31.0062 2856   adfs            (6d7f09cd92a9fef3a8efce66231fdd79) C:\WINDOWS\system32\drivers\adfs.sys
21:54:31.0062 2856   adfs - ok
21:54:31.0093 2856   adpu160m - ok
21:54:31.0156 2856   aeaudio         (11c04b17ed2abbb4833694bcd644ac90) C:\WINDOWS\system32\drivers\aeaudio.sys
21:54:31.0156 2856   aeaudio - ok
21:54:31.0234 2856   aec             (1ee7b434ba961ef845de136224c30fec) C:\WINDOWS\system32\drivers\aec.sys
21:54:31.0234 2856   aec - ok
21:54:31.0281 2856   Afc             (fe3ea6e9afc1a78e6edca121e006afb7) C:\WINDOWS\system32\drivers\Afc.sys
21:54:31.0281 2856   Afc - ok
21:54:31.0343 2856   AFD             (55e6e1c51b6d30e54335750955453702) C:\WINDOWS\System32\drivers\afd.sys
21:54:31.0343 2856   AFD - ok
21:54:31.0375 2856   Aha154x - ok
21:54:31.0406 2856   aic78u2 - ok
21:54:31.0437 2856   aic78xx - ok
21:54:31.0468 2856   AliIde - ok
21:54:31.0484 2856   amsint - ok
21:54:31.0515 2856   asc - ok
21:54:31.0562 2856   asc3350p - ok
21:54:31.0578 2856   asc3550 - ok
21:54:31.0656 2856   AsyncMac        (02000abf34af4c218c35d257024807d6) C:\WINDOWS\system32\DRIVERS\asyncmac.sys
21:54:31.0656 2856   AsyncMac - ok
21:54:31.0718 2856   atapi           (cdfe4411a69c224bd1d11b2da92dac51) C:\WINDOWS\system32\DRIVERS\atapi.sys
21:54:31.0718 2856   atapi - ok
21:54:31.0750 2856   Atdisk - ok
21:54:31.0875 2856   ati2mtag        (492bd2a5f65f218d4ede5764a3bb67e9) C:\WINDOWS\system32\DRIVERS\ati2mtag.sys
21:54:31.0921 2856   ati2mtag - ok
21:54:31.0968 2856   Atmarpc         (ec88da854ab7d7752ec8be11a741bb7f) C:\WINDOWS\system32\DRIVERS\atmarpc.sys
21:54:31.0968 2856   Atmarpc - ok
21:54:32.0031 2856   audstub         (d9f724aa26c010a217c97606b160ed68) C:\WINDOWS\system32\DRIVERS\audstub.sys
21:54:32.0031 2856   audstub - ok
21:54:32.0109 2856   Beep            (da1f27d85e0d1525f6621372e7b685e9) C:\WINDOWS\system32\drivers\Beep.sys
21:54:32.0109 2856   Beep - ok
21:54:32.0218 2856   BT848           (97348d5b601d0860542788cb5f2e4992) C:\WINDOWS\system32\drivers\BT848.sys
21:54:32.0218 2856   BT848 - ok
21:54:32.0296 2856   BTCFilterService (4813df77ede536a52e3737971f910baa) C:\WINDOWS\system32\DRIVERS\motfilt.sys
21:54:32.0312 2856   BTCFilterService - ok
21:54:32.0359 2856   BTTUNER         (bba1118f65b2c70b361b827240a184e2) C:\WINDOWS\system32\drivers\BTTUNER.sys
21:54:32.0359 2856   BTTUNER - ok
21:54:32.0421 2856   BTXBAR          (6d4859dfcec6fb26266595e3b7c42b8e) C:\WINDOWS\system32\drivers\BTXBAR.sys
21:54:32.0421 2856   BTXBAR - ok
21:54:32.0421 2856   catchme - ok
21:54:32.0468 2856   cbidf2k         (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS\system32\drivers\cbidf2k.sys
21:54:32.0484 2856   cbidf2k - ok
21:54:32.0515 2856   CCDECODE        (6163ed60b684bab19d3352ab22fc48b2) C:\WINDOWS\system32\DRIVERS\CCDECODE.sys
21:54:32.0515 2856   CCDECODE - ok
21:54:32.0562 2856   cd20xrnt - ok
21:54:32.0609 2856   Cdaudio         (c1b486a7658353d33a10cc15211a873b) C:\WINDOWS\system32\drivers\Cdaudio.sys
21:54:32.0609 2856   Cdaudio - ok
21:54:32.0671 2856   Cdfs            (cd7d5152df32b47f4e36f710b35aae02) C:\WINDOWS\system32\drivers\Cdfs.sys
21:54:32.0671 2856   Cdfs - ok
21:54:32.0734 2856   Cdrom           (af9c19b3100fe010496b1a27181fbf72) C:\WINDOWS\system32\DRIVERS\cdrom.sys
21:54:32.0734 2856   Cdrom - ok
21:54:32.0765 2856   Changer - ok
21:54:32.0812 2856   CmdIde - ok
21:54:32.0843 2856   Cpqarray - ok
21:54:32.0875 2856   dac2w2k - ok
21:54:32.0906 2856   dac960nt - ok
21:54:32.0953 2856   Disk            (00ca44e4534865f8a3b64f7c0984bff0) C:\WINDOWS\system32\DRIVERS\disk.sys
21:54:32.0953 2856   Disk - ok
21:54:33.0031 2856   dmboot          (9fb634a0ed429aa64de57c53dd10ccf9) C:\WINDOWS\system32\drivers\dmboot.sys
21:54:33.0046 2856   dmboot - ok
21:54:33.0093 2856   dmio            (67decfaf3b6cdb34b3fa77d965281bb5) C:\WINDOWS\system32\drivers\dmio.sys
21:54:33.0093 2856   dmio - ok
21:54:33.0125 2856   dmload          (e9317282a63ca4d188c0df5e09c6ac5f) C:\WINDOWS\system32\drivers\dmload.sys
21:54:33.0125 2856   dmload - ok
21:54:33.0171 2856   DMusic          (a6f881284ac1150e37d9ae47ff601267) C:\WINDOWS\system32\drivers\DMusic.sys
21:54:33.0171 2856   DMusic - ok
21:54:33.0218 2856   dpti2o - ok
21:54:33.0265 2856   drmkaud         (1ed4dbbae9f5d558dbba4cc450e3eb2e) C:\WINDOWS\system32\drivers\drmkaud.sys
21:54:33.0265 2856   drmkaud - ok
21:54:33.0312 2856   Fastfat         (3117f595e9615e04f05a54fc15a03b20) C:\WINDOWS\system32\drivers\Fastfat.sys
