[Solucionado] Ayuda con virus bloquea paginas

[RavenxD]

Buen dia con todos. Les escribo para ver si me pueden solucionar un pequeño con un virus que atormenta la PC de mi buen amigo Haiden y que le bloquea paginas... entre las cuales figura BZ por eso es que posteo su problema.

Este famoso virus no solo bloquea paginas sino que tambien no le deja actualizar su KIS.

Ya reviso el archivo hosts y nada, asi que por ahi no va la cosa y el reporte del hihackthis es este:

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 12:18:14 p.m., on 04/06/2010
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16915)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Archivos de programa\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe
C:\Archivos de programa\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\System32\svchost.exe
C:\Documents and Settings\Rafael\Escritorio\RefreshLock.exe
C:\Archivos de programa\Windows Live\Messenger\msnmsgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Archivos de programa\Archivos comunes\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Archivos de programa\Windows Live\Contacts\wlcomm.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Archivos de programa\Internet Explorer\iexplore.exe
C:\Documents and Settings\Rafael\Escritorio\HijackThis.exe
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.daxul.com/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Vínculos
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Archivos de programa\Archivos comunes\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Archivos de programa\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Windows Live Aplicación auxiliar de inicio de sesión - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Archivos de programa\Archivos comunes\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto
O4 - HKLM\..\Run: [AVP] "C:\Archivos de programa\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe"
O4 - HKCU\..\Run: [msnmsgr] "C:\Archivos de programa\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O8 - Extra context menu item: E&xportar a Microsoft Excel - res://C:\ARCHIV~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Estadísticas del componente Web Anti-Virus - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Archivos de programa\Kaspersky Lab\Kaspersky Internet Security 7.0\SCIEPlgn.dll
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Archivos de programa\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Referencia - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\ARCHIV~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Archivos de programa\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Archivos de programa\Messenger\msmsgs.exe
O16 - DPF: {50983909-93ED-461B-B7F3-E58358FDCA99} (Kaybo Class) - http://crazycombi.kaybo.com/activex/FHLActiveX.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsu...?1256433626125
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{65585D29-D01F-47E0-AD03-ADCBBE9F5CDC}: NameServer = 93.188.162.167,93.188.166.198
O17 - HKLM\System\CCS\Services\Tcpip\..\{906816D9-710C-4EB8-9B41-FE51F503B7F0}: NameServer = 93.188.162.167,93.188.166.198
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: NameServer = 93.188.162.167,93.188.166.198
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: NameServer = 93.188.162.167,93.188.166.198
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\ARCHIV~1\ARCHIV~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Precargador Browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Demonio de caché de las categorías de componente - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Archivos de programa\Archivos comunes\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Kaspersky Internet Security 7.0 (AVP) - Kaspersky Lab - C:\Archivos de programa\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe
O23 - Service: BlueSoleil Hid Service - Unknown owner - C:\Archivos de programa\IVT Corporation\BlueSoleil\BTNtService.exe
O23 - Service: Servicio Bonjour (Bonjour Service) - Apple Inc. - C:\Archivos de programa\Bonjour\mDNSResponder.exe
O23 - Service: Servicio del administrador de discos lógicos (dmadmin) - Unknown owner - C:\WINDOWS\System32\dmadmin.exe
O23 - Service: Registro de sucesos (Eventlog) - Unknown owner - C:\WINDOWS\system32\services.exe
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Archivos de programa\Archivos comunes\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Archivos de programa\Archivos comunes\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: Servicio COM de grabación de CD de IMAPI (ImapiService) - Unknown owner - C:\WINDOWS\system32\imapi.exe
O23 - Service: Servicio del iPod (iPod Service) - Apple Inc. - C:\Archivos de programa\iPod\bin\iPodService.exe
O23 - Service: Escritorio remoto compartido de NetMeeting (mnmsrvc) - Unknown owner - C:\WINDOWS\system32\mnmsrvc.exe
O23 - Service: MSCSPTISRV - Sony Corporation - C:\Archivos de programa\Archivos comunes\Sony Shared\AVLib\MSCSPTISRV.exe
O23 - Service: nProtect GameGuard Service (npggsvc) - Unknown owner - C:\WINDOWS\system32\GameMon.des.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PACSPTISVR - Unknown owner - C:\Archivos de programa\Archivos comunes\Sony Shared\AVLib\PACSPTISVR.exe
O23 - Service: Plug and Play (PlugPlay) - Unknown owner - C:\WINDOWS\system32\services.exe
O23 - Service: Administrador de sesión de Ayuda de escritorio remoto (RDSessMgr) - Unknown owner - C:\WINDOWS\system32\sessmgr.exe
O23 - Service: Tarjeta inteligente (SCardSvr) - Unknown owner - C:\WINDOWS\System32\SCardSvr.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Archivos de programa\Archivos comunes\Sony Shared\AVLib\SPTISRV.exe
O23 - Service: Registros y alertas de rendimiento (SysmonLog) - Unknown owner - C:\WINDOWS\system32\smlogsvc.exe
O23 - Service: Instantáneas de volumen (VSS) - Unknown owner - C:\WINDOWS\System32\vssvc.exe
O23 - Service: Adaptador de rendimiento de WMI (WmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\wmiapsrv.exe
O23 - Service: Servicio de uso compartido de red del Reproductor de Windows Media (WMPNetworkSvc) - Unknown owner - C:\Archivos de programa\Windows Media Player\WMPNetwk.exe
--
End of file - 7947 bytes

