Puedo borrar el amvo.exe del autorun con el cccleaner sin crear ningun tipo de conflictos y poder ejecutar mis queridos c: y D:

Hola bienvenido(a) al foro para eliminar amvo.exe tienes que realizar lo siguiente:

Apaga "Restaurar Sistema"

Descarga estas herramientas y actualiza superantispyware (pero no las ejecutarlas aún).

- Flash_Disinfector.exe
- SUPERAntiSpyware.
- Ccleaner.
- drweb cure (manual)

Reinicia e inicia en "Modo a prueba de fallos" (modo seguro)

Ejecuta Flash_Disinfector.exe en tu PC.

Al terminar haz un escaneo general del sistema con SUPERAntiSpware y despues de terminar con ello realizas un escaneo con Dr. web cure(regresas con el reporte de este último).

Ejecute CCleaner usando primero su opción de "Limpiador" para borrar cookies, temporales de Internet y todos los archivos que este te muestre como obsoletos, y luego usa su opción de "Registro" para limpiar todo el registro de Windows (haciendo copia de seguridad).

Reinicia y comprobar el sistema ademas de realizar un escaneo con:

.- Ewido (no olvides darle en la opción REMOVE INFECTIONS) dudas sobre este te lees el manual de ewido regresas con su reporte pero no olvides darle en remove infections.

- Kaspersky Online Scanner cualquier duda sobre este último lees su manual y pegas el reporte que te da de resultado.

Regresas y nos comentas.

Saludos

Saludos

No puedo reiniciar la computadora a prueba de fallos (safe mode) y me lanza a ejecutar el windos normal.

Que puedo hacer frente a esto.

Saludos

Para solucionar dicho problema has lo indicado en: ¿Por qué Windows no inicia en Modo Seguro (Modo a prueba de fallos)?.

Luego continuas con los demas pasos, y si nada de lo que te doy en aquel enlace funciona omite ese paso y realiza todo en modo normal.

Al responder no olvides decirme en que modo finalmente realizaste los pasos, regresas con lo pedido.

Saludos

Saludos,

Los pasos enviados para reiniciar en modo seguro no funcionaron, ejecuté todos los pasos en modo normal y se los realizaron con éxito .

Reportes

Dr. Web Cure

d.Com c:/ Trojan.MulDrop.6474 Deleted
Autorun.inf c:/ Win32.HLLW.Autoruner.1215 Deleted
Jz.dll c:/Documents and Settings/Gonzalo/Local Settings/Temp Trojan.Nsanti.Packed Deleted
Slun.dll c:/Documents and Settings/Gonzalo/Local Settings/Temp Trojan.Nsanti.Packed Deleted
Ge.dll c:/Documents and Settings/Gonzalo/Local Settings/Temp
Trojan.Nsanti.Packed Deleted
Scanresults.stg c:/Documents and Settings/Gonzalo/Application Data/AntiSpyware Probably MACRO.Virus Incurable.Deleted.
Autorun.inf d:/ Win32.HLLW.Autoruner.1215 Deleted
d.Com c:/ Trojan.MulDrop.6474 Deleted

AVG Anti-Spyware 7.5 (Ewido)

D:\Chalo Documents\Downloads\Lime Wire Downloads\anti trojan elite register.zip/Setup.exe -> Not-A-Virus.Adware.Agent : No action taken.
D:\Chalo Documents\Downloads\Lime Wire Downloads\prevxcsi license.zip/Setup.exe -> Not-A-Virus.Adware.Agent : No action taken.
D:\Chalo Documents\Downloads\PC Doctor 5\PC_Tools_Spyware_Doctor_5.0.rar/keygen.exe -> Not-A-Virus.Adware.Virtumonde : No action taken.
:mozilla.6:C:\Documents and Settings\Gonzalo\Application Data\Mozilla\Firefox\Profiles\1hnk28rg.default\coo kies.txt -> TrackingCookie.Doubleclick : No action taken.
:mozilla.22:C:\Documents and Settings\Gonzalo\Application Data\Mozilla\Firefox\Profiles\1hnk28rg.default\coo kies.txt -> TrackingCookie.Netflame : No action taken.
:mozilla.23:C:\Documents and Settings\Gonzalo\Application Data\Mozilla\Firefox\Profiles\1hnk28rg.default\coo kies.txt -> TrackingCookie.Netflame : No action taken.

Kaspersky Online

Saturday, February 02, 2008 3:28:38 PM
Operating System: Microsoft Windows XP Home Edition, Service Pack 2 (Build 2600)
Kaspersky Online Scanner version: 5.0.98.0
Kaspersky Anti-Virus database last update: 2/02/2008
Kaspersky Anti-Virus database records: 545991
Scan Settings
Scan using the following antivirus database extended
Scan Archives true
Scan Mail Bases true
Scan Target Critical Areas
C:\WINDOWS
C:\DOCUME~1\Gonzalo\LOCALS~1\Temp\
Scan Statistics
Total number of scanned objects 26802
Number of viruses found 1
Number of infected objects 1
Number of suspicious objects 0
Duration of the scan process 00:52:26