21:54:33.0328 2856   Fastfat - ok
21:54:33.0625 2856   Fdc             (ced2e8396a8838e59d8fd529c680e02c) C:\WINDOWS\system32\DRIVERS\fdc.sys
21:54:33.0625 2856   Fdc - ok
21:54:33.0671 2856   Fips            (6e9d149cfae2af4783f85dbd6cedf7a1) C:\WINDOWS\system32\drivers\Fips.sys
21:54:33.0671 2856   Fips - ok
21:54:33.0734 2856   Flpydisk        (0dd1de43115b93f4d85e889d7a86f548) C:\WINDOWS\system32\DRIVERS\flpydisk.sys
21:54:33.0734 2856   Flpydisk - ok
21:54:33.0781 2856   FltMgr          (3d234fb6d6ee875eb009864a299bea29) C:\WINDOWS\system32\DRIVERS\fltMgr.sys
21:54:33.0781 2856   FltMgr - ok
21:54:33.0828 2856   Fs_Rec          (3e1e2bd4f39b0e2b7dc4f4d2bcc2779a) C:\WINDOWS\system32\drivers\Fs_Rec.sys
21:54:33.0828 2856   Fs_Rec - ok
21:54:33.0859 2856   Ftdisk          (cc5f3af5711a1c7c8fa1d43bb16b401a) C:\WINDOWS\system32\DRIVERS\ftdisk.sys
21:54:33.0859 2856   Ftdisk - ok
21:54:33.0921 2856   gagp30kx        (4216cd545e5c30807b560c5dcaa812e6) C:\WINDOWS\system32\DRIVERS\gagp30kx.sys
21:54:33.0921 2856   gagp30kx - ok
21:54:33.0984 2856   Gpc             (c0f1d4a21de5a415df8170616703debf) C:\WINDOWS\system32\DRIVERS\msgpc.sys
21:54:33.0984 2856   Gpc - ok
21:54:34.0062 2856   Hardlock        (d95554949082fd29a04d351b58396718) C:\WINDOWS\system32\drivers\hardlock.sys
21:54:34.0078 2856   Hardlock - ok
21:54:34.0125 2856   HidUsb          (1de6783b918f540149aa69943bdfeba8) C:\WINDOWS\system32\DRIVERS\hidusb.sys
21:54:34.0125 2856   HidUsb - ok
21:54:34.0156 2856   hpn - ok
21:54:34.0234 2856   HTTP            (9f8b0f4276f618964fd118be4289b7cd) C:\WINDOWS\system32\Drivers\HTTP.sys
21:54:34.0234 2856   HTTP - ok
21:54:34.0281 2856   i2omgmt - ok
21:54:34.0296 2856   i2omp - ok
21:54:34.0359 2856   i8042prt        (0cab3ee361cfeab260b3906c8b6fb2be) C:\WINDOWS\system32\DRIVERS\i8042prt.sys
21:54:34.0359 2856   i8042prt - ok
21:54:34.0437 2856   Imapi           (f8aa320c6a0409c0380e5d8a99d76ec6) C:\WINDOWS\system32\DRIVERS\imapi.sys
21:54:34.0437 2856   Imapi - ok
21:54:34.0468 2856   ini910u - ok
21:54:34.0500 2856   IntelIde - ok
21:54:34.0546 2856   Ip6Fw           (4448006b6bc60e6c027932cfc38d6855) C:\WINDOWS\system32\DRIVERS\Ip6Fw.sys
21:54:34.0546 2856   Ip6Fw - ok
21:54:34.0609 2856   IpFilterDriver  (731f22ba402ee4b62748adaf6363c182) C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
21:54:34.0609 2856   IpFilterDriver - ok
21:54:34.0640 2856   IpInIp          (e1ec7f5da720b640cd8fb8424f1b14bb) C:\WINDOWS\system32\DRIVERS\ipinip.sys
21:54:34.0640 2856   IpInIp - ok
21:54:34.0703 2856   IpNat           (e2168cbc7098ffe963c6f23f472a3593) C:\WINDOWS\system32\DRIVERS\ipnat.sys
21:54:34.0703 2856   IpNat - ok
21:54:34.0765 2856   IPSec           (64537aa5c003a6afeee1df819062d0d1) C:\WINDOWS\system32\DRIVERS\ipsec.sys
21:54:34.0765 2856   IPSec - ok
21:54:34.0828 2856   IRENUM          (50708daa1b1cbb7d6ac1cf8f56a24410) C:\WINDOWS\system32\DRIVERS\irenum.sys
21:54:34.0828 2856   IRENUM - ok
21:54:34.0875 2856   isapnp          (90bc6118193b4e8a76f0fc0d4a3572de) C:\WINDOWS\system32\DRIVERS\isapnp.sys
21:54:34.0875 2856   isapnp - ok
21:54:34.0906 2856   Kbdclass        (71bfdda7b3006b45b18d8bac92bc9993) C:\WINDOWS\system32\DRIVERS\kbdclass.sys
21:54:34.0921 2856   Kbdclass - ok
21:54:34.0968 2856   kbdhid          (24334eb02603262309f648ef9e06496e) C:\WINDOWS\system32\DRIVERS\kbdhid.sys
21:54:34.0968 2856   kbdhid - ok
21:54:35.0015 2856   kmixer          (ba5deda4d934e6288c2f66caf58d2562) C:\WINDOWS\system32\drivers\kmixer.sys
21:54:35.0031 2856   kmixer - ok
21:54:35.0078 2856   KSecDD          (674d3e5a593475915dc6643317192403) C:\WINDOWS\system32\drivers\KSecDD.sys
21:54:35.0078 2856   KSecDD - ok
21:54:35.0109 2856   lbrtfdc - ok
21:54:35.0171 2856   MBAMProtector   (b7ca8cc3f978201856b6ab82f40953c3) C:\WINDOWS\system32\drivers\mbam.sys
21:54:35.0187 2856   MBAMProtector - ok
21:54:35.0234 2856   mnmdd           (4ae068242760a1fb6e1a44bf4e16afa6) C:\WINDOWS\system32\drivers\mnmdd.sys
21:54:35.0234 2856   mnmdd - ok
21:54:35.0281 2856   Modem           (b65f57d37e8d43089b701ed16e22d0e9) C:\WINDOWS\system32\drivers\Modem.sys
21:54:35.0281 2856   Modem - ok
21:54:35.0359 2856   motccgp         (c741717b0a18813dd7d12085937cee72) C:\WINDOWS\system32\DRIVERS\motccgp.sys
21:54:35.0359 2856   motccgp - ok
21:54:35.0390 2856   motccgpfl       (b812da6605caf02641312f1f65c75419) C:\WINDOWS\system32\DRIVERS\motccgpfl.sys
21:54:35.0390 2856   motccgpfl - ok
