Hola, hice todo lo que me indicaste, desistale el norton, elimine las cuarentenas, pase el antivirus avast 4.7 Home, pase el Ccleaner, pase el AVG Anti-Spyware y pase los Scan online y he aqui los resultados:
1.
http://www.pandasoftware.com/products/acti...n_principal.htmIMPOSIBLE DE ESCANEAR, TENIA VIRUS, INTENTE 4 VECES Y DESAFORTUNAMENTE SIEMPRE DABA AVISO DE VIRUS.
2.
http://www.kaspersky.com/beta?product=161744315KASPERSKY ONLINE SCANNER REPORT
Wednesday, January 31, 2007 6:36:51 PM
Operating System: Microsoft Windows XP Professional, Service Pack 1 (Build 2600)
Kaspersky Online Scanner version: 5.0.83.0
Kaspersky Anti-Virus database last update: 31/01/2007
Kaspersky Anti-Virus database records: 249047
Scan Settings
Scan using the following antivirus database standard
Scan Archives true
Scan Mail Bases true
Scan Target My Computer
A:\
C:\
D:\
E:\
Scan Statistics
Total number of scanned objects 55110
Number of viruses found 4
Number of infected objects 8 / 0
Number of suspicious objects 0
Duration of the scan process 01:34:07
Infected Object Name Virus Name Last Action
C:\Archivos de programa\Alwil Software\Avast4\DATA\aswResp.dat Object is locked skipped
C:\Archivos de programa\Alwil Software\Avast4\DATA\Avast4.db Object is locked skipped
C:\Archivos de programa\Alwil Software\Avast4\DATA\integ\avast.int Object is locked skipped
C:\Archivos de programa\Alwil Software\Avast4\DATA\log\AshWebSv.ws Object is locked skipped
C:\Archivos de programa\Alwil Software\Avast4\DATA\log\aswMaiSv.log Object is locked skipped
C:\Archivos de programa\Alwil Software\Avast4\DATA\log\nshield.log Object is locked skipped
C:\Archivos de programa\Alwil Software\Avast4\DATA\report\Protección residente.txt Object is locked skipped
C:\Documents and Settings\emili\Configuración local\Archivos temporales de Internet\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\emili\Configuración local\Datos de programa\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\emili\Configuración local\Datos de programa\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\emili\Configuración local\Historial\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\emili\Configuración local\Temp\Acr292.tmp Object is locked skipped
C:\Documents and Settings\emili\Configuración local\Temp\Acr2B4.tmp Object is locked skipped
C:\Documents and Settings\emili\Configuración local\Temp\Acr2B6.tmp Object is locked skipped
C:\Documents and Settings\emili\Configuración local\Temp\Acr2B8.tmp Object is locked skipped
C:\Documents and Settings\emili\Configuración local\Temp\Acr2BA.tmp Object is locked skipped
C:\Documents and Settings\emili\Configuración local\Temp\hsperfdata_emili\2404 Object is locked skipped
C:\Documents and Settings\emili\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\emili\Datos de programa\Sun\Java\Deployment\log\plugin150_10.trace Object is locked skipped
C:\Documents and Settings\emili\Escritorio\ESPAÑA\FALTAN POR COPIAR\MI MUSICA\IPOD\kmd134_en.exe/data0032/bdeviewer.exe Infected: Trojan.Win32.Krepper.y skipped
C:\Documents and Settings\emili\Escritorio\ESPAÑA\FALTAN POR COPIAR\MI MUSICA\IPOD\kmd134_en.exe/data0032 Infected: Trojan.Win32.Krepper.y skipped
C:\Documents and Settings\emili\Escritorio\ESPAÑA\FALTAN POR COPIAR\MI MUSICA\IPOD\kmd134_en.exe Inno: infected - 2 skipped
C:\Documents and Settings\emili\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\emili\NTUSER.DAT.LOG Object is locked skipped
