SEGURIDAD INFORMATICA, Firewall, parches, vacunas, antivirus, anti troyanos, spyware etc > Seguridad Informatica - Firewall - Virus - Troyanos - Spyware - Ad Aware - Malware
yo continúo con el mismo problema
FatsGordon:
Muchas gracias! :D
zimisces:
1. En el enlace que me das no veo el APM; veo los siguientes Process Guard, CryptoSuite, TDS-3 y Port Explorer ¿alguno de ellos?
2. El log de Ad aware, en el primer escaneo registró 26 elementos, los eliminé reinicié y ahora no aparece ninguno, todo en blanco como sigue:
Lavasoft Ad-aware Personal Build 6.181
Logfile creado:jueves, 20 de mayo de 2004 21:47:21
Created with Ad-aware Personal, free for private use.
Usando archivo de referencia:01R306 19.05.2004
______________________________________________________
Reffile status:
=========================
archivo de la referencia cargado:
Reference Number : 01R306 19.05.2004
Internal build : 238
File location : C:\ARCHIV~1\Lavasoft\AD-AWA~1\reflist.ref
Total size : 1130501 Bytes
Signature data size : 1111499 Bytes
Reference data size : 18938 Bytes
Signatures total : 24860
Target categories : 10
Target families : 476
Memory + processor status:
==========================
Number of processors : 1
Processor architecture : Intel Pentium III
Memory available:63 %
Total physical memory:523760 kb
Available physical memory:326876 kb
Total page file size:1280624 kb
Available on page file:1110700 kb
Total virtual memory:2097024 kb
Available virtual memory:2056684 kb
OS:
Ad-aware Settings
=========================
Juego : Activar escaneo en profundidad
Juego : Modo seguro (siempre pide una confirmación)
Juego : Escanear procesos activos
Juego : Escanear registro
Juego : Escanear registro a fondo
Juego : Escanear Favorito de IE para los sitios prohibidos
Juego : Escanear dentro de los archivos
Juego : Scan my Hosts file
Extended Ad-aware Settings
=========================
Juego : Unload recognized processes during scanning
Juego : Include basic Ad-aware settings in logfile
Juego : Include additional Ad-aware settings in logfile
Juego : Let windows remove files in use at next reboot
Juego : Delete quarantined objects after restoring
Juego : Always back up reference file, before updating
Juego : Play sound if scan produced a result
20-05-2004 21:47:21 - Scan started. (Custom mode)
Listando procesos activos
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
#:1 [smss.exe]
FilePath : \SystemRoot\System32\
ThreadCreationTime : 20-05-2004 20:46:14
BasePriority : Normal
#:2 [winlogon.exe]
FilePath : \??\C:\WINDOWS\system32\
ThreadCreationTime : 20-05-2004 20:46:16
BasePriority : High
#:3 [services.exe]
FilePath : C:\WINDOWS\system32\
ThreadCreationTime : 20-05-2004 20:46:16
BasePriority : Normal
FileSize : 99 KB
FileVersion : 5.1.2600.0 (xpclient.010817-1148)
ProductVersion : 5.1.2600.0
Copyright : Copyright (C) Microsoft Corporation. Reservados todos los derechos.