21:54:35.0437 2856   motmodem        (54fee02961c70fd9d4d7e2f87afa23fa) C:\WINDOWS\system32\DRIVERS\motmodem.sys
21:54:35.0437 2856   motmodem - ok
21:54:35.0484 2856   MotoSwitchService (fd8c2cef7ad8b23c6714103d621fac1f) C:\WINDOWS\system32\DRIVERS\motswch.sys
21:54:35.0484 2856   MotoSwitchService - ok
21:54:35.0546 2856   Motousbnet      (ddc489d40b49f443787e7ffa75373522) C:\WINDOWS\system32\DRIVERS\Motousbnet.sys
21:54:35.0546 2856   Motousbnet - ok
21:54:35.0593 2856   motusbdevice    (2136cca3d1bf7c0248e5366b1a6c24e3) C:\WINDOWS\system32\DRIVERS\motusbdevice.sys
21:54:35.0593 2856   motusbdevice - ok
21:54:35.0656 2856   Mouclass        (05e9c75c6797145a4983e9d0a4778bc3) C:\WINDOWS\system32\DRIVERS\mouclass.sys
21:54:35.0656 2856   Mouclass - ok
21:54:35.0703 2856   mouhid          (8ee532e516b2d23d686cfc1cc0a15c25) C:\WINDOWS\system32\DRIVERS\mouhid.sys
21:54:35.0703 2856   mouhid - ok
21:54:35.0750 2856   MountMgr        (65653f3b4477f3c63e68a9659f85ee2e) C:\WINDOWS\system32\drivers\MountMgr.sys
21:54:35.0765 2856   MountMgr - ok
21:54:35.0796 2856   mraid35x - ok
21:54:35.0843 2856   MRxDAV          (46edcc8f2db2f322c24f48785cb46366) C:\WINDOWS\system32\DRIVERS\mrxdav.sys
21:54:35.0843 2856   MRxDAV - ok
21:54:35.0906 2856   MRxSmb          (fb6c89bb3ce282b08bdb1e3c179e1c39) C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
21:54:35.0921 2856   MRxSmb - ok
21:54:35.0968 2856   Msfs            (561b3a4333ca2dbdba28b5b956822519) C:\WINDOWS\system32\drivers\Msfs.sys
21:54:35.0968 2856   Msfs - ok
21:54:36.0015 2856   MSKSSRV         (ae431a8dd3c1d0d0610cdbac16057ad0) C:\WINDOWS\system32\drivers\MSKSSRV.sys
21:54:36.0015 2856   MSKSSRV - ok
21:54:36.0062 2856   MSPCLOCK        (13e75fef9dfeb08eeded9d0246e1f448) C:\WINDOWS\system32\drivers\MSPCLOCK.sys
21:54:36.0062 2856   MSPCLOCK - ok
21:54:36.0109 2856   MSPQM           (1988a33ff19242576c3d0ef9ce785da7) C:\WINDOWS\system32\drivers\MSPQM.sys
21:54:36.0109 2856   MSPQM - ok
21:54:36.0156 2856   mssmbios        (469541f8bfd2b32659d5d463a6714bce) C:\WINDOWS\system32\DRIVERS\mssmbios.sys
21:54:36.0156 2856   mssmbios - ok
21:54:36.0234 2856   MSTEE           (bf13612142995096ab084f2db7f40f77) C:\WINDOWS\system32\drivers\MSTEE.sys
21:54:36.0234 2856   MSTEE - ok
21:54:36.0281 2856   Mup             (82035e0f41c2dd05ae41d27fe6cf7de1) C:\WINDOWS\system32\drivers\Mup.sys
21:54:36.0281 2856   Mup - ok
21:54:36.0343 2856   NABTSFEC        (5c8dc6429c43dc6177c1fa5b76290d1a) C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys
21:54:36.0343 2856   NABTSFEC - ok
21:54:36.0656 2856   NDIS            (558635d3af1c7546d26067d5d9b6959e) C:\WINDOWS\system32\drivers\NDIS.sys
21:54:36.0671 2856   NDIS - ok
21:54:36.0703 2856   NdisIP          (520ce427a8b298f54112857bcf6bde15) C:\WINDOWS\system32\DRIVERS\NdisIP.sys
21:54:36.0703 2856   NdisIP - ok
21:54:36.0750 2856   NdisTapi        (08d43bbdacdf23f34d79e44ed35c1b4c) C:\WINDOWS\system32\DRIVERS\ndistapi.sys
21:54:36.0750 2856   NdisTapi - ok
21:54:36.0796 2856   Ndisuio         (34d6cd56409da9a7ed573e1c90a308bf) C:\WINDOWS\system32\DRIVERS\ndisuio.sys
21:54:36.0796 2856   Ndisuio - ok
21:54:36.0828 2856   NdisWan         (0b90e255a9490166ab368cd55a529893) C:\WINDOWS\system32\DRIVERS\ndiswan.sys
21:54:36.0828 2856   NdisWan - ok
21:54:36.0875 2856   NDProxy         (59fc3fb44d2669bc144fd87826bb571f) C:\WINDOWS\system32\drivers\NDProxy.sys
21:54:36.0875 2856   NDProxy - ok
21:54:36.0906 2856   NetBIOS         (3a2aca8fc1d7786902ca434998d7ceb4) C:\WINDOWS\system32\DRIVERS\netbios.sys
21:54:36.0906 2856   NetBIOS - ok
21:54:36.0953 2856   NetBT           (0c80e410cd2f47134407ee7dd19cc86b) C:\WINDOWS\system32\DRIVERS\netbt.sys
21:54:36.0953 2856   NetBT - ok
21:54:37.0000 2856   Npfs            (4f601bcb8f64ea3ac0994f98fed03f8e) C:\WINDOWS\system32\drivers\Npfs.sys
21:54:37.0000 2856   Npfs - ok
21:54:37.0062 2856   NSHE            (f8e396f5e703d7a8f37d90f59c776268) C:\WINDOWS\system32\Drivers\NSHE.SYS
21:54:37.0062 2856   NSHE - ok
21:54:37.0125 2856   Ntfs            (b78be402c3f63dd55521f73876951cdd) C:\WINDOWS\system32\drivers\Ntfs.sys
21:54:37.0156 2856   Ntfs - ok
21:54:37.0187 2856   Null            (73c1e1f395918bc2c6dd67af7591a3ad) C:\WINDOWS\system32\drivers\Null.sys
21:54:37.0187 2856   Null - ok
21:54:37.0234 2856   NwlnkFlt        (b305f3fad35083837ef46a0bbce2fc57) C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys
21:54:37.0234 2856   NwlnkFlt - ok