C:\Documents and Settings\LocalService\Configuración local\Archivos temporales de Internet\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Configuración local\Datos de programa\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\LocalService\Configuración local\Datos de programa\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\LocalService\Configuración local\Historial\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\Configuración local\Datos de programa\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\NetworkService\Configuración local\Datos de programa\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked skipped
C:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped
C:\System Volume Information\_restore{34202534-7BC5-48EC-931B-501FC0F67264}\RP6\A0000341.exe Infected: Net-Worm.Win32.Sasser.c skipped
C:\System Volume Information\_restore{34202534-7BC5-48EC-931B-501FC0F67264}\RP6\A0000342.exe Infected: Net-Worm.Win32.Sasser.c skipped
C:\System Volume Information\_restore{34202534-7BC5-48EC-931B-501FC0F67264}\RP6\A0000343.exe Infected: Trojan-Downloader.Win32.VB.ft skipped
C:\System Volume Information\_restore{34202534-7BC5-48EC-931B-501FC0F67264}\RP6\A0000344.exe Infected: Backdoor.Win32.SdBot.ny skipped
C:\System Volume Information\_restore{34202534-7BC5-48EC-931B-501FC0F67264}\RP6\A0000345.exe Infected: Net-Worm.Win32.Sasser.c skipped
C:\System Volume Information\_restore{34202534-7BC5-48EC-931B-501FC0F67264}\RP7\change.log Object is locked skipped
C:\WINDOWS\Debug\oakley.log Object is locked skipped
C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped
C:\WINDOWS\SchedLgU.Txt Object is locked skipped
C:\WINDOWS\SoftwareDistribution\EventCache\{B99B7D99-97D7-496E-85FF-5EF5803836A5}.bin Object is locked skipped
C:\WINDOWS\SoftwareDistribution\ReportingEvents.log Object is locked skipped
C:\WINDOWS\system32\config\Antivirus.Evt Object is locked skipped
C:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\default Object is locked skipped
C:\WINDOWS\system32\config\default.LOG Object is locked skipped
C:\WINDOWS\system32\config\SAM Object is locked skipped
C:\WINDOWS\system32\config\SAM.LOG Object is locked skipped
C:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\SECURITY Object is locked skipped
C:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped
C:\WINDOWS\system32\config\software Object is locked skipped
C:\WINDOWS\system32\config\software.LOG Object is locked skipped
C:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\system Object is locked skipped
C:\WINDOWS\system32\config\system.LOG Object is locked skipped
C:\WINDOWS\system32\h323log.txt Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA Object is locked skipped
C:\WINDOWS\Temp\Perflib_Perfdata_61c.dat Object is locked skipped
C:\WINDOWS\Temp\_avast4_\Webshlock.txt Object is locked skipped
C:\WINDOWS\WindowsUpdate.log Object is locked skipped
Scan process completed.
3.
http://housecall.trendmicro.com/IMPOSIBLE DE ESCANEAR
4.
http://www.bitdefender.com/scan8/BitDefender Online Scanner
Informe de análisis generado a: Thu, Feb 01, 2007 - 21:28:21
Objeto del análisis: A:\;C:\;D:\;E:\;
Estádisticas
Tiempo
01:51:45
Ficheros
197720
Carpetas
4981
Sectores de arranque
2
Archivos
1110
Ficheros comprimidos
20738
Resultados
Virus identificados
8
Ficheros infectados
11
Ficheros sospechosos
0
Advertencias
0
Desinfectados
0
Ficheros eliminados
16
Información sobre los motores de análisis
Firmas de virus
417820
Versión del motor de análisis
AVCORE v1.0 (build 2371) (i386) (Dec 13 2006 11:16:42)
Complementos de análisis