CompanyName : Microsoft Corporation
FileDescription : Aplicaci
InternalName : services.exe
OriginalFilename : services.exe
ProductName : Sistema operativo Microsoft
Created on : 24/08/2001 10:00:00
Last accessed : 20/05/2004 20:23:41
Last modified : 24/08/2001 10:00:00
#:4 [lsass.exe]
FilePath : C:\WINDOWS\system32\
ThreadCreationTime : 20-05-2004 20:46:17
BasePriority : Normal
FileSize : 11 KB
FileVersion : 5.1.2600.0 (xpclient.010817-1148)
ProductVersion : 5.1.2600.0
CompanyName : Microsoft Corporation
FileDescription : LSA Shell (Export Version)
InternalName : lsass.exe
OriginalFilename : lsass.exe
ProductName : Microsoft
Created on : 24/08/2001 10:00:00
Last accessed : 20/05/2004 20:46:21
Last modified : 24/08/2001 10:00:00
#:5 [svchost.exe]
FilePath : C:\WINDOWS\system32\
ThreadCreationTime : 20-05-2004 20:46:17
BasePriority : Normal
FileSize : 12 KB
FileVersion : 5.1.2600.0 (xpclient.010817-1148)
ProductVersion : 5.1.2600.0
CompanyName : Microsoft Corporation
FileDescription : Generic Host Process for Win32 Services
InternalName : svchost.exe
OriginalFilename : svchost.exe
ProductName : Microsoft
Created on : 24/08/2001 10:00:00
Last accessed : 20/05/2004 20:46:39
Last modified : 24/08/2001 10:00:00
#:6 [svchost.exe]
FilePath : C:\WINDOWS\System32\
ThreadCreationTime : 20-05-2004 20:46:17
BasePriority : Normal
FileSize : 12 KB
FileVersion : 5.1.2600.0 (xpclient.010817-1148)
ProductVersion : 5.1.2600.0
CompanyName : Microsoft Corporation
FileDescription : Generic Host Process for Win32 Services
InternalName : svchost.exe
OriginalFilename : svchost.exe
ProductName : Microsoft
Created on : 24/08/2001 10:00:00
Last accessed : 20/05/2004 20:46:39
Last modified : 24/08/2001 10:00:00
#:7 [spoolsv.exe]
FilePath : C:\WINDOWS\system32\
ThreadCreationTime : 20-05-2004 20:46:18
BasePriority : Normal
FileSize : 50 KB
FileVersion : 5.1.2600.0 (XPClient.010817-1148)
ProductVersion : 5.1.2600.0
CompanyName : Microsoft Corporation
FileDescription : Spooler SubSystem App
InternalName : spoolsv.exe
OriginalFilename : spoolsv.exe
ProductName : Microsoft
Created on : 24/08/2001 10:00:00
Last accessed : 20/05/2004 20:23:41
Last modified : 24/08/2001 10:00:00
#:8 [ccevtmgr.exe]
FilePath : C:\Archivos de programa\Archivos comunes\Symantec Shared\
ThreadCreationTime : 20-05-2004 20:46:18
BasePriority : Normal
FileSize : 309 KB
FileVersion : 1.03.4
ProductVersion : 1.03.4
Copyright : Copyright (c) 2000-2002 Symantec Corporation. All rights reserved.
CompanyName : Symantec Corporation
FileDescription : Event Manager Service
InternalName : ccEvtMgr
OriginalFilename : ccEvtMgr.exe
ProductName : Event Manager
Created on : 16/08/2003 18:40:30
Last accessed : 20/05/2004 20:23:41
Last modified : 03/12/2002 16:22:12
#:9 [dcsuserprot.exe]
FilePath : C:\Archivos de programa\ProcessGuard Free\
ThreadCreationTime : 20-05-2004 20:46:19
BasePriority : Normal
FileSize : 88 KB
FileVersion : 2, 0, 0, 0
ProductVersion : 2, 0, 0, 0
Copyright : Copyright
CompanyName : DiamondCS
FileDescription : DiamondCS Usermode Aspect is needed for Process Guard, TDS-4 and possibly other DiamondCS products
InternalName : DiamondCS Usermode Aspect
OriginalFilename : DCSUSERPROT.EXE
ProductName : DiamondCS Usermode Aspect
Created on : 25/03/2004 15:57:22
Last accessed : 20/05/2004 20:46:19
Last modified : 25/03/2004 15:57:22
#:10 [mdm.exe]
FilePath : C:\Archivos de programa\Archivos comunes\Microsoft Shared\VS7Debug\
ThreadCreationTime : 20-05-2004 20:46:20
BasePriority : Normal
FileSize : 264 KB
FileVersion : 7.00.9064.9150
ProductVersion : 7.00.9064.9150
Copyright : Copyright (C) Microsoft Corp. 1997-2000
CompanyName : Microsoft Corporation
FileDescription : Machine Debug Manager
InternalName : mdm.exe
OriginalFilename : mdm.exe
ProductName : Microsoft Development Environment
Created on : 23/02/2001 9:07:30
Last accessed : 20/05/2004 20:23:41
Last modified : 23/02/2001 9:07:30
#:11 [navapsvc.exe]
FilePath : C:\Archivos de programa\Norton AntiVirus\
ThreadCreationTime : 20-05-2004 20:46:20
BasePriority : Normal
FileSize : 113 KB
FileVersion : 9.05.1015
ProductVersion : 9.05.1015
Copyright : Copyright (c) 2000-2002 Symantec Corporation. All rights reserved.