Saludos y espero su ayuda.

[Locutus]

El Log esta limpio, me parece que entro un virus que fue eliminado pero dejó dañado la conexion a internet, puedes pasarle en WinSockFix

Si no funciona, aplicale el Malwarebyts en un escaneo completo y luego una limpieza completa con el Ccleaner.

[haiden]

Agradezco a RavenxD por haberse tomado el trabajo de postear, y en especial a locutus, el WinSockFix no me ayudo ya que no tenia problemas en el explorer, el problema se originaba al parecer por los trojans (en total 84) algo que me pase raro ya q tengo mucho cuidado al momento de navegar, el antivirus ya esta actualizado y pues el malwarebytes me ayudo al 100%, use el prevx3 pero solo elimino unos cuantos, agradezco a ambas personas por haberme ayudado... a continuacion mi log

Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Versión de la Base de Datos: 4170

Windows 5.1.2600 Service Pack 2
Internet Explorer 7.0.5730.13

04/06/2010 08:53:44 p.m.
mbam-log-2010-06-04 (20-53-44).txt

Tipos de Análisis: Análisis Completo (C:\|D:\|)
Objetos examinados: 230665
Tiempo transcurrido: 45 minuto(s), 2 segundo(s)

Procesos en Memoria Infectados: 0
Módulos de Memoria Infectados: 0
Claves del Registro Infectadas: 0
Valores del Registro Infectados: 0
Elementos de Datos del Registro Infectados: 6
Carpetas Infectadas: 0
Archivos Infectados: 78

Procesos en Memoria Infectados:
(No se han detectado elementos maliciosos)

Módulos de Memoria Infectados:
(No se han detectado elementos maliciosos)

Claves del Registro Infectadas:
(No se han detectado elementos maliciosos)

Valores del Registro Infectados:
(No se han detectado elementos maliciosos)

Elementos de Datos del Registro Infectados:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\DhcpNameServer (Trojan.DNSChanger) -> Data: 93.188.162.167,93.188.166.198 -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\NameServer (Trojan.DNSChanger) -> Data: 93.188.162.167,93.188.166.198 -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{65585d29-d01f-47e0-ad03-adcbbe9f5cdc}\DhcpNameServer (Trojan.DNSChanger) -> Data: 93.188.162.167,93.188.166.198 -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{65585d29-d01f-47e0-ad03-adcbbe9f5cdc}\NameServer (Trojan.DNSChanger) -> Data: 93.188.162.167,93.188.166.198 -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{906816d9-710c-4eb8-9b41-fe51f503b7f0}\DhcpNameServer (Trojan.DNSChanger) -> Data: 93.188.162.167,93.188.166.198 -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{906816d9-710c-4eb8-9b41-fe51f503b7f0}\NameServer (Trojan.DNSChanger) -> Data: 93.188.162.167,93.188.166.198 -> Quarantined and deleted successfully.

Carpetas Infectadas:
(No se han detectado elementos maliciosos)

