Ups, perdon por ponerlo como nuevo tema, esk no sabia mu bien como iba esto, pues la verdad esk no habia entrado nunka en un foro.
Buenas DESTROYER
Antes k nada gracias.
Bueno kreo k he segido todos los pasos para configurar el ad-aware en modo completo, y os adjunto el log k me da. De todas maneras si consideras k no es asi, por favor hazmelo saber y volvere a configurarlo, pues hay algunas casiillas que no me dejaba poner.
El log es:
Lavasoft Ad-aware Personal Build 6.181
Logfile creado:sábado, 12 de junio de 2004 15:21:25
Created with Ad-aware Personal, free for private use.
Usando archivo de referencia:01R317 12.06.2004
______________________________________________________
Reffile status:
=========================
archivo de la referencia cargado:
Reference Number : 01R317 12.06.2004
Internal build : 249
File location : D:\ARCHIV~1\Lavasoft\AD-AWA~1\reflist.ref
Total size : 1236958 Bytes
Signature data size : 1216700 Bytes
Reference data size : 20194 Bytes
Signatures total : 27090
Target categories : 10
Target families : 496
Memory + processor status:
==========================
Number of processors : 1
Processor architecture : Intel Pentium IV
Memory available:42 %
Total physical memory:523760 kb
Available physical memory:215160 kb
Total page file size:1280700 kb
Available on page file:1038468 kb
Total virtual memory:2097024 kb
Available virtual memory:2052484 kb
OS:
Ad-aware Settings
=========================
Juego : Activar escaneo en profundidad
Juego : Modo seguro (siempre pide una confirmación)
Juego : Escanear procesos activos
Juego : Escanear registro
Juego : Escanear registro a fondo
Juego : Escanear Favorito de IE para los sitios prohibidos
Juego : Escanear dentro de los archivos
Juego : Scan my Hosts file
Extended Ad-aware Settings
=========================
Juego : Unload recognized processes during scanning
Juego : Reanalyze result after scanning, before displaying result list
Juego : Run scan as background process (Low CPU usage)
Juego : Include basic Ad-aware settings in logfile
Juego : Include additional Ad-aware settings in logfile
Juego : Automatically try to unregister objects prior to deletion
Juego : Let windows remove files in use at next reboot
Juego : Delete quarantined objects after restoring
Juego : Remember window positions
Juego : Snap windows to desktop border
Juego : Always back up reference file, before updating
Juego : Create and save WebUpdate logfile
Juego : Dump details about unhandled exceptions to disk
Juego : Play sound if scan produced a result
12-06-2004 15:21:25 - Scan started. (Custom mode)
Listando procesos activos
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
#:1 [smss.exe]
FilePath : \SystemRoot\System32\
ThreadCreationTime : 12-06-2004 11:44:29
BasePriority : Normal
#:2 [winlogon.exe]
FilePath : \??\D:\WINDOWS\system32\
ThreadCreationTime : 12-06-2004 11:44:36
BasePriority : High
#:3 [services.exe]
FilePath : D:\WINDOWS\system32\
ThreadCreationTime : 12-06-2004 11:44:36
BasePriority : Normal
FileSize : 99 KB
FileVersion : 5.1.2600.0 (xpclient.010817-1148)
ProductVersion : 5.1.2600.0
Copyright : Copyright (C) Microsoft Corporation. Reservados todos los derechos.
