Este foro cuenta con temas que han tenido una solución efectiva en el foro de Soporte. Esto es para que cuando tengan algún problema, visiten este foro de referencia y quizás encuentran algo relacionado y puedan solucionar eso sin tener que estar creando temas de más en el foro Soporte.
Posteo por aca porque me rendi luego de pasarme toda la noche buscandole solucion a un problema q tengo, les cuento: Resulta que el otro dia instale una actualizacion al FF3 (la 3.0.8 para ser + especifico), ahora el problema es que luego de instalada esa version FF no me conecta a inet... a pesar de que si tengo acceso a inet... encontre raro esto y desinstale el FF, le quite complementos, borre cookies, archivos temporales... y aun asi sigo sin acceso a internet por mozilla... ahora ya habia tenido antes ciertos problemas de acceso a la red, sucede que me di cuenta cuando quise actualizar el bitdefender 2009 que me baje del foro y no pude, ya q me enviaba un error de conexion, a pesar de que tenia los permisos de firewall correspondientes, no le di mucha importancia porque aun podia actualizar manualmente. Pero luego me paso lo mismo con Flashget, SuperAntiSpyware PRO, Mozilla, Avira... Ahora las unicas aplicaciones con las que puedo acceder a inet son IE7 y WLM9, y puta IE7 no me puede gustar... quiero mi mozilla de vuelta el resumen cronologico de mis acciones las ultimas semanas es: 1. baje e instale bitdefender internet security 2009, antes tenia el norton is 2007 (venia con mi note y aprovechaba las actualizaciones gratuitas, hasta q acabaron los 90 dias y lo 'desinstale') 2. en teoria nunca pude desinstalar el NIS2007 porque esta integrado a la consola de recuperacion del note, asi que lo desactive del inicio, y le quite los servicios symantec que inician con el sistema 3. instale la actualizacion del FF3 y lo q ya dije... 0 internet 4. desinstale el bitdefender y le instale el avira... me 'pillo' 8 amenazas, la mayoria las q estaban en cuarentena por NIS2007 informe avira
Spoiler:
Start of the scan: lunes, 30 de marzo de 2009 15:05
The scan of running processes will be started Scan process 'avscan.exe' - '1' Module(s) have been scanned Scan process 'avscan.exe' - '1' Module(s) have been scanned Scan process 'avcenter.exe' - '1' Module(s) have been scanned Scan process 'notepad.exe' - '1' Module(s) have been scanned Scan process 'HijackThis.exe' - '1' Module(s) have been scanned Scan process 'wlcomm.exe' - '1' Module(s) have been scanned Scan process 'msnmsgr.exe' - '1' Module(s) have been scanned Scan process 'avgnt.exe' - '1' Module(s) have been scanned Scan process 'avguard.exe' - '1' Module(s) have been scanned Scan process 'sched.exe' - '1' Module(s) have been scanned Scan process 'WmiPrvSE.exe' - '1' Module(s) have been scanned Scan process 'unsecapp.exe' - '1' Module(s) have been scanned Scan process 'taskeng.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'StkCSrv.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'StarWindServiceAE.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'mdm.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'hpswp_clipbook.exe' - '1' Module(s) have been scanned Scan process 'ATKOSD.exe' - '1' Module(s) have been scanned Scan process 'HControl.exe' - '1' Module(s) have been scanned Scan process 'iexplore.exe' - '1' Module(s) have been scanned Scan process 'SUPERAntiSpyware.exe' - '1' Module(s) have been scanned Scan process 'RocketDock.exe' - '1' Module(s) have been scanned Scan process 'flashget.exe' - '1' Module(s) have been scanned Scan process 'SynTPEnh.exe' - '1' Module(s) have been scanned Scan process 'explorer.exe' - '1' Module(s) have been scanned Scan process 'dwm.exe' - '1' Module(s) have been scanned Scan process 'taskeng.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'spoolsv.exe' - '1' Module(s) have been scanned Scan process 'ASLDRSrv.exe' - '1' Module(s) have been scanned Scan process 'Ati2evxx.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'SLsvc.exe' - '1' Module(s) have been scanned Scan process 'audiodg.exe' - '0' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'Ati2evxx.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'lsm.exe' - '1' Module(s) have been scanned Scan process 'lsass.exe' - '1' Module(s) have been scanned Scan process 'services.exe' - '1' Module(s) have been scanned Scan process 'winlogon.exe' - '1' Module(s) have been scanned Scan process 'csrss.exe' - '1' Module(s) have been scanned Scan process 'wininit.exe' - '1' Module(s) have been scanned Scan process 'csrss.exe' - '1' Module(s) have been scanned Scan process 'smss.exe' - '1' Module(s) have been scanned 54 processes with 54 modules were scanned
Starting master boot sector scan: Master boot sector HD0 [INFO] No virus was found!