Archivos Infectados:
C:\Documents and Settings\Rafael\Datos de programa\6087dee9.exe (Trojan.TDSS) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{47428BED-A37F-46F2-B1E6-CED7CB8BB735}\RP135\A0095204.exe (Malware.Tool) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{47428BED-A37F-46F2-B1E6-CED7CB8BB735}\RP157\A0104159.dll (Trojan.TDSS) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{47428BED-A37F-46F2-B1E6-CED7CB8BB735}\RP158\A0104176.dll (Trojan.TDSS) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{47428BED-A37F-46F2-B1E6-CED7CB8BB735}\RP158\A0104188.dll (Trojan.TDSS) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{47428BED-A37F-46F2-B1E6-CED7CB8BB735}\RP158\A0104200.dll (Trojan.TDSS) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{47428BED-A37F-46F2-B1E6-CED7CB8BB735}\RP158\A0104217.dll (Trojan.TDSS) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{47428BED-A37F-46F2-B1E6-CED7CB8BB735}\RP159\A0104231.dll (Trojan.TDSS) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{47428BED-A37F-46F2-B1E6-CED7CB8BB735}\RP159\A0104248.dll (Trojan.TDSS) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{47428BED-A37F-46F2-B1E6-CED7CB8BB735}\RP159\A0104262.dll (Trojan.TDSS) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{47428BED-A37F-46F2-B1E6-CED7CB8BB735}\RP159\A0104275.dll (Trojan.TDSS) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{47428BED-A37F-46F2-B1E6-CED7CB8BB735}\RP159\A0104283.dll (Trojan.TDSS) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{47428BED-A37F-46F2-B1E6-CED7CB8BB735}\RP159\A0105280.exe (Trojan.TDSS) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{47428BED-A37F-46F2-B1E6-CED7CB8BB735}\RP159\A0105284.dll (Trojan.TDSS) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{47428BED-A37F-46F2-B1E6-CED7CB8BB735}\RP159\A0105294.dll (Trojan.TDSS) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{47428BED-A37F-46F2-B1E6-CED7CB8BB735}\RP159\A0105321.exe (Trojan.TDSS) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{47428BED-A37F-46F2-B1E6-CED7CB8BB735}\RP159\A0105325.dll (Trojan.TDSS) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{47428BED-A37F-46F2-B1E6-CED7CB8BB735}\RP124\A0089961.exe (Trojan.Agent.CK) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\ernel32.dll (Trojan.TDSS) -> Delete on reboot.
C:\WINDOWS\system32\drivers\svchost.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\spool\prtprocs\w32x86\c1793gM9.dll (Trojan.TDSS) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\spool\prtprocs\w32x86\CEI179q.dll (Trojan.TDSS) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\spool\prtprocs\w32x86\e1aAAA7k.dll (Trojan.TDSS) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\spool\prtprocs\w32x86\GMY1793.dll (Trojan.TDSS) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\spool\prtprocs\w32x86\iQ5w5.dll (Trojan.TDSS) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\spool\prtprocs\w32x86\M7gM17.dll (Trojan.TDSS) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\spool\prtprocs\w32x86\mYW1u93.dll (Trojan.TDSS) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\spool\prtprocs\w32x86\qG31793.dll (Trojan.TDSS) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\spool\prtprocs\w32x86\qG9iQG.dll (Trojan.TDSS) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\spool\prtprocs\w32x86\wSKUO9o.dll (Trojan.TDSS) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\spool\prtprocs\w32x86\y3c79uO79.dll (Trojan.TDSS) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\spool\prtprocs\w32x86\y7cE17.dll (Trojan.TDSS) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\spool\prtprocs\w32x86\yW3179w.dll (Trojan.TDSS) -> Delete on reboot.
C:\WINDOWS\system32\spool\prtprocs\w32x86\YWSKUO3.dll (Trojan.TDSS) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{C7ECB8D7-DCFC-4273-B6F7-02651BFBF88E}\RP132\A0040931.exe (Trojan.Agent) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{C7ECB8D7-DCFC-4273-B6F7-02651BFBF88E}\RP132\A0040949.exe (Trojan.Agent) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{C7ECB8D7-DCFC-4273-B6F7-02651BFBF88E}\RP132\A0040914.exe (Backdoor.Bot) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{C7ECB8D7-DCFC-4273-B6F7-02651BFBF88E}\RP132\A0040926.exe (Malware.Tool) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{C7ECB8D7-DCFC-4273-B6F7-02651BFBF88E}\RP132\A0040935.exe (Trojan.Agent.CK) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{C7ECB8D7-DCFC-4273-B6F7-02651BFBF88E}\RP132\A0040938.exe (Trojan.Agent) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{C7ECB8D7-DCFC-4273-B6F7-02651BFBF88E}\RP132\A0040940.exe (Trojan.Agent) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{C7ECB8D7-DCFC-4273-B6F7-02651BFBF88E}\RP132\A0040945.exe (Trojan.Agent) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{C7ECB8D7-DCFC-4273-B6F7-02651BFBF88E}\RP132\A0040946.exe (Malware.Packer.Gen) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{C7ECB8D7-DCFC-4273-B6F7-02651BFBF88E}\RP132\A0040947.exe (Malware.Packer.Gen) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{C7ECB8D7-DCFC-4273-B6F7-02651BFBF88E}\RP132\A0040948.exe (Malware.Packer.Gen) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{C7ECB8D7-DCFC-4273-B6F7-02651BFBF88E}\RP132\A0040953.exe (Trojan.Horst) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{C7ECB8D7-DCFC-4273-B6F7-02651BFBF88E}\RP132\A0040956.exe (Trojan.Horst) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{C7ECB8D7-DCFC-4273-B6F7-02651BFBF88E}\RP132\A0040962.EXE (Trojan.Downloader) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{C7ECB8D7-DCFC-4273-B6F7-02651BFBF88E}\RP132\A0040963.EXE (Trojan.Agent) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{C7ECB8D7-DCFC-4273-B6F7-02651BFBF88E}\RP132\A0040964.EXE (Trojan.Agent) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{C7ECB8D7-DCFC-4273-B6F7-02651BFBF88E}\RP132\A0040965.EXE (Trojan.Downloader) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{C7ECB8D7-DCFC-4273-B6F7-02651BFBF88E}\RP132\A0040966.EXE (Trojan.Downloader) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{C7ECB8D7-DCFC-4273-B6F7-02651BFBF88E}\RP132\A0040967.EXE (Trojan.Agent.CK) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{C7ECB8D7-DCFC-4273-B6F7-02651BFBF88E}\RP132\A0040968.EXE (Trojan.Downloader) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{C7ECB8D7-DCFC-4273-B6F7-02651BFBF88E}\RP132\A0040969.EXE (Trojan.Downloader) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{C7ECB8D7-DCFC-4273-B6F7-02651BFBF88E}\RP143\A0043736.exe (Malware.Packer.Gen) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{C7ECB8D7-DCFC-4273-B6F7-02651BFBF88E}\RP143\A0043754.EXE (Trojan.Agent.CK) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{C7ECB8D7-DCFC-4273-B6F7-02651BFBF88E}\RP143\A0043715.exe (Backdoor.Bot) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{C7ECB8D7-DCFC-4273-B6F7-02651BFBF88E}\RP143\A0043717.exe (Malware.Tool) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{C7ECB8D7-DCFC-4273-B6F7-02651BFBF88E}\RP143\A0043722.exe (Trojan.Agent.CK) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{C7ECB8D7-DCFC-4273-B6F7-02651BFBF88E}\RP143\A0043726.exe (Trojan.Agent) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{C7ECB8D7-DCFC-4273-B6F7-02651BFBF88E}\RP143\A0043731.exe (Trojan.Agent) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{C7ECB8D7-DCFC-4273-B6F7-02651BFBF88E}\RP143\A0043733.exe (Trojan.Agent) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{C7ECB8D7-DCFC-4273-B6F7-02651BFBF88E}\RP143\A0043735.exe (Malware.Packer.Gen) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{C7ECB8D7-DCFC-4273-B6F7-02651BFBF88E}\RP143\A0043737.exe (Malware.Packer.Gen) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{C7ECB8D7-DCFC-4273-B6F7-02651BFBF88E}\RP143\A0043738.exe (Trojan.Agent) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{C7ECB8D7-DCFC-4273-B6F7-02651BFBF88E}\RP143\A0043739.exe (Trojan.Agent) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{C7ECB8D7-DCFC-4273-B6F7-02651BFBF88E}\RP143\A0043743.exe (Trojan.Horst) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{C7ECB8D7-DCFC-4273-B6F7-02651BFBF88E}\RP143\A0043746.exe (Trojan.Horst) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{C7ECB8D7-DCFC-4273-B6F7-02651BFBF88E}\RP143\A0043752.EXE (Trojan.Downloader) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{C7ECB8D7-DCFC-4273-B6F7-02651BFBF88E}\RP143\A0043753.EXE (Trojan.Downloader) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{C7ECB8D7-DCFC-4273-B6F7-02651BFBF88E}\RP143\A0043755.EXE (Trojan.Downloader) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{C7ECB8D7-DCFC-4273-B6F7-02651BFBF88E}\RP143\A0043756.EXE (Trojan.Downloader) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{C7ECB8D7-DCFC-4273-B6F7-02651BFBF88E}\RP143\A0043757.EXE (Trojan.Agent) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{C7ECB8D7-DCFC-4273-B6F7-02651BFBF88E}\RP143\A0043758.EXE (Trojan.Agent) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{C7ECB8D7-DCFC-4273-B6F7-02651BFBF88E}\RP143\A0043759.EXE (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\WINDOWS\Tasks\MSWD-6087dee9.job (Trojan.DNSChanger) -> Quarantined and deleted successfully.
C:\WINDOWS\Tasks\MSWD-7d480f4b.job (Trojan.DNSChanger) -> Quarantined and deleted successfully.

[RavenxD]

Ok haiden, cuando quieras... entonces...

SOLUCIONADO! :)