CompanyName : Microsoft Corporation
FileDescription : Aplicaci
InternalName : services.exe
OriginalFilename : services.exe
ProductName : Sistema operativo Microsoft
Created on : 24/08/2001 12:00:00
Last accessed : 12/06/2004 13:21:25
Last modified : 24/08/2001 12:00:00
#:4 [lsass.exe]
FilePath : D:\WINDOWS\system32\
ThreadCreationTime : 12-06-2004 11:44:36
BasePriority : Normal
FileSize : 11 KB
FileVersion : 5.1.2600.0 (xpclient.010817-1148)
ProductVersion : 5.1.2600.0
CompanyName : Microsoft Corporation
FileDescription : LSA Shell (Export Version)
InternalName : lsass.exe
OriginalFilename : lsass.exe
ProductName : Microsoft
Created on : 24/08/2001 12:00:00
Last accessed : 12/06/2004 13:21:25
Last modified : 24/08/2001 12:00:00
#:5 [ati2evxx.exe]
FilePath : D:\WINDOWS\System32\
ThreadCreationTime : 12-06-2004 11:44:36
BasePriority : Normal
FileSize : 388 KB
Created on : 22/03/2004 20:49:08
Last accessed : 12/06/2004 13:21:25
Last modified : 22/03/2004 20:49:08
#:6 [svchost.exe]
FilePath : D:\WINDOWS\system32\
ThreadCreationTime : 12-06-2004 11:44:36
BasePriority : Normal
FileSize : 12 KB
FileVersion : 5.1.2600.0 (xpclient.010817-1148)
ProductVersion : 5.1.2600.0
CompanyName : Microsoft Corporation
FileDescription : Generic Host Process for Win32 Services
InternalName : svchost.exe
OriginalFilename : svchost.exe
ProductName : Microsoft
Created on : 24/08/2001 12:00:00
Last accessed : 12/06/2004 12:32:49
Last modified : 24/08/2001 12:00:00
#:7 [svchost.exe]
FilePath : D:\WINDOWS\System32\
ThreadCreationTime : 12-06-2004 11:44:37
BasePriority : Normal
FileSize : 12 KB
FileVersion : 5.1.2600.0 (xpclient.010817-1148)
ProductVersion : 5.1.2600.0
CompanyName : Microsoft Corporation
FileDescription : Generic Host Process for Win32 Services
InternalName : svchost.exe
OriginalFilename : svchost.exe
ProductName : Microsoft
Created on : 24/08/2001 12:00:00
Last accessed : 12/06/2004 12:32:49
Last modified : 24/08/2001 12:00:00
#:8 [ati2evxx.exe]
FilePath : D:\WINDOWS\system32\
ThreadCreationTime : 12-06-2004 11:44:38
BasePriority : Normal
FileSize : 388 KB
Created on : 22/03/2004 20:49:08
Last accessed : 12/06/2004 13:21:25
Last modified : 22/03/2004 20:49:08
#:9 [spoolsv.exe]
FilePath : D:\WINDOWS\system32\
ThreadCreationTime : 12-06-2004 11:44:38
BasePriority : Normal
FileSize : 50 KB
FileVersion : 5.1.2600.0 (XPClient.010817-1148)
ProductVersion : 5.1.2600.0
CompanyName : Microsoft Corporation
FileDescription : Spooler SubSystem App
InternalName : spoolsv.exe
OriginalFilename : spoolsv.exe
ProductName : Microsoft
Created on : 24/08/2001 12:00:00
Last accessed : 12/06/2004 13:21:25
Last modified : 24/08/2001 12:00:00
#:10 [explorer.exe]
FilePath : D:\WINDOWS\
ThreadCreationTime : 12-06-2004 11:44:38
BasePriority : Normal
FileSize : 980 KB
FileVersion : 6.00.2600.0000 (xpclient.010817-1148)
ProductVersion : 6.00.2600.0000
CompanyName : Microsoft Corporation
FileDescription : Explorador de Windows
InternalName : explorer
OriginalFilename : EXPLORER.EXE
ProductName : Sistema operativo Microsoft
Created on : 24/08/2001 12:00:00
Last accessed : 12/06/2004 13:21:25
Last modified : 24/08/2001 12:00:00
#:11 [atiptaxx.exe]
FilePath : D:\Archivos de programa\ATI Technologies\ATI Control Panel\
ThreadCreationTime : 12-06-2004 11:44:44
BasePriority : Normal
FileSize : 328 KB
FileVersion : 6.14.10.5097
ProductVersion : 6.14.10.5097
Copyright : Copyright (C) 1998-2004 ATI Technologies Inc.