14
Complementos de archivo
38
Complementos de descomprimir
6
Complementos de correo
6
Complementos de sistema
1
Configuración de análisis
Primera acción
Desinfectar
Segunda acción
Eliminar
Heurísticas
Sí
Activar advertencias
Sí
Extensiones analizadas
*;
Excluir extensiones
Analizar correo
Sí
Analizar archivos
Sí
Analizar ficheros comprimidos
Sí
Analizar ficheros
Sí
Analizar el sector de arranque
Sí
Fichero analizado
Estado
C:\Documents and Settings\emili\Escritorio\ESPAÑA\FALTAN POR COPIAR\MI MUSICA\IPOD\kmd134_en.exe=>(Instyler o)=>(Instyler Module 2)=>(ZIP Sfx s)=>cd_htm.dll
Detectado con: Adware.CyDoor
C:\Documents and Settings\emili\Escritorio\ESPAÑA\FALTAN POR COPIAR\MI MUSICA\IPOD\kmd134_en.exe=>(Instyler o)=>(Instyler Module 2)=>(ZIP Sfx s)=>cd_htm.dll
La desinfección ha fallado
C:\Documents and Settings\emili\Escritorio\ESPAÑA\FALTAN POR COPIAR\MI MUSICA\IPOD\kmd134_en.exe=>(Instyler o)=>(Instyler Module 2)=>(ZIP Sfx s)=>cd_htm.dll
Eliminado
C:\Documents and Settings\emili\Escritorio\ESPAÑA\FALTAN POR COPIAR\MI MUSICA\IPOD\kmd134_en.exe=>(Instyler o)=>(Instyler Module 2)=>(ZIP Sfx s)
Actualizado
C:\Documents and Settings\emili\Escritorio\ESPAÑA\FALTAN POR COPIAR\MI MUSICA\IPOD\kmd134_en.exe=>(Instyler o)=>(Instyler Module 2)
La actualización ha fallado
C:\Documents and Settings\emili\Escritorio\ESPAÑA\FALTAN POR COPIAR\MI MUSICA\IPOD\kmd134_en.exe=>(Instyler o)=>(Instyler Module 7)
Infectado con: Dropped:Trojan.Downloader.Small.6
C:\Documents and Settings\emili\Escritorio\ESPAÑA\FALTAN POR COPIAR\MI MUSICA\IPOD\kmd134_en.exe=>(Instyler o)=>(Instyler Module 7)
La desinfección ha fallado
C:\Documents and Settings\emili\Escritorio\ESPAÑA\FALTAN POR COPIAR\MI MUSICA\IPOD\kmd134_en.exe=>(Instyler o)=>(Instyler Module 7)
Eliminado
C:\Documents and Settings\emili\Escritorio\ESPAÑA\FALTAN POR COPIAR\MI MUSICA\IPOD\kmd134_en.exe=>(Instyler o)
La actualización ha fallado
C:\Documents and Settings\emili\Escritorio\ESPAÑA\FALTAN POR COPIAR\MI MUSICA\IPOD\kmd134_en.exe=>(Instyler o)=>(Instyler Module 10)=>(Inno Installer o)=>(Inno Module 3)
Infectado con: Trojan.Downloader.Small.AZF
C:\Documents and Settings\emili\Escritorio\ESPAÑA\FALTAN POR COPIAR\MI MUSICA\IPOD\kmd134_en.exe=>(Instyler o)=>(Instyler Module 10)=>(Inno Installer o)=>(Inno Module 3)
La desinfección ha fallado
C:\Documents and Settings\emili\Escritorio\ESPAÑA\FALTAN POR COPIAR\MI MUSICA\IPOD\kmd134_en.exe=>(Instyler o)=>(Instyler Module 10)=>(Inno Installer o)=>(Inno Module 3)
Eliminado
C:\Documents and Settings\emili\Escritorio\ESPAÑA\FALTAN POR COPIAR\MI MUSICA\IPOD\kmd134_en.exe=>(Instyler o)=>(Instyler Module 10)=>(Inno Installer o)
La actualización ha fallado
C:\Documents and Settings\emili\Escritorio\ESPAÑA\FALTAN POR COPIAR\MI MUSICA\IPOD\kmd134_en.exe=>(Instyler o)=>(Instyler Module 31)=>bdeviewer.exe
Detectado con: Adware.BrilliView.A
C:\Documents and Settings\emili\Escritorio\ESPAÑA\FALTAN POR COPIAR\MI MUSICA\IPOD\kmd134_en.exe=>(Instyler o)=>(Instyler Module 31)=>bdeviewer.exe
La desinfección ha fallado
C:\Documents and Settings\emili\Escritorio\ESPAÑA\FALTAN POR COPIAR\MI MUSICA\IPOD\kmd134_en.exe=>(Instyler o)=>(Instyler Module 31)=>bdeviewer.exe
Eliminado
C:\Documents and Settings\emili\Escritorio\ESPAÑA\FALTAN POR COPIAR\MI MUSICA\IPOD\kmd134_en.exe=>(Instyler o)=>(Instyler Module 31)
La actualización ha fallado
C:\Documents and Settings\emili\Escritorio\ESPAÑA\FALTAN POR COPIAR\MI MUSICA\IPOD\kmd202gu_en.exe=>(CAB Sfx o)=>\Disk1\data2.cab=>(IShield Module 9)=>(ZIP Sfx s)=>cd_htm.dll