CompanyName : Symantec Corporation
FileDescription : Norton AntiVirus Auto-Protect Service
InternalName : NAVAPSVC
OriginalFilename : NAVAPSVC.EXE
ProductName : Norton AntiVirus
Created on : 16/08/2003 18:07:18
Last accessed : 20/05/2004 20:22:37
Last modified : 21/11/2002 9:14:18
#:12 [nvsvc32.exe]
FilePath : C:\WINDOWS\System32\
ThreadCreationTime : 20-05-2004 20:46:20
BasePriority : Normal
FileSize : 80 KB
FileVersion : 6.14.10.5216
ProductVersion : 6.14.10.5216
Copyright : (C) NVIDIA Corporation. All rights reserved.
CompanyName : NVIDIA Corporation
FileDescription : NVIDIA Driver Helper Service, Version 52.16
InternalName : NVSVC
OriginalFilename : nvsvc32.exe
ProductName : NVIDIA Driver Helper Service, Version 52.16
Created on : 06/10/2003 13:16:00
Last accessed : 20/05/2004 20:23:41
Last modified : 06/10/2003 13:16:00
#:13 [outpost.exe]
FilePath : C:\ARCHIV~1\Agnitum\OUTPOS~1.0\
ThreadCreationTime : 20-05-2004 20:46:20
BasePriority : Normal
FileSize : 77 KB
FileVersion : 1.0.242
ProductVersion : 1.0
Copyright : (C) Agnitum, 1999-2001
CompanyName : Agnitum
FileDescription : Outpost Firewall main module
InternalName : Outpost Firewall
OriginalFilename : outpost.exe
ProductName : Outpost Firewall
Created on : 17/05/2004 1:27:23
Last accessed : 20/05/2004 20:46:20
Last modified : 14/06/2002 15:20:36
#:14 [explorer.exe]
FilePath : C:\WINDOWS\
ThreadCreationTime : 20-05-2004 20:46:48
BasePriority : Normal
FileSize : 980 KB
FileVersion : 6.00.2600.0000 (xpclient.010817-1148)
ProductVersion : 6.00.2600.0000
CompanyName : Microsoft Corporation
FileDescription : Explorador de Windows
InternalName : explorer
OriginalFilename : EXPLORER.EXE
ProductName : Sistema operativo Microsoft
Created on : 24/08/2001 10:00:00
Last accessed : 20/05/2004 20:46:49
Last modified : 24/08/2001 10:00:00
#:15 [echoctrl.exe]
FilePath : C:\Archivos de programa\PCI Audio Applications\Bin\
ThreadCreationTime : 20-05-2004 20:46:50
BasePriority : Normal
FileSize : 144 KB
FileVersion : 1, 0, 0, 1
ProductVersion : 1, 0, 0, 1
Copyright : Copyright (C) 2001
FileDescription : EchoCtrl MFC Application
InternalName : EchoCtrl
OriginalFilename : EchoCtrl.EXE
ProductName : EchoCtrl Application
Created on : 07/08/2003 16:53:19
Last accessed : 20/05/2004 20:46:14
Last modified : 05/12/2001 15:47:32
#:16 [mixer.exe]
FilePath : C:\WINDOWS\
ThreadCreationTime : 20-05-2004 20:46:51
BasePriority : Normal
FileSize : 1776 KB
FileVersion : 1.58
ProductVersion : 1.58
Copyright : Copyright (C) 1997-2002
CompanyName : C-Media Electronic Inc. (www.cmedia.com.tw)
FileDescription : Mixer
InternalName : Mixer
OriginalFilename : Mixer.EXE
ProductName : Mixer
Created on : 15/10/2002 18:00:20
Last accessed : 20/05/2004 20:47:00
Last modified : 15/10/2002 18:00:20
#:17 [ccapp.exe]
FilePath : C:\Archivos de programa\Archivos comunes\Symantec Shared\
ThreadCreationTime : 20-05-2004 20:46:52
BasePriority : Normal
FileSize : 54 KB
FileVersion : 1.08.01
ProductVersion : 1.08.01
Copyright : Copyright (c) 2000-2002 Symantec Corporation. All rights reserved.