CompanyName : ATI Technologies, Inc.
FileDescription : ATI Desktop Control Panel
InternalName : Atiptaxx.exe
OriginalFilename : Atiptaxx.exe
ProductName : ATI Desktop Component
Created on : 12/04/2004 1:53:43
Last accessed : 12/06/2004 13:21:25
Last modified : 22/03/2004 19:10:00
#:12 [apvxdwin.exe]
FilePath : D:\Archivos de programa\Panda Software\Panda Antivirus Platinum\
ThreadCreationTime : 12-06-2004 11:44:44
BasePriority : Normal
FileSize : 276 KB
FileVersion : 2, 12, 12, 0
ProductVersion : 7.00
CompanyName : Panda Software International
FileDescription : Platinum permanent protection
InternalName : Apvxdwin.exe
ProductName : Panda Antivirus Platinum
Created on : 09/02/2004 16:29:22
Last accessed : 12/06/2004 13:21:25
Last modified : 09/02/2004 16:29:22
#:13 [msgplus.exe]
FilePath : D:\Archivos de programa\Messenger Plus! 2\
ThreadCreationTime : 12-06-2004 11:44:44
BasePriority : Normal
FileSize : 136 KB
FileVersion : 2, 54, 0, 74
ProductVersion : 2, 54, 0, 74
Copyright : Copyright (C) 2001-2003
CompanyName : Patchou
FileDescription : Messenger Plus!
InternalName : MsgPlus
OriginalFilename : MsgPlus.exe
ProductName : Messenger Plus! 2
Created on : 25/03/2004 18:56:50
Last accessed : 12/06/2004 13:21:25
Last modified : 23/04/2004 12:52:23
#:14 [winpatrol.exe]
FilePath : D:\ARCHIV~1\BILLPS~1\WINPAT~1\
ThreadCreationTime : 12-06-2004 11:44:44
BasePriority : Normal
FileSize : 188 KB
FileVersion : 7, 0, 1, 0
ProductVersion : 7.0.1.0
Copyright : Copyright
CompanyName : BillP Studios
FileDescription : WinPatrol By BillP Studios
InternalName : WinPatrol
OriginalFilename : Scotty
ProductName : WinPatrol
Created on : 11/06/2004 19:14:57
Last accessed : 12/06/2004 13:21:25
Last modified : 06/05/2004 12:17:38
#:15 [msmsgs.exe]
FilePath : D:\Archivos de programa\Messenger\
ThreadCreationTime : 12-06-2004 11:44:44
BasePriority : Normal
FileSize : 1456 KB
FileVersion : 4.7.2009
ProductVersion : Version 4.7
Copyright : Copyright (c) Microsoft Corporation 1997-2003
CompanyName : Microsoft Corporation
FileDescription : Messenger
InternalName : msmsgs
OriginalFilename : msmsgs.exe
ProductName : Messenger
Created on : 14/04/2003 17:30:14
Last accessed : 12/06/2004 13:21:25
Last modified : 14/04/2003 17:30:14
#:16 [quicktv.exe]
FilePath : D:\Archivos de programa\AVerTV\
ThreadCreationTime : 12-06-2004 11:44:44
BasePriority : Normal
FileSize : 256 KB
FileVersion : 3, 1, 0, 1
ProductVersion : 5, 0, 0, 0
Copyright : Copyright (c) 2000-2003
CompanyName : AVerMedia Technologies, Inc.