21:54:37.0265 2856   NwlnkFwd        (c99b3415198d1aab7227f2c88fd664b9) C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys
21:54:37.0265 2856   NwlnkFwd - ok
21:54:37.0640 2856   Parport         (0df0b83c90473ccfdc3dc882cbb6e4a9) C:\WINDOWS\system32\DRIVERS\parport.sys
21:54:37.0640 2856   Parport - ok
21:54:37.0796 2856   PartMgr         (3334430c29dc338092f79c38ef7b4cd0) C:\WINDOWS\system32\drivers\PartMgr.sys
21:54:37.0796 2856   PartMgr - ok
21:54:37.0828 2856   ParVdm          (fad44d704ecd7d39ad01415b8bb34204) C:\WINDOWS\system32\drivers\ParVdm.sys
21:54:37.0843 2856   ParVdm - ok
21:54:37.0875 2856   PCI             (a566b8da5e70b3237274d418853a87e0) C:\WINDOWS\system32\DRIVERS\pci.sys
21:54:37.0875 2856   PCI - ok
21:54:37.0921 2856   PCIDump - ok
21:54:37.0953 2856   PCIIde - ok
21:54:38.0000 2856   Pcmcia          (6374a34b03aea7971c976982a391ad07) C:\WINDOWS\system32\drivers\Pcmcia.sys
21:54:38.0000 2856   Pcmcia - ok
21:54:38.0031 2856   PDCOMP - ok
21:54:38.0062 2856   PDFRAME - ok
21:54:38.0093 2856   PDRELI - ok
21:54:38.0109 2856   PDRFRAME - ok
21:54:38.0140 2856   perc2 - ok
21:54:38.0156 2856   perc2hib - ok
21:54:38.0250 2856   PptpMiniport    (1c5cc65aac0783c344f16353e60b72ac) C:\WINDOWS\system32\DRIVERS\raspptp.sys
21:54:38.0250 2856   PptpMiniport - ok
21:54:38.0328 2856   Processor       (8526ecbc5e6abc0404c3d3d0733f2c00) C:\WINDOWS\system32\DRIVERS\processr.sys
21:54:38.0328 2856   Processor - ok
21:54:38.0375 2856   PSched          (48671f327553dcf1d27f6197f622a668) C:\WINDOWS\system32\DRIVERS\psched.sys
21:54:38.0375 2856   PSched - ok
21:54:38.0421 2856   Ptilink         (80d317bd1c3dbc5d4fe7b1678c60cadd) C:\WINDOWS\system32\DRIVERS\ptilink.sys
21:54:38.0421 2856   Ptilink - ok
21:54:38.0453 2856   ql1080 - ok
21:54:38.0484 2856   Ql10wnt - ok
21:54:38.0515 2856   ql12160 - ok
21:54:38.0562 2856   ql1240 - ok
21:54:38.0593 2856   ql1280 - ok
21:54:38.0656 2856   RasAcd          (fe0d99d6f31e4fad8159f690d68ded9c) C:\WINDOWS\system32\DRIVERS\rasacd.sys
21:54:38.0656 2856   RasAcd - ok
21:54:38.0703 2856   Rasl2tp         (98faeb4a4dcf812ba1c6fca4aa3e115c) C:\WINDOWS\system32\DRIVERS\rasl2tp.sys
21:54:38.0703 2856   Rasl2tp - ok
21:54:38.0750 2856   RasPppoe        (7306eeed8895454cbed4669be9f79faa) C:\WINDOWS\system32\DRIVERS\raspppoe.sys
21:54:38.0750 2856   RasPppoe - ok
21:54:38.0796 2856   Raspti          (fdbb1d60066fcfbb7452fd8f9829b242) C:\WINDOWS\system32\DRIVERS\raspti.sys
21:54:38.0812 2856   Raspti - ok
21:54:38.0890 2856   Rdbss           (03b965b1ca47f6ef60eb5e51cb50e0af) C:\WINDOWS\system32\DRIVERS\rdbss.sys
21:54:38.0890 2856   Rdbss - ok
21:54:38.0937 2856   RDPCDD          (4912d5b403614ce99c28420f75353332) C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
21:54:38.0937 2856   RDPCDD - ok
21:54:39.0000 2856   rdpdr           (a2cae2c60bc37e0751ef9dda7ceaf4ad) C:\WINDOWS\system32\DRIVERS\rdpdr.sys
21:54:39.0000 2856   rdpdr - ok
21:54:39.0062 2856   RDPWD           (b54cd38a9ebfbf2b3561426e3fe26f62) C:\WINDOWS\system32\drivers\RDPWD.sys
21:54:39.0062 2856   RDPWD - ok
21:54:39.0125 2856   redbook         (28531a950381da67fc6412dfebcc8c5c) C:\WINDOWS\system32\DRIVERS\redbook.sys
21:54:39.0125 2856   redbook - ok
21:54:39.0218 2856   Secdrv          (d26e26ea516450af9d072635c60387f4) C:\WINDOWS\system32\DRIVERS\secdrv.sys
21:54:39.0218 2856   Secdrv - ok
21:54:39.0265 2856   serenum         (a2d868aeeff612e70e213c451a70cafb) C:\WINDOWS\system32\DRIVERS\serenum.sys
21:54:39.0265 2856   serenum - ok
21:54:39.0328 2856   Serial          (58d2e0611a910db5cd99488f9286d1e7) C:\WINDOWS\system32\DRIVERS\serial.sys
21:54:39.0328 2856   Serial ( Virus.Win32.ZAccess.g ) - infected
21:54:39.0328 2856   Serial - detected Virus.Win32.ZAccess.g (0)
21:54:39.0390 2856   Sfloppy         (0d13b6df6e9e101013a7afb0ce629fe0) C:\WINDOWS\system32\drivers\Sfloppy.sys
21:54:39.0390 2856   Sfloppy - ok
21:54:39.0437 2856   Simbad - ok
21:54:39.0484 2856   SLIP            (5caeed86821fa2c6139e32e9e05ccdc9) C:\WINDOWS\system32\DRIVERS\SLIP.sys
21:54:39.0484 2856   SLIP - ok
21:54:39.0578 2856   smwdm           (1d381a07361e4d6a8be95026b3eba47a) C:\WINDOWS\system32\drivers\smwdm.sys
21:54:39.0703 2856   smwdm - ok
21:54:39.0765 2856   snapman         (ca874705db0286f4abcbf2f0f1e05a4f) C:\WINDOWS\system32\DRIVERS\snapman.sys
21:54:39.0765 2856   snapman - ok
21:54:39.0812 2856   Sparrow - ok
21:54:39.0859 2856   splitter        (0ce218578fff5f4f7e4201539c45c78f) C:\WINDOWS\system32\drivers\splitter.sys