Detectado con: Adware.CyDoor
C:\Documents and Settings\emili\Escritorio\ESPAÑA\FALTAN POR COPIAR\MI MUSICA\IPOD\kmd202gu_en.exe=>(CAB Sfx o)=>\Disk1\data2.cab=>(IShield Module 9)=>(ZIP Sfx s)=>cd_htm.dll
La desinfección ha fallado
C:\Documents and Settings\emili\Escritorio\ESPAÑA\FALTAN POR COPIAR\MI MUSICA\IPOD\kmd202gu_en.exe=>(CAB Sfx o)=>\Disk1\data2.cab=>(IShield Module 9)=>(ZIP Sfx s)=>cd_htm.dll
Eliminado
C:\Documents and Settings\emili\Escritorio\ESPAÑA\FALTAN POR COPIAR\MI MUSICA\IPOD\kmd202gu_en.exe=>(CAB Sfx o)=>\Disk1\data2.cab=>(IShield Module 9)=>(ZIP Sfx s)
Actualizado
C:\Documents and Settings\emili\Escritorio\ESPAÑA\FALTAN POR COPIAR\MI MUSICA\IPOD\kmd202gu_en.exe=>(CAB Sfx o)=>\Disk1\data2.cab=>(IShield Module 9)
La actualización ha fallado
C:\System Volume Information\_restore{34202534-7BC5-48EC-931B-501FC0F67264}\RP6\A0000341.exe=>(Quarantine-2)
Infectado con: Win32.Worm.Sasser.D
C:\System Volume Information\_restore{34202534-7BC5-48EC-931B-501FC0F67264}\RP6\A0000341.exe=>(Quarantine-2)
Eliminado
C:\System Volume Information\_restore{34202534-7BC5-48EC-931B-501FC0F67264}\RP6\A0000342.exe=>(Quarantine-2)
Infectado con: Win32.Worm.Sasser.D
C:\System Volume Information\_restore{34202534-7BC5-48EC-931B-501FC0F67264}\RP6\A0000342.exe=>(Quarantine-2)
Eliminado
C:\System Volume Information\_restore{34202534-7BC5-48EC-931B-501FC0F67264}\RP6\A0000343.exe=>(Quarantine-2)
Infectado con: Trojan.Downloader.Vb.FT
C:\System Volume Information\_restore{34202534-7BC5-48EC-931B-501FC0F67264}\RP6\A0000343.exe=>(Quarantine-2)
La desinfección ha fallado
C:\System Volume Information\_restore{34202534-7BC5-48EC-931B-501FC0F67264}\RP6\A0000343.exe=>(Quarantine-2)
Eliminado
C:\System Volume Information\_restore{34202534-7BC5-48EC-931B-501FC0F67264}\RP6\A0000344.exe=>(Quarantine-2)
Infectado con: Generic.XPL.Wmedia.F4C540AF
C:\System Volume Information\_restore{34202534-7BC5-48EC-931B-501FC0F67264}\RP6\A0000344.exe=>(Quarantine-2)
La desinfección ha fallado
C:\System Volume Information\_restore{34202534-7BC5-48EC-931B-501FC0F67264}\RP6\A0000344.exe=>(Quarantine-2)
Eliminado
C:\System Volume Information\_restore{34202534-7BC5-48EC-931B-501FC0F67264}\RP6\A0000345.exe=>(Quarantine-2)
Infectado con: Win32.Worm.Sasser.D
C:\System Volume Information\_restore{34202534-7BC5-48EC-931B-501FC0F67264}\RP6\A0000345.exe=>(Quarantine-2)
Eliminado
C:\WINDOWS\system32\prodsrvs.exe
Infectado con: Trojan.Dialer.InstantAccess.B
C:\WINDOWS\system32\prodsrvs.exe
La desinfección ha fallado
C:\WINDOWS\system32\prodsrvs.exe
Eliminado
5.
http://www.ravantivirus.com/scan/IMPOSIBLE DE ENCONTRAR SALIA SIEMPRE ERROR
6.
http://www.windowsecurity.com/trojanscan/a-squared Free - Version 2
Scan settings:
Objects: Memory, Traces, Cookies, C:\
Scan archives: On
Heuristics: Off
ADS Scan: On
Scan start: 09/11/2001 05:25:57 a.m.
Scanned
Files: 74970
Traces: 95626
Cookies: 14
Processes: 24
Found
Files: 0
Traces: 29
Cookies: 1
Processes: 0
Scan end: 09/11/2001 06:31:49 a.m.
Scan time: 01:05:52 a.m.
7.
http://us.mcafee.com/root/mfs/default.asp McAfee FreeScan has detected 25 files on your computer!
Your personal information might be vulnerable to exposure or corruption.
Your computer might transmit possible threats to friends, family, and co-workers.
Get immediate protection with McAfee VirusScan. Buy Now! Learn More...
Important: You might have more possible threats on your computer.
Scan Location
Scan Status
Files Scanned: 26911Files Detected: 25Information: Scanning completed!