FileDescription : QuickTV Application
InternalName : QuickTV
OriginalFilename : QuickTV.EXE
ProductName : QuickTV
Created on : 08/06/2003 17:00:10
Last accessed : 12/06/2004 12:45:27
Last modified : 08/06/2003 17:00:10
#:17 [pavfires.exe]
FilePath : D:\Archivos de programa\Panda Software\Panda Antivirus Platinum\Firewall\
ThreadCreationTime : 12-06-2004 11:44:47
BasePriority : Normal
FileSize : 168 KB
FileVersion : 1, 3, 0, 0
ProductVersion : 7, 5, 0, 0
Copyright : Panda Software Copyright
CompanyName : Panda Software
FileDescription : Personal Firewall Service
InternalName : Pavfires
OriginalFilename : Pavfires.exe
ProductName : Platinum 7 Pavfires
Created on : 09/02/2004 16:29:22
Last accessed : 12/06/2004 13:21:26
Last modified : 04/06/2003 14:56:46
#:18 [pavsrv51.exe]
FilePath : D:\Archivos de programa\Panda Software\Panda Antivirus Platinum\
ThreadCreationTime : 12-06-2004 11:44:50
BasePriority : High
FileSize : 264 KB
FileVersion : 6, 3, 0, 530
ProductVersion : 6.3
Copyright : Copyright
CompanyName : Panda Software
FileDescription : Panda Antivirus Service for Windows NT/2000
InternalName : pavsrv
OriginalFilename : pavsrv.exe
ProductName : Panda Antivirus
Created on : 09/02/2004 16:29:22
Last accessed : 12/06/2004 13:21:26
Last modified : 02/04/2003 14:38:18
#:19 [avengine.exe]
FilePath : D:\Archivos de programa\Panda Software\Panda Antivirus Platinum\
ThreadCreationTime : 12-06-2004 11:44:52
BasePriority : Normal
FileSize : 100 KB
FileVersion : 6, 3, 0, 492
ProductVersion : 6.3
Copyright : Copyright
CompanyName : Panda Software
FileDescription : Proceso an
InternalName : avengine
OriginalFilename : avengine.exe
ProductName : Panda Antivirus Windows NT/2000
Created on : 09/02/2004 16:29:22
Last accessed : 12/06/2004 13:21:26
Last modified : 08/04/2003 16:51:34
#:20 [svchost.exe]
FilePath : D:\WINDOWS\System32\
ThreadCreationTime : 12-06-2004 11:44:53
BasePriority : Normal
FileSize : 12 KB
FileVersion : 5.1.2600.0 (xpclient.010817-1148)
ProductVersion : 5.1.2600.0
CompanyName : Microsoft Corporation
FileDescription : Generic Host Process for Win32 Services
InternalName : svchost.exe
OriginalFilename : svchost.exe
ProductName : Microsoft
Created on : 24/08/2001 12:00:00
Last accessed : 12/06/2004 12:32:49
Last modified : 24/08/2001 12:00:00
#:21 [msnmsgr.exe]
FilePath : D:\Archivos de programa\MSN Messenger\
ThreadCreationTime : 12-06-2004 11:44:54
BasePriority : Normal
FileSize : 4572 KB
FileVersion : 6.1.0211
ProductVersion : Version 6.1
Copyright : Copyright (c) Microsoft Corporation 1997-2003
CompanyName : Microsoft Corporation
FileDescription : Messenger
InternalName : msnmsgr
OriginalFilename : msnmsgr.exe
ProductName : Messenger
Created on : 04/03/2004 22:01:00
Last accessed : 12/06/2004 12:47:24
Last modified : 04/03/2004 22:01:00
#:22 [pavproxy.exe]
FilePath : D:\Archivos de programa\Panda Software\Panda Antivirus Platinum\
ThreadCreationTime : 12-06-2004 11:45:14
BasePriority : Normal
FileSize : 144 KB
FileVersion : 3, 6, 10, 24
ProductVersion : 3, 6, 10, 24
Copyright : Copyright
CompanyName : Panda Software
FileDescription : PavProxy
InternalName : PavProxy
OriginalFilename : PavProxy.exe
ProductName : Mail Resident
Created on : 09/02/2004 16:29:23
Last accessed : 12/06/2004 13:21:26
Last modified : 09/02/2004 16:29:23
#:23 [emule.exe]
FilePath : D:\Archivos de programa\eMule\
ThreadCreationTime : 12-06-2004 11:47:51
BasePriority : Normal
FileSize : 3328 KB
FileVersion : 0.42.6
ProductVersion : 0.42.6
Copyright : Copyright
CompanyName :
http://www.emule-project.net FileDescription : eMule
InternalName : emule.exe