Infected Object Name Virus Name Last Action
C:\WINDOWS\system32\config\system.LOG Object is locked skipped
C:\WINDOWS\system32\config\software.LOG Object is locked skipped
C:\WINDOWS\system32\config\default.LOG Object is locked skipped
C:\WINDOWS\system32\config\SECURITY Object is locked skipped
C:\WINDOWS\system32\config\SAM Object is locked skipped
C:\WINDOWS\system32\config\SAM.LOG Object is locked skipped
C:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped
C:\WINDOWS\system32\config\SYSTEM Object is locked skipped
C:\WINDOWS\system32\config\SOFTWARE Object is locked skipped
C:\WINDOWS\system32\config\DEFAULT Object is locked skipped
C:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\Internet.evt Object is locked skipped
C:\WINDOWS\system32\config\Antivirus.Evt Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DAT A Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MA P Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MA P Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP Object is locked skipped
C:\WINDOWS\system32\CatRoot2\tmp.edb Object is locked skipped
C:\WINDOWS\system32\CatRoot2\edb.log Object is locked skipped
C:\WINDOWS\system32\h323log.txt Object is locked skipped
C:\WINDOWS\system32\help.exe.tmp Infected: Trojan-PSW.Win32.OnLineGames.ozf skipped
C:\WINDOWS\Temp\_avast4_\Webshlock.txt Object is locked skipped
C:\WINDOWS\Temp\Perflib_Perfdata_5a0.dat Object is locked skipped
C:\WINDOWS\Temp\Perflib_Perfdata_3a8.dat Object is locked skipped
C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped
C:\WINDOWS\Sti_Trace.log Object is locked skipped
C:\WINDOWS\wiaservc.log Object is locked skipped
C:\WINDOWS\wiadebug.log Object is locked skipped
C:\WINDOWS\SchedLgU.Txt Object is locked skipped
C:\WINDOWS\ModemLog_Lucent Win Modem.txt Object is locked skipped
C:\WINDOWS\$_hpcst$.hpc Object is locked skipped
C:\WINDOWS\WindowsUpdate.log Object is locked skipped
C:\WINDOWS\SoftwareDistribution\ReportingEvents.lo g Object is locked skipped
C:\WINDOWS\SoftwareDistribution\EventCache\{F8094F 07-FFB8-4D83-9A55-A784E77766E2}.bin Object is locked skipped
C:\DOCUME~1\Gonzalo\LOCALS~1\Temp\WCESCOMM.LOG Object is locked skipped
Scan process completed.

----------------------------------------------------------------------
Pude ya abrir c: y d: pero parece que sigo con la infeccion, saludos y les dejo los reportes para analisis y decirme que hago ahora.

Saludos

HOLA chalo01059 te has confundido has realizado el escaneo con AVG Anti-Spyware 7.5 yo me refiero al escaneo online lee por favor el manual de Ewido.

Además has realizado el escaneo con Kaspersky solo a las areas criticas tienes que hacerlo a toda tu pc, por favor no olvides leer el manual.

Realiza correctamente los escaneos online y regresas con el reporte de Kaspersky para las siguientes instrucciones.

Saludos

PD Lo importante que el problema ha mejorado pero para ver la magnitud de toda la infeccion(lo que aún queda) tienes que realizarlos en toda tu pc el escaneo con kaspersky pues los malware no solo estan el las areas críticas.

con el permiso debido elimina este archivo
C:\WINDOWS\system32\help.exe.tmp si no se deja descarga Fileassassin haz un nuevo scan con kaspersky y pegas el reproete.
salu2.

Listo !!! Lamento la confusion

Aqui estan los reportes nuevamente

REPORTES

EWIDO

__________________________________________________
ewido anti-spyware online scanner
http://www.ewido.net
__________________________________________________


Name: TrackingCookie.Netflame
Path: C:\Documents and Settings\Gonzalo\Cookies\gonzalo@ssl-hints.netflame[2].txt
Risk: Medium

Name: TrackingCookie.Tradedoubler
Path: :mozilla.26:C:\Documents and Settings\Gonzalo\Application Data\Mozilla\Firefox\Profiles\1hnk28rg.default\coo kies.txt
Risk: Medium

Name: TrackingCookie.Tradedoubler
Path: :mozilla.27:C:\Documents and Settings\Gonzalo\Application Data\Mozilla\Firefox\Profiles\1hnk28rg.default\coo kies.txt
Risk: Medium

Name: TrackingCookie.Netflame
Path: :mozilla.39:C:\Documents and Settings\Gonzalo\Application Data\Mozilla\Firefox\Profiles\1hnk28rg.default\coo kies.txt
Risk: Medium

Name: TrackingCookie.Netflame
Path: :mozilla.40:C:\Documents and Settings\Gonzalo\Application Data\Mozilla\Firefox\Profiles\1hnk28rg.default\coo kies.txt
Risk: Medium

Name: Not-A-Virus.Adware.Agent
Path: D:\Chalo Documents\Downloads\Lime Wire Downloads\anti trojan elite register.zip/Setup.exe
Risk: Low

Name: Not-A-Virus.Adware.Agent
Path: D:\Chalo Documents\Downloads\Lime Wire Downloads\prevxcsi license.zip/Setup.exe
Risk: Low

Name: Not-A-Virus.Adware.Virtumonde
Path: D:\Chalo Documents\Downloads\PC Doctor 5\PC_Tools_Spyware_Doctor_5.0.rar/keygen.exe
Risk: Low





Kaspersky Report

Saturday, February 02, 2008 6:54:58 PM
Operating System: Microsoft Windows XP Home Edition, Service Pack 2 (Build 2600)
Kaspersky Online Scanner version: 5.0.98.0
Kaspersky