List of Detected Files
File Name Threat Name
C:\Documents and Settings\...\Betting.lnk Adware-ISTbar.lnk
C:\Documents and Settings\...\Casino Palace.lnk Adware-ISTbar.lnk
C:\Documents and Settings\...\Casino.lnk Adware-ISTbar.lnk
C:\Documents and Settings\...\Games.lnk Adware-ISTbar.lnk
C:\Documents and Settings\...\Horoscope.lnk Adware-ISTbar.lnk
C:\Documents and Settings\...\Air Tickets.lnk Adware-ISTbar.lnk
C:\Documents and Settings\...\Car Rentals.lnk Adware-ISTbar.lnk
C:\Documents and Settings\...\Hotel Deals.lnk Adware-ISTbar.lnk
C:\Documents and Settings\...\Luggage.lnk Adware-ISTbar.lnk
C:\Documents and Settings\...\Travel.lnk Adware-ISTbar.lnk
C:\Documents and Settings\...\Living\Dating.lnk Adware-ISTbar.lnk
C:\Documents and Settings\...\Find a Degree.lnk Adware-ISTbar.lnk
C:\Documents and Settings\...\Find a job.lnk Adware-ISTbar.lnk
C:\Documents and Settings\...\Living\Home.lnk Adware-ISTbar.lnk
C:\Documents and Settings\...\Insurance.lnk Adware-ISTbar.lnk
C:\Documents and Settings\...\Shop\Auctions.lnk Adware-ISTbar.lnk
C:\Documents and Settings\...\Shop\Books.lnk Adware-ISTbar.lnk
C:\Documents and Settings\...\Computers.lnk Adware-ISTbar.lnk
C:\Documents and Settings\...\Shop\Discount.lnk Adware-ISTbar.lnk
C:\Documents and Settings\...\Shop\Flowers.lnk Adware-ISTbar.lnk
C:\Documents and Settings\...\Shop\Golf.lnk Adware-ISTbar.lnk
C:\Documents and Settings\...\Shop\Jewelry.lnk Adware-ISTbar.lnk
C:\Documents and Settings\...\Shop\Movies.lnk Adware-ISTbar.lnk
C:\Documents and Settings\...\Shop\Music.lnk Adware-ISTbar.lnk
C:\Documents and Settings\...\Online Store.lnk Adware-
ISTbar.lnk
Scan Location
Scan Status
Files Scanned: 1123Files Detected: 0Information: Scanning completed!
McAfee FreeScan has detected 3 files on your computer!
Your personal information might be vulnerable to exposure or corruption.
Your computer might transmit possible threats to friends, family, and co-workers.
Get immediate protection with McAfee VirusScan. Buy Now! Learn More...
Important: If you disabled your anti-virus software, please re-enable it now.
Scan Location
Scan Status
Files Scanned: 18638Files Detected: 3Information: Scanning completed!
List of Detected Files
File Name Threat Name
C:\WINDOWS\system32\drivers\FOPN.sys Winfixer
C:\WINDOWS\system32\drivers\uwasfsd.sys Winfixer
C:\WINDOWS\system32\tsuninst.exe Uploader-R.dr
8.
http://security.symantec.com/sscv6/default...id=ie&venid=sym Virus Status: Infected!Your computer is infected with at least one known threat.
54301 files scanned, 4 file(s) infected on your disk drives.
No viruses were detected in memory.Your computer is free of known threats. Virus Detection does not check compressed files.Your computer appears safe for now. For real-time protection from viruses, hackers and privacy threats, upgrade to Norton Internet Security™.
Search for the name of the threat(s) listed below on the Symantec Security Response site for removal information.
Warning! The scan detected a virus that is active in your computer's memory. The scan ended to prevent further infection. You should shut down your computer immediately and restart it with an antivirus rescue disk or similar tool.
No viruses were detected in memory.Your computer is infected with at least one known virus or Trojan horse.Search for the name of the threat(s) listed below on the Symantec Security Response site for removal information.
No viruses were detected in memory.Your computer is infected with at least one known virus or Trojan horse.Note: The scan was cancelled before finishing. There may be more infected files on this computer.Search for the name of the threat(s) listed below on the Symantec Security Response site for removal information.
C:\WINDOWS\system32\stera.exe is infected with WinFixer
C:\WINDOWS\system32\tsuninst.exe is infected with
Adware.TargetSaver
C:\WINDOWS\system32\drivers\FOPN.sys is infected with WinFixer
C:\WINDOWS\system32\drivers\uwasfsd.sys is infected with
WinAntiSpyware
Un saludo y muchisímas gracias
Diana