21:54:39.0875 2856   splitter - ok
21:54:39.0906 2856   sr              (3c151d50cf3ae1683c6e3ec201b2ad3d) C:\WINDOWS\system32\DRIVERS\sr.sys
21:54:39.0906 2856   sr - ok
21:54:39.0968 2856   Srv             (7a4f147cc6b133f905f6e65e2f8669fb) C:\WINDOWS\system32\DRIVERS\srv.sys
21:54:39.0984 2856   Srv - ok
21:54:40.0031 2856   streamip        (284c57df5dc7abca656bc2b96a667afb) C:\WINDOWS\system32\DRIVERS\StreamIP.sys
21:54:40.0031 2856   streamip - ok
21:54:40.0078 2856   swenum          (03c1bae4766e2450219d20b993d6e046) C:\WINDOWS\system32\DRIVERS\swenum.sys
21:54:40.0078 2856   swenum - ok
21:54:40.0156 2856   swmidi          (94abc808fc4b6d7d2bbf42b85e25bb4d) C:\WINDOWS\system32\drivers\swmidi.sys
21:54:40.0171 2856   swmidi - ok
21:54:40.0187 2856   symc810 - ok
21:54:40.0234 2856   symc8xx - ok
21:54:40.0265 2856   sym_hi - ok
21:54:40.0296 2856   sym_u3 - ok
21:54:40.0406 2856   sysaudio        (650ad082d46bac0e64c9c0e0928492fd) C:\WINDOWS\system32\drivers\sysaudio.sys
21:54:40.0406 2856   sysaudio - ok
21:54:40.0593 2856   Tcpip           (2a5554fc5b1e04e131230e3ce035c3f9) C:\WINDOWS\system32\DRIVERS\tcpip.sys
21:54:40.0671 2856   Tcpip - ok
21:54:40.0937 2856   TDPIPE          (38d437cf2d98965f239b0abcd66dcb0f) C:\WINDOWS\system32\drivers\TDPIPE.sys
21:54:40.0953 2856   TDPIPE - ok
21:54:41.0015 2856   TDTCP           (ed0580af02502d00ad8c4c066b156be9) C:\WINDOWS\system32\drivers\TDTCP.sys
21:54:41.0015 2856   TDTCP - ok
21:54:41.0062 2856   TermDD          (a540a99c281d933f3d69d55e48727f47) C:\WINDOWS\system32\DRIVERS\termdd.sys
21:54:41.0062 2856   TermDD - ok
21:54:41.0125 2856   tifsfilter      (25c18531ec912e8669273d6bf6774f25) C:\WINDOWS\system32\DRIVERS\tifsfilt.sys
21:54:41.0125 2856   tifsfilter - ok
21:54:41.0187 2856   timounter       (3263894d73f2ff1ba93ef9944fd264d5) C:\WINDOWS\system32\DRIVERS\timntr.sys
21:54:41.0218 2856   timounter - ok
21:54:41.0265 2856   TosIde - ok
21:54:41.0328 2856   Udfs            (12f70256f140cd7d52c58c7048fde657) C:\WINDOWS\system32\drivers\Udfs.sys
21:54:41.0328 2856   Udfs - ok
21:54:41.0359 2856   ultra - ok
21:54:41.0421 2856   Update          (aff2e5045961bbc0a602bb6f95eb1345) C:\WINDOWS\system32\DRIVERS\update.sys
21:54:41.0421 2856   Update - ok
21:54:41.0500 2856   usbccgp         (bffd9f120cc63bcbaa3d840f3eef9f79) C:\WINDOWS\system32\DRIVERS\usbccgp.sys
21:54:41.0500 2856   usbccgp - ok
21:54:41.0718 2856   usbehci         (15e993ba2f6946b2bfbbfcd30398621e) C:\WINDOWS\system32\DRIVERS\usbehci.sys
21:54:41.0718 2856   usbehci - ok
21:54:41.0765 2856   usbhub          (c72f40947f92cea56a8fb532edf025f1) C:\WINDOWS\system32\DRIVERS\usbhub.sys
21:54:41.0781 2856   usbhub - ok
21:54:41.0828 2856   usbprint        (a42369b7cd8886cd7c70f33da6fcbcf5) C:\WINDOWS\system32\DRIVERS\usbprint.sys
21:54:41.0828 2856   usbprint - ok
21:54:41.0875 2856   usbscan         (a6bc71402f4f7dd5b77fd7f4a8ddba85) C:\WINDOWS\system32\DRIVERS\usbscan.sys
21:54:41.0875 2856   usbscan - ok
21:54:41.0921 2856   USBSTOR         (6cd7b22193718f1d17a47a1cd6d37e75) C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
21:54:41.0937 2856   USBSTOR - ok
21:54:41.0968 2856   usbuhci         (f8fd1400092e23c8f2f31406ef06167b) C:\WINDOWS\system32\DRIVERS\usbuhci.sys
21:54:41.0968 2856   usbuhci - ok
21:54:42.0031 2856   VgaSave         (8a60edd72b4ea5aea8202daf0e427925) C:\WINDOWS\System32\drivers\vga.sys
21:54:42.0031 2856   VgaSave - ok
21:54:42.0093 2856   viaagp1         (4b039bbd037b01f5db5a144c837f283a) C:\WINDOWS\system32\DRIVERS\viaagp1.sys
21:54:42.0093 2856   viaagp1 - ok
21:54:42.0109 2856   ViaIde          (59cb1338ad3654417bea49636457f65d) C:\WINDOWS\system32\DRIVERS\viaide.sys
21:54:42.0109 2856   ViaIde - ok
21:54:42.0156 2856   viasraid        (ebe101c01d80a42868f57b327be1b564) C:\WINDOWS\system32\DRIVERS\viasraid.sys
21:54:42.0156 2856   viasraid - ok
21:54:42.0203 2856   VolSnap         (d6ec4aff061665a10f0b1a9517d338e3) C:\WINDOWS\system32\drivers\VolSnap.sys
21:54:42.0218 2856   VolSnap - ok
21:54:42.0265 2856   Wanarp          (984ef0b9788abf89974cfed4bfbaacbc) C:\WINDOWS\system32\DRIVERS\wanarp.sys
21:54:42.0265 2856   Wanarp - ok
21:54:42.0359 2856   Wdf01000        (bbcfeab7e871cddac2d397ee7fa91fdc) C:\WINDOWS\system32\Drivers\wdf01000.sys
21:54:42.0390 2856   Wdf01000 - ok
21:54:42.0421 2856   WDICA - ok
21:54:42.0453 2856   wdmaud          (efd235ca22b57c81118c1aeb4798f1c1) C:\WINDOWS\system32\drivers\wdmaud.sys
21:54:42.0468 2856   wdmaud - ok
