Ayuda hace unos dias intente instalar un programa pero creo que tenia algun tipo de virus, ya que han sean registrado inicios de sesion de todas mis redes sociales en otros dispositovs y a pesar de que ya he utilizado malwarebytes y ha dectado algun archivos y los a elimina creo que aun sigo teniendo el virus en mi Laptop, he ejecutado rkill y creo que aun sigue estando infecada mi laptop.
Este ha sido mi resultado ala ejecugtar rkill en mi laptop, creo que lo veo mal en la parte " * Reparse Point/Junctions Found (Most likely legitimate)!" y en la parte “Checking for processes to terminate:”
Rkill 2.9.1 by Lawrence Abrams (Grinler)
Copyright 2008-2023 BleepingComputer.com
More Information about Rkill can be found at this link:
Program started at: 05/24/2023 03:23:24 AM in x64 mode.
Windows Version: Windows 10 Pro
Checking for Windows services to stop:
* No malware services found to stop.
Checking for processes to terminate:
* C:\ProgramData\SoftwareDistributionSoftwareDistribution-ver0.4.6.0\SoftwareDistributionSoftwareDistribution-ver0.4.6.0.exe (PID: 17468) [AU-HEUR]
1 proccess terminated!
Checking Registry for malware related settings:
* No issues found in the Registry.
Resetting .EXE, .COM, & .BAT associations in the Windows Registry.
Performing miscellaneous checks:
* Windows Defender Disabled
[HKLM\SOFTWARE\Microsoft\Windows Defender]
"DisableAntiSpyware" = dword:00000001
* Reparse Point/Junctions Found (Most likely legitimate)!
* C:\WINDOWS\ServiceProfiles\SQLTELEMETRY$TEW_SQLEXPRESS\AppData\Local\Application Data => C:\windows\ServiceProfiles\SQLTELEMETRY$TEW_SQLEXPRESS\AppData\Local [Dir]
* C:\WINDOWS\ServiceProfiles\SQLTELEMETRY$TEW_SQLEXPRESS\AppData\Local\History => C:\windows\ServiceProfiles\SQLTELEMETRY$TEW_SQLEXPRESS\AppData\Local\Microsoft\Windows\History [Dir]
* C:\WINDOWS\ServiceProfiles\SQLTELEMETRY$TEW_SQLEXPRESS\AppData\Local\Microsoft\Windows\Temporary Internet Files => C:\windows\ServiceProfiles\SQLTELEMETRY$TEW_SQLEXPRESS\AppData\Local\Microsoft\Windows\INetCache [Dir]
* C:\WINDOWS\ServiceProfiles\SQLTELEMETRY$TEW_SQLEXPRESS\AppData\Local\Temporary Internet Files => C:\windows\ServiceProfiles\SQLTELEMETRY$TEW_SQLEXPRESS\AppData\Local\Microsoft\Windows\INetCache [Dir]
* C:\WINDOWS\ServiceProfiles\SQLTELEMETRY$TEW_SQLEXPRESS\Application Data => C:\windows\ServiceProfiles\SQLTELEMETRY$TEW_SQLEXPRESS\AppData\Roaming [Dir]
* C:\WINDOWS\ServiceProfiles\SQLTELEMETRY$TEW_SQLEXPRESS\Cookies => C:\windows\ServiceProfiles\SQLTELEMETRY$TEW_SQLEXPRESS\AppData\Local\Microsoft\Windows\INetCookies [Dir]
* C:\WINDOWS\ServiceProfiles\SQLTELEMETRY$TEW_SQLEXPRESS\Documents\My Music => C:\windows\ServiceProfiles\SQLTELEMETRY$TEW_SQLEXPRESS\Music [Dir]
* C:\WINDOWS\ServiceProfiles\SQLTELEMETRY$TEW_SQLEXPRESS\Documents\My Pictures => C:\windows\ServiceProfiles\SQLTELEMETRY$TEW_SQLEXPRESS\Pictures [Dir]
* C:\WINDOWS\ServiceProfiles\SQLTELEMETRY$TEW_SQLEXPRESS\Documents\My Videos => C:\windows\ServiceProfiles\SQLTELEMETRY$TEW_SQLEXPRESS\Videos [Dir]
* C:\WINDOWS\ServiceProfiles\SQLTELEMETRY$TEW_SQLEXPRESS\Local Settings => C:\windows\ServiceProfiles\SQLTELEMETRY$TEW_SQLEXPRESS\AppData\Local [Dir]
* C:\WINDOWS\ServiceProfiles\SQLTELEMETRY$TEW_SQLEXPRESS\My Documents => C:\windows\ServiceProfiles\SQLTELEMETRY$TEW_SQLEXPRESS\Documents [Dir]
* C:\WINDOWS\ServiceProfiles\SQLTELEMETRY$TEW_SQLEXPRESS\NetHood => C:\windows\ServiceProfiles\SQLTELEMETRY$TEW_SQLEXPRESS\AppData\Roaming\Microsoft\Windows\Network Shortcuts [Dir]
* C:\WINDOWS\ServiceProfiles\SQLTELEMETRY$TEW_SQLEXPRESS\PrintHood => C:\windows\ServiceProfiles\SQLTELEMETRY$TEW_SQLEXPRESS\AppData\Roaming\Microsoft\Windows\Printer Shortcuts [Dir]
* C:\WINDOWS\ServiceProfiles\SQLTELEMETRY$TEW_SQLEXPRESS\Recent => C:\windows\ServiceProfiles\SQLTELEMETRY$TEW_SQLEXPRESS\AppData\Roaming\Microsoft\Windows\Recent [Dir]
* C:\WINDOWS\ServiceProfiles\SQLTELEMETRY$TEW_SQLEXPRESS\SendTo => C:\windows\ServiceProfiles\SQLTELEMETRY$TEW_SQLEXPRESS\AppData\Roaming\Microsoft\Windows\SendTo [Dir]
* C:\WINDOWS\ServiceProfiles\SQLTELEMETRY$TEW_SQLEXPRESS\Start Menu => C:\windows\ServiceProfiles\SQLTELEMETRY$TEW_SQLEXPRESS\AppData\Roaming\Microsoft\Windows\Start Menu [Dir]
* C:\WINDOWS\ServiceProfiles\SQLTELEMETRY$TEW_SQLEXPRESS\Templates => C:\windows\ServiceProfiles\SQLTELEMETRY$TEW_SQLEXPRESS\AppData\Roaming\Microsoft\Windows\Templates [Dir]
Searching for Missing Digital Signatures:
* No issues found.
Checking HOSTS File:
* No issues found.
Program finished at: 05/24/2023 03:24:12 AM
Execution time: 0 hours(s), 0 minute(s), and 48 seconds(s)