CompanyName : Symantec Corporation
FileDescription : Common Client CC App
InternalName : ccApp
OriginalFilename : ccApp.exe
ProductName : Common Client
Created on : 30/08/2003 16:04:37
Last accessed : 20/05/2004 20:46:58
Last modified : 15/07/2003 13:58:08
#:18 [point32.exe]
FilePath : C:\Archivos de programa\Microsoft Hardware\Mouse\
ThreadCreationTime : 20-05-2004 20:46:53
BasePriority : Normal
FileSize : 172 KB
FileVersion : 4.10.0851.0
ProductVersion : 4.1
Copyright : Copyright (C) Microsoft Corp. 1983-2002
CompanyName : Microsoft Corporation
FileDescription : Microsoft IntelliPoint
InternalName : POINT32
OriginalFilename : POINT32.EXE
ProductName : Microsoft IntelliPoint
Created on : 11/04/2002 18:47:52
Last accessed : 20/05/2004 20:46:14
Last modified : 11/04/2002 18:47:52
#:19 [msgplus.exe]
FilePath : C:\Archivos de programa\Messenger Plus! 2\
ThreadCreationTime : 20-05-2004 20:46:54
BasePriority : Normal
FileSize : 136 KB
FileVersion : 2, 54, 0, 74
ProductVersion : 2, 54, 0, 74
Copyright : Copyright (C) 2001-2003
CompanyName : Patchou
FileDescription : Messenger Plus!
InternalName : MsgPlus
OriginalFilename : MsgPlus.exe
ProductName : Messenger Plus! 2
Created on : 25/01/2004 20:43:08
Last accessed : 20/05/2004 20:46:55
Last modified : 25/01/2004 21:02:44
#:20 [rundll32.exe]
FilePath : C:\WINDOWS\System32\
ThreadCreationTime : 20-05-2004 20:46:55
BasePriority : Normal
FileSize : 31 KB
FileVersion : 5.1.2600.0 (xpclient.010817-1148)
ProductVersion : 5.1.2600.0
CompanyName : Microsoft Corporation
FileDescription : Ejecutar un archivo DLL como una aplicaci
InternalName : rundll
OriginalFilename : RUNDLL.EXE
ProductName : Sistema operativo Microsoft
Created on : 24/08/2001 10:00:00
Last accessed : 20/05/2004 20:46:52
Last modified : 24/08/2001 10:00:00
#:21 [msmsgs.exe]
FilePath : C:\Archivos de programa\Messenger\
ThreadCreationTime : 20-05-2004 20:46:56
BasePriority : Normal
FileSize : 1456 KB
FileVersion : 4.7.2009
ProductVersion : Version 4.7
Copyright : Copyright (c) Microsoft Corporation 1997-2003
CompanyName : Microsoft Corporation
FileDescription : Messenger
InternalName : msmsgs
OriginalFilename : msmsgs.exe
ProductName : Messenger
Created on : 14/04/2003 19:30:14
Last accessed : 20/05/2004 20:47:01
Last modified : 14/04/2003 19:30:14
#:22 [wincinemamgr.exe]
FilePath : C:\Archivos de programa\InterVideo\Common\Bin\
ThreadCreationTime : 20-05-2004 20:46:57
BasePriority : Normal
FileSize : 152 KB
FileVersion : 1.7
ProductVersion : 1, 0, 0, 1
Copyright : Copyright (C) 2000 InterVideo Inc.