Start scanning boot sectors: Boot sector 'C:\' [INFO] No virus was found!
Starting to scan the registry. The registry was scanned ( '41' files ).
Starting the file scan:
Begin scan in 'C:\' <HDD> C:\hiberfil.sys [WARNING] The file could not be opened! C:\pagefile.sys [WARNING] The file could not be opened! C:\ProgramData\Symantec\Shared\QBackup\{0326AB23-0F27-4BF5-9706-CC6E84AD30D6}\{045ADD09-3F90-4CE5-8586-04DAF3A87CC7}.qbd [0] Archive type: HIDDEN --> FIL\\\?\C:\ProgramData\Symantec\Shared\QBackup\{0326AB23-0F27-4BF5-9706-CC6E84AD30D6}\{045ADD09-3F90-4CE5-8586-04DAF3A87CC7}.qbd [DETECTION] Is the TR/VB.atg.383 Trojan [NOTE] The file was deleted! C:\ProgramData\Symantec\Shared\QBackup\{1B7FD9CA-E787-4DF8-A695-9D9DE44A99C5}\{0260C9EF-0D0D-4F5D-BA1A-16BE3F936948}.qbd [0] Archive type: HIDDEN --> FIL\\\?\C:\ProgramData\Symantec\Shared\QBackup\{1B7FD9CA-E787-4DF8-A695-9D9DE44A99C5}\{0260C9EF-0D0D-4F5D-BA1A-16BE3F936948}.qbd [DETECTION] Is the TR/Crypt.NSPM.Gen Trojan [NOTE] The file was deleted! C:\ProgramData\Symantec\Shared\QBackup\{7EE371B6-6E44-47A7-BD21-A7AAA1C46812}\{C32CC427-688F-4557-A638-0A8BB13B0BA0}.qbd [0] Archive type: HIDDEN --> FIL\\\?\C:\ProgramData\Symantec\Shared\QBackup\{7EE371B6-6E44-47A7-BD21-A7AAA1C46812}\{C32CC427-688F-4557-A638-0A8BB13B0BA0}.qbd [DETECTION] Is the TR/Onlinegames.B.5 Trojan [NOTE] The file was deleted! C:\ProgramData\Symantec\Shared\QBackup\{85E07ECD-9FF5-4407-8BEF-3700075E427B}\{33B43E47-BA84-4B5C-86E0-59E221414BE0}.qbd [0] Archive type: HIDDEN --> FIL\\\?\C:\ProgramData\Symantec\Shared\QBackup\{85E07ECD-9FF5-4407-8BEF-3700075E427B}\{33B43E47-BA84-4B5C-86E0-59E221414BE0}.qbd [DETECTION] Is the TR/Crypt.XPACK.Gen Trojan [NOTE] The file was deleted! C:\ProgramData\Symantec\Shared\QBackup\{A7B06A23-7E76-45A3-9350-A269F18387D1}\{2B391745-9BBA-4D46-8558-20E024D06767}.qbd [0] Archive type: HIDDEN --> FIL\\\?\C:\ProgramData\Symantec\Shared\QBackup\{A7B06A23-7E76-45A3-9350-A269F18387D1}\{2B391745-9BBA-4D46-8558-20E024D06767}.qbd [DETECTION] Is the TR/Crypt.ULPM.Gen Trojan [NOTE] The file was deleted! C:\ProgramData\Symantec\Shared\QBackup\{B7F29057-C2F7-4C00-8641-30C5C7E8318F}\{233E212C-7956-4640-8E82-A6ED6B14684A}.qbd [0] Archive type: HIDDEN --> FIL\\\?\C:\ProgramData\Symantec\Shared\QBackup\{B7F29057-C2F7-4C00-8641-30C5C7E8318F}\{233E212C-7956-4640-8E82-A6ED6B14684A}.qbd [DETECTION] Is the TR/Crypt.NSPM.Gen Trojan [NOTE] The file was deleted! C:\Users\usuario\Downloads\ERW2.4_final.rar [0] Archive type: RAR --> cadhexa.exe [DETECTION] Is the TR/Agent.afmh Trojan --> etherw\plugins\0.10.12\opsi.dll [DETECTION] Is the TR/Dldr.17920.D Trojan [NOTE] A backup was created as '4a2824af.qua' ( QUARANTINE ) [NOTE] The file was deleted! C:\Users\usuario\Downloads\RSM 2.0\rsm.dll [0] Archive type: RAR --> Keygen.exe [DETECTION] Contains HEUR/Crypted suspicious code [NOTE] A backup was created as '4a3e24e9.qua' ( QUARANTINE ) [NOTE] The file was deleted! C:\Windows\System32\drivers\sptd.sys [WARNING] The file could not be opened!