21:54:42.0546 2856   WS2IFSL         (6abe6e225adb5a751622a9cc3bc19ce8) C:\WINDOWS\System32\drivers\ws2ifsl.sys
21:54:42.0546 2856   WS2IFSL - ok
21:54:42.0609 2856   WSTCODEC        (d5842484f05e12121c511aa93f6439ec) C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS
21:54:42.0609 2856   WSTCODEC - ok
21:54:42.0687 2856   yukonwxp        (dee4899b4ac10a673b2df0cdd135167e) C:\WINDOWS\system32\DRIVERS\yukonwxp.sys
21:54:42.0687 2856   yukonwxp - ok
21:54:42.0703 2856   MBR (0x1B8)     (8f558eb6672622401da993e1e865c861) \Device\Harddisk1\DR1
21:54:42.0718 2856   \Device\Harddisk1\DR1 ( Backdoor.Win32.Sinowal.knf ) - infected
21:54:42.0718 2856   \Device\Harddisk1\DR1 - detected Backdoor.Win32.Sinowal.knf (0)
21:54:42.0734 2856   MBR (0x1B8)     (788646376e7b183f90cf9f9e0c7bd9f1) \Device\Harddisk0\DR0
21:54:42.0765 2856   \Device\Harddisk0\DR0 ( Backdoor.Win32.Sinowal.knf ) - infected
21:54:42.0765 2856   \Device\Harddisk0\DR0 - detected Backdoor.Win32.Sinowal.knf (0)
21:54:42.0765 2856   MBR (0x1B8)     (65e858a8a0293be11a920b0bc99d695e) \Device\Harddisk2\DR8
21:54:43.0375 2856   \Device\Harddisk2\DR8 - ok
21:54:43.0390 2856   Boot (0x1200)   (88048966391538b0acac4297e5548d6d) \Device\Harddisk1\DR1\Partition0
21:54:43.0390 2856   \Device\Harddisk1\DR1\Partition0 - ok
21:54:43.0406 2856   Boot (0x1200)   (ba812b72a15cccfc989da3704ac86bd3) \Device\Harddisk0\DR0\Partition0
21:54:43.0406 2856   \Device\Harddisk0\DR0\Partition0 - ok
21:54:43.0421 2856   Boot (0x1200)   (6c7728b7d32ac4bd3a83f77c05750138) \Device\Harddisk0\DR0\Partition1
21:54:43.0421 2856   \Device\Harddisk0\DR0\Partition1 - ok
21:54:43.0437 2856   Boot (0x1200)   (c41f8ab6deb779a014edcee1d1a1900a) \Device\Harddisk2\DR8\Partition0
21:54:43.0437 2856   \Device\Harddisk2\DR8\Partition0 - ok
21:54:43.0437 2856   ============================================================
21:54:43.0437 2856   Scan finished
21:54:43.0437 2856   ============================================================
21:54:43.0453 2448   Detected object count: 3
21:54:43.0453 2448   Actual detected object count: 3
21:55:34.0828 2448   C:\WINDOWS\system32\DRIVERS\serial.sys - copied to quarantine
21:55:34.0890 2448   VerifyFileNameVersionInfo: GetFileVersionInfoSizeW(C:\WINDOWS\system32\drivers\serial.sys) error 1813
21:55:38.0062 2448   Backup copy found, using it..
21:55:38.0125 2448   C:\WINDOWS\system32\DRIVERS\serial.sys - will be cured on reboot
21:55:40.0781 2448   Serial ( Virus.Win32.ZAccess.g ) - User select action: Cure
21:55:41.0046 2448   \Device\Harddisk1\DR1\# - copied to quarantine
21:55:41.0046 2448   \Device\Harddisk1\DR1 - copied to quarantine
21:55:41.0062 2448   \Device\Harddisk1\DR1 ( Backdoor.Win32.Sinowal.knf ) - will be cured on reboot
21:55:41.0093 2448   \Device\Harddisk1\DR1 - ok
21:55:41.0093 2448   \Device\Harddisk1\DR1 ( Backdoor.Win32.Sinowal.knf ) - User select action: Cure
21:55:42.0437 2448   \Device\Harddisk0\DR0\# - copied to quarantine
21:55:42.0437 2448   \Device\Harddisk0\DR0 - copied to quarantine
21:55:42.0453 2448   \Device\Harddisk0\DR0 ( Backdoor.Win32.Sinowal.knf ) - will be cured on reboot
21:55:42.0468 2448   \Device\Harddisk0\DR0 - ok
21:55:42.0484 2448   \Device\Harddisk0\DR0 ( Backdoor.Win32.Sinowal.knf ) - User select action: Cure
22  Seguridad Informática / Seguridad / Re: me redirecciona a una pagina abnow.com en: 10 Febrero 2012, 20:53 pm
Buenas, pues es que el otro dia ya hice eso de desactivar la casilla de restaurar sistema y de hecho sigue desactivada, pero sigue igual, no hubo ningun cambio....y tambien le pase el ccleaner, malwabyte.
Alguna otra opcion????
23  Seguridad Informática / Seguridad / me redirecciona a una pagina abnow.com en: 9 Febrero 2012, 23:24 pm
Buenas, se que este tema ya existe, pero por si confunden mi caso con el de otros, os cuento en este nuevo.
He leido el foro y he instalado el ComboFix, y he guardado el log, os le adjunto aqui por si me podeis echar un cable porque el ordenador me va lentisimo y encima no puedo usar practicamente google, porque cuando el enlace no sale entero no puedo entrar...un rollo....He pasado varias veces el Malwarebytes actualizado pero no los borra y salen casi siempre los mismos virus, el Ccleaner tambien lo he pasado
A ver si alguien me puede echar un cable...Saludos

LOG:
ComboFix 12-02-02.02 - 08/02/2012  16:06:31.1.1 - x86
Microsoft Windows XP Professional  5.1.2600.2.1252.18.205 [GMT 1:00]
Running from: c:\downloads\ComboFix.exe
.
WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
.
- REDUCED FUNCTIONALITY MODE -
.
.
(((((((((((((((((((((((((((((((((((((((   Other Deletions   )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\documents and settings\Bego\Datos de programa\facemoods.com
c:\documents and settings\Carol\Datos de programa\facemoods.com
c:\documents and settings\Carol\WINDOWS
c:\documents and settings\Chache\Datos de programa\facemoods.com
c:\windows\assembly\GAC_MSIL\desktop.ini
c:\windows\SwSys1.bmp
c:\windows\SwSys2.bmp
c:\windows\system32\msssc.dll
c:\windows\system32\nwlnkipx.dll
.
.
(((((((((((((((((((((((((   Files Created from 2012-01-08 to 2012-02-08  )))))))))))))))))))))))))))))))
.
.
2012-02-08 14:32 . 2012-02-08 14:32   --------   d-----w-   c:\windows\system32\wbem\Repository
2012-02-08 08:34 . 2012-02-08 13:01   --------   d-----w-   c:\documents and settings\Carol\Datos de programa\QuickStoresToolbar
2012-01-30 04:11 . 2012-01-30 04:11   --------   d-----r-   c:\documents and settings\LocalService\Favoritos
2012-01-30 04:02 . 2012-02-08 14:33   0   --sha-w-   c:\windows\system32\dds_log_trash.cmd
2012-01-30 04:01 . 2012-01-30 04:01   --------   d-sh--w-   c:\documents and settings\Bego\Configuración local\Datos de programa\d6f5b930
2012-01-25 20:04 . 2012-02-08 11:13   --------   d-----w-   c:\archivos de programa\BitTorrent
2012-01-25 20:04 . 2012-02-08 14:44   --------   d-----w-   c:\documents and settings\Carol\Datos de programa\BitTorrent
.
.
.
((((((((((((((((((((((((((((((((((((((((   Find3M Report   ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-12-29 10:50 . 2011-12-29 10:50   191488   ----a-w-   c:\windows\system32\hlvdd.dll
2011-12-10 14:24 . 2011-06-04 20:10   20464   ----a-w-   c:\windows\system32\drivers\mbam.sys
.
.
(((((((((((((((((((((((((((((((((((((   Reg Loading Points   ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"BitTorrent"="c:\archivos de programa\BitTorrent\BitTorrent.exe" [2012-02-08 648568]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"TrueImageMonitor.exe"="c:\archivos de programa\Acronis\TrueImageEnterpriseServer\TrueImageMonitor.exe" [2006-03-17 1102171]
"AcronisTimounterMonitor"="c:\archivos de programa\Acronis\TrueImageEnterpriseServer\TimounterMonitor.exe" [2006-03-17 1827640]
"Acronis Scheduler2 Service"="c:\archivos de programa\Archivos comunes\Acronis\Schedule2\schedhlp.exe" [2006-03-17 126976]
"Flashget"="d:\archivos de programa\flashget.exe" [2007-09-25 2007088]
"EPSON Stylus Photo RX620 Series"="c:\windows\System32\spool\DRIVERS\W32X86\3\E_FATI9HE.EXE" [2004-05-20 98304]
"NeroFilterCheck"="c:\windows\system32\NeroCheck.exe" [2001-07-09 155648]
"EPSON Stylus Photo RX620 Series (Copiar 1)"="c:\windows\System32\spool\DRIVERS\W32X86\3\E_FATI9HE.EXE" [2004-05-20 98304]
"AdobeCS4ServiceManager"="c:\archivos de programa\Archivos comunes\Adobe\CS4ServiceManager\CS4ServiceManager.exe" [2008-08-14 611712]
"Adobe ARM"="c:\archivos de programa\Archivos comunes\Adobe\ARM\1.0\AdobeARM.exe" [2011-06-06 937920]
"Malwarebytes' Anti-Malware"="c:\archivos de programa\Malwarebytes' Anti-Malware\mbamgui.exe" [2012-01-13 460872]
"UnlockerAssistant"="c:\archivos de programa\Unlocker\UnlockerAssistant.exe" [2010-07-04 17408]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2004-08-19 15360]
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
.
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menú Inicio^Programas^Inicio^Inicio rápido de Adobe Reader.lnk]
path=c:\documents and settings\All Users\Menú Inicio\Programas\Inicio\Inicio rápido de Adobe Reader.lnk
backup=c:\windows\pss\Inicio rápido de Adobe Reader.lnkCommon Startup
.
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menú Inicio^Programas^Inicio^QuickTV.lnk]
path=c:\documents and settings\All Users\Menú Inicio\Programas\Inicio\QuickTV.lnk
backup=c:\windows\pss\QuickTV.lnkCommon Startup
.
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menú Inicio^Programas^Inicio^VIA RAID TOOL.lnk]
path=c:\documents and settings\All Users\Menú Inicio\Programas\Inicio\VIA RAID TOOL.lnk
backup=c:\windows\pss\VIA RAID TOOL.lnkCommon Startup
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ATICCC]
2006-01-02 15:41   45056   ----a-w-   c:\archivos de programa\ATI Technologies\ATI.ACE\CLI.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Smapp]
2003-05-05 07:57   143360   ----a-w-   c:\archivos de programa\Analog Devices\SoundMAX\SMTray.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UnlockerAssistant]
2010-07-04 19:51   17408   ----a-w-   c:\archivos de programa\Unlocker\UnlockerAssistant.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusOverride"=dword:00000001
"FirewallOverride"=dword:00000001
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"DisableNotifications"= 1 (0x1)
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"e:\\eMule\\emule.exe"=
"d:\\Archivos de programa\\flashget.exe"=
"c:\\WINDOWS\\system32\\sessmgr.exe"=
"c:\\Archivos de programa\\BitTorrent\\BitTorrent.exe"=
.