FileDescription : WinCinema Manager
InternalName : WinCinema Manager
OriginalFilename : WinCinemaMgr.EXE
ProductName : WinCinema Manager for InterVideo WinCinema products
Created on : 16/08/2003 15:20:28
Last accessed : 20/05/2004 20:46:57
Last modified : 13/06/2003 17:50:46
#:23 [procguard.exe]
FilePath : C:\Archivos de programa\ProcessGuard Free\
ThreadCreationTime : 20-05-2004 20:46:59
BasePriority : Normal
FileSize : 204 KB
FileVersion : 2, 0, 0, 0
ProductVersion : 2, 0, 0, 0
Copyright : Copyright
CompanyName : DiamondCS
FileDescription : Defends your system from malware
InternalName : Process Guard
OriginalFilename : procguard.exe
ProductName : DiamondCS Process Guard
Created on : 25/03/2004 16:06:58
Last accessed : 20/05/2004 20:22:18
Last modified : 25/03/2004 16:06:58
#:24 [msnmsgr.exe]
FilePath : C:\Archivos de programa\MSN Messenger\
ThreadCreationTime : 20-05-2004 20:47:05
BasePriority : Normal
FileSize : 4572 KB
FileVersion : 6.1.0211
ProductVersion : Version 6.1
Copyright : Copyright (c) Microsoft Corporation 1997-2003
CompanyName : Microsoft Corporation
FileDescription : Messenger
InternalName : msnmsgr
OriginalFilename : msnmsgr.exe
ProductName : Messenger
Created on : 04/03/2004 22:01:00
Last accessed : 20/05/2004 20:07:24
Last modified : 04/03/2004 22:01:00
#:25 [ad-aware.exe]
FilePath : C:\ARCHIV~1\Lavasoft\AD-AWA~1\
ThreadCreationTime : 20-05-2004 20:47:10
BasePriority : Normal
FileSize : 668 KB
FileVersion : 6.0.1.181
ProductVersion : 6.0.0.0
Copyright : Copyright
CompanyName : Lavasoft Sweden
FileDescription : Ad-aware 6 core application
InternalName : Ad-aware.exe
OriginalFilename : Ad-aware.exe
ProductName : Lavasoft Ad-aware Plus
Created on : 16/05/2004 17:20:17
Last accessed : 20/05/2004 20:16:19
Last modified : 12/07/2003 20:00:20
Resultados Escaneo de la memoria:
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
Nuevos objetos: 0
Objetos encontrados hasta ahora: 0
Inicio escaneo del Registro
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
Resultados Escaneo del registro:
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
Nuevos objetos: 0
Objetos encontrados hasta ahora: 0
Inicio escaneo profundo del Registro
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
Resultados Escaneo Profundo del registro:
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
Nuevos objetos: 0
Objetos encontrados hasta ahora: 0
Escaneando y examinando archivos en profundidad (A:)
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
Resultados Escaneo del disco: A:\
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
Nuevos objetos: 0
Objetos encontrados hasta ahora: 0
Escaneando y examinando archivos en profundidad (C:)
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
Resultados Escaneo del disco: C:\
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
Nuevos objetos: 0
Objetos encontrados hasta ahora: 0
Escaneando y examinando archivos en profundidad (D:)
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
Resultados Escaneo del disco: D:\
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
Nuevos objetos: 0
Objetos encontrados hasta ahora: 0
Escaneando y examinando archivos en profundidad (E:)
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
Resultados Escaneo del disco: E:\
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
Nuevos objetos: 0
Objetos encontrados hasta ahora: 0
Scanning Hosts file(C:\WINDOWS\System32\drivers\etc\hosts)
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
Hosts file scan result:
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
1 entries scanned.
Nuevos objetos:0
Objetos encontrados hasta ahora: 0
21:57:51 Escaneo completo
Resumen Del escaneo
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
Total tiempo escaneo:00:10:29:656
Objetos Escaneados:138078
Objetos identificados:0
Objetos ignorados:0
Nuevos objetos:0
Saludos
FatsGordon:
Lo siento, quedó una coma al final de la URL y la tomó como si fuera propia:
http://www.diamondcs.com.au/index.php?page=apm
Esa es la dirección.
Hacé lo que te pedí y volvé. :D
zimisces:
Lo siento mucho pero no encuentro esto en la ventana de abajo: mrhop.dll
¿Qué hacemos ahora?
FatsGordon:
--- Cita de: zimisces ---He reiniciado y no aparece ni rastro del spy no sé si cantar victoria :P
--- Fin de la cita ---
Cantemos victoria, entonces... :D
Ya estás limpio! :D
Navegación
[#] Página Siguiente
[*] Página Anterior
Ir a la versión completa