OriginalFilename : emule.exe
ProductName : eMule
Created on : 04/05/2004 19:03:42
Last accessed : 12/06/2004 13:21:26
Last modified : 04/06/2004 12:37:40
#:24 [iexplore.exe]
FilePath : D:\Archivos de programa\Internet Explorer\
ThreadCreationTime : 12-06-2004 12:43:12
BasePriority : Normal
FileSize : 89 KB
FileVersion : 6.00.2600.0000 (xpclient.010817-1148)
ProductVersion : 6.00.2600.0000
CompanyName : Microsoft Corporation
FileDescription : Internet Explorer
InternalName : iexplore
OriginalFilename : IEXPLORE.EXE
ProductName : Sistema operativo Microsoft
Created on : 30/01/2004 18:33:35
Last accessed : 12/06/2004 12:48:39
Last modified : 24/08/2001 12:00:00
#:25 [ad-aware.exe]
FilePath : D:\ARCHIV~1\Lavasoft\AD-AWA~1\
ThreadCreationTime : 12-06-2004 13:13:24
BasePriority : Idle
FileSize : 668 KB
FileVersion : 6.0.1.181
ProductVersion : 6.0.0.0
Copyright : Copyright
CompanyName : Lavasoft Sweden
FileDescription : Ad-aware 6 core application
InternalName : Ad-aware.exe
OriginalFilename : Ad-aware.exe
ProductName : Lavasoft Ad-aware Plus
Created on : 26/04/2004 20:47:18
Last accessed : 12/06/2004 13:13:24
Last modified : 12/07/2003 19:00:20
Resultados Escaneo de la memoria:
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
Nuevos objetos: 0
Objetos encontrados hasta ahora: 0
Inicio escaneo del Registro
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
Resultados Escaneo del registro:
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
Nuevos objetos: 0
Objetos encontrados hasta ahora: 0
Inicio escaneo profundo del Registro
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
Posible secuestro del navegador : Software\Microsoft\Internet Explorer\MainStart Pageabout:blank
Possible Browser Hijack attempt Objeto reconocido!
Tipo : RegFecha
Fecha : "about:blank
"
Categoria : Data Miner
Comentario : Posible secuestro del navegador
Rootkey : HKEY_CURRENT_USER
Objeto : Software\Microsoft\Internet Explorer\Main
Valor : Start Page
Fecha : "about:blank
"
Resultados Escaneo Profundo del registro:
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
Nuevos objetos: 1
Objetos encontrados hasta ahora: 1
Escaneando y examinando archivos en profundidad (C:)
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
Resultados Escaneo del disco: C:\
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
Nuevos objetos: 0
Objetos encontrados hasta ahora: 1
Escaneando y examinando archivos en profundidad (D:)
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
Resultados Escaneo del disco: D:\
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
Nuevos objetos: 0
Objetos encontrados hasta ahora: 1
Scanning Hosts file(D:\WINDOWS\System32\drivers\etc\hosts)
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
Hosts file scan result:
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
1 entries scanned.
Nuevos objetos:0
Objetos encontrados hasta ahora: 1
Performing conditional scans..
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
Conditional scan result:
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
Nuevos objetos: 0
Objetos encontrados hasta ahora: 1
Reanalyzing resultado del Scaneo...
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
Ningún objeto ha estado alejado de la lista del resultado.
15:32:17 Escaneo completo
Resumen Del escaneo
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
Total tiempo escaneo:00:10:52:67
Objetos Escaneados:128686
Objetos identificados:1
Objetos ignorados:0
Nuevos objetos:1
Bueno pos ahi os dejo todo el toxo. Bueno cuando os venga bien lo mirais.
Muxas gracias por adelantado.
Un saludo.