R0 viasraid;viasraid;c:\windows\system32\drivers\viasraid.sys [20/03/2007 14:07 77312]
R2 BT848;AVerMedia, AVerTV WDM Video Capture;c:\windows\system32\drivers\BT848.sys [20/03/2007 18:27 261696]
R2 BTTUNER;AVerMedia, AVerTV WDM TvTuner;c:\windows\system32\drivers\bttuner.sys [20/03/2007 18:27 22016]
R2 BTXBAR;AVerMedia, AVerTV WDM Crossbar;c:\windows\system32\drivers\btxbar.sys [20/03/2007 18:27 13312]
R2 MBAMService;MBAMService;c:\archivos de programa\Malwarebytes' Anti-Malware\mbamservice.exe [04/06/2011 21:10 652360]
R2 MotoConnect Service;MotoConnect Service;c:\archivos de programa\Motorola\MotoConnectService\MotoConnectService.exe [07/07/2011 18:35 91456]
R2 NSHE;Guardant Emulator Driver;c:\windows\system32\drivers\NSHE.SYS [29/12/2011 11:52 97792]
R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [04/06/2011 21:10 20464]
S2 gupdate;Servicio de Google Update (gupdate);c:\archivos de programa\Google\Update\GoogleUpdate.exe [05/11/2011 10:54 136176]
S3 BTCFilterService;USB Networking Driver Filter Service;c:\windows\system32\drivers\motfilt.sys [07/07/2011 18:34 6016]
S3 gupdatem;Servicio de Google Update (gupdatem);c:\archivos de programa\Google\Update\GoogleUpdate.exe [05/11/2011 10:54 136176]
S3 motccgp;Motorola USB Composite Device Driver;c:\windows\system32\drivers\motccgp.sys [07/07/2011 18:34 19712]
S3 motccgpfl;MotCcgpFlService;c:\windows\system32\drivers\motccgpfl.sys [07/07/2011 18:34 8320]
S3 Motousbnet;Motorola USB Networking Driver Service;c:\windows\system32\drivers\Motousbnet.sys [07/07/2011 18:34 23424]
S3 motusbdevice;Motorola USB Dev Driver;c:\windows\system32\drivers\motusbdevice.sys [07/07/2011 18:34 9472]
.
--- Other Services/Drivers In Memory ---
.
*NewlyCreated* - WS2IFSL
*NewlyCreated* - WUAUSERV
.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost  - NetSvcs
screadspool
msdv
nlsvc
SE2Cmdm
3dkeybd
cdrbsvsd
GameConsoleService
b57w2k
raidmsvr
yats32
SNC
CAMCHALA
FireHook
cpqrcmc
.
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{096e4474-2582-11e0-8638-00112fcf8707}]
\Shell\AutoRun\command - g:\recycler\recycld.exe e
\Shell\open\command - g:\recycler\recycld.exe
.
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{096e447f-2582-11e0-8638-00112fcf8707}]
\Shell\AutoRun\command - f:\recycler\recycld.exe e
\Shell\open\command - f:\recycler\recycld.exe
.
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{67745d9e-c27f-11df-8605-00112fcf8707}]
\Shell\AutoRun\command - f:\recycler\recycld.exe e
\Shell\open\command - f:\recycler\recycld.exe
.
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{7873edac-7a84-11e0-b72f-00112fcf8707}]
\Shell\AutoRun\command - G:\urDrive.exe
.
Contents of the 'Scheduled Tasks' folder
.
2012-02-08 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\archivos de programa\Google\Update\GoogleUpdate.exe [2011-11-05 09:54]
.
2012-02-08 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\archivos de programa\Google\Update\GoogleUpdate.exe [2011-11-05 09:54]
.
.
------- Supplementary Scan -------
.
uStart Page = hxxp://www.google.es/
uInternet Connection Wizard,ShellNext = wmplayer.exe //ICWLaunch
IE: &Descargar con Fl&ashGet - d:\archivos de programa\jc_link.htm
IE: &Descargar todo con Flas&hGet - d:\archivos de programa\jc_all.htm
IE: E&xportar a Microsoft Excel - c:\archiv~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
LSP: mswsock.dll
TCP: DhcpNameServer = 87.216.1.65 87.216.1.66
DPF: {B785FA3C-1DE9-4D20-8396-613C486FE95E} - hxxps://www2.agenciatributaria.gob.es/es13/h/cactivex.cab
.
- - - - ORPHANS REMOVED - - - -
.
HKCU-Run-Internet Security - c:\documents and settings\All Users\Datos de programa\isecurity.exe
MSConfigStartUp-BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA} - c:\archivos de programa\Archivos comunes\Ahead\Lib\NMBgMonitor.exe
MSConfigStartUp-LanguageShortcut - c:\archivos de programa\CyberLink\PowerDVD\Language\Language.exe
MSConfigStartUp-NeroFilterCheck - c:\archivos de programa\Archivos comunes\Ahead\Lib\NeroCheck.exe
MSConfigStartUp-RemoteControl - c:\archivos de programa\CyberLink\PowerDVD\PDVDServ.exe
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2012-02-08 16:11
Windows 5.1.2600 Service Pack 2 NTFS
.
scanning hidden processes ... 
.
scanning hidden autostart entries ...
.
scanning hidden files ... 
.
.
c:\windows\$NtUninstallKB36922$:SummaryInformation 0 bytes hidden from API
.
scan completed successfully
hidden files: 1
.
**************************************************************************
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\ð•€|ÿÿÿÿ.•€|ù•Ñw*]
"A0C0110900063D11C8EF10054038389C"="C?\\WINDOWS\\system32\\FM20ENU.DLL"
.
--------------------- DLLs Loaded Under Running Processes ---------------------
.
- - - - - - - > 'winlogon.exe'(820)
c:\windows\system32\Ati2evxx.dll
c:\archivos de programa\Archivos comunes\Adobe\Adobe Drive CS4\AdobeDriveCS4_NP.dll
.
- - - - - - - > 'lsass.exe'(876)
c:\windows\system32\relog_ap.dll
c:\windows\system32\mswsock.dll
mswsock.dll     719d0000   262144 \\?\globalroot\systemroot\system32\mswsock.dll
c:\windows\system32\jscript.dll
.
------------------------ Other Running Processes ------------------------
.
c:\windows\system32\Ati2evxx.exe
c:\windows\system32\Ati2evxx.exe
c:\archivos de programa\Archivos comunes\Acronis\Schedule2\schedul2.exe
c:\archivos de programa\Java\jre6\bin\jqs.exe
c:\archivos de programa\Analog Devices\SoundMAX\SMAgent.exe
c:\archivos de programa\Motorola\MotoConnectService\MotoConnect.exe
.
**************************************************************************
.
Completion time: 2012-02-08  16:15:06 - machine was rebooted
ComboFix-quarantined-files.txt  2012-02-08 15:15
.
Pre-Run: 18.765.135.872 bytes libres
Post-Run: 18.923.180.032 bytes libres
.
- - End Of File - - B0DC2EFF0D80DF057E43D92616553B73
Páginas: 1 2 [3]
WAP2 - Aviso Legal - Powered by SMF 1.1.21 | SMF © 2006-2008, Simple Machines