5. le instale el superantispyware pro y me tiro que solo habian cookies sospechosas ningun malware 6. le hice un escaneo con el ccleaner y borre las cookies de explorador y todo eso 7. chato de webiar ya, le hice un log con el HijackThis! el log:
Spoiler:
Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 20:26:24, on 02-04-2009 Platform: Windows Vista (WinNT 6.00.1904) MSIE: Internet Explorer v7.00 (7.00.6000.16764) Boot mode: Normal
algo raro? lo unico q encontre raro es que el proceso explorer.exe tuviera la extension en mayusculas... 8. me fui a modo seguro con red y actualize el superanti... y analice mi pc, nada... trate de actualizar avira pero no se habia iniciado el 'scheduler' asi q no pude, en este modo me funcaban sin problemas IE7, FF3 y Chrome (lo baje pa ver si era problema de browswer) le corri 2 antivirus online Kaspersky y ESET, pero ninguno terminaba de analizar porq al llegar a la carpeta C:\Documents and settings\, no avanzaba nada, luego revise el log pa ver q onda y decia esto:
Spoiler:
Estadísticas: Número de objeros analizados: 4124219 (!) no seran muchos archivos??? Virus encontrados: 0 Objetos infectados: 0 / 0 Objetos sospechosos: 0 Duración del análisis: 12:05:51 ====> toda la noche analizando
Bombre del objeto infectado / Nombre del virus / Última acción C:\boot\BCD Object is locked saltado C:\boot\BCD.LOG Object is locked saltado C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Desktop\NFix_2009-04-01_22-51-17.log Object is locked saltado C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Desktop\NFix_2009-04-01_22-51-17.log Object is locked
, el scanner se quedo pegado en esos directorios Application Data, q ha todo esto antes de q cancelara el analisis iban en alrededor de 150 lineas de directorios parecidas a la de arriba 9. puta despues le mande el kaspersky removal tool (algo asi), y nada... 10. vuelvo a windows en modo normal y continuo con el problema, no puedo usar mozilla, rapiduploader, chrome, actualizar mis herramientas de seguridad, solo puedo usar como ya dije IE7, WLM9 y Aimp2 (escuchar radios on-line) 11. ahora q me acuerdo hace unas semanas baje un pdf q se llamaba 10 trucos para acelerar Win Vista, y desactive ciertos servicios, no creo q haya sido eso, en ese sentido soy cuidadoso..
Alguna idea q no sea FORMATEAR y MANDAR TODO A LA CSM!!! Saludos!
Problema con conexion a inet, no cacho q onda
2 Apr 2009, 21:10
![whip[1].gif](http://img.chilecomparte.cl/style_emoticons/default/whip[1].gif)
no me puede gustar... quiero mi mozilla de vuelta 
maticandia Problema con conexion a inet 2 Apr 2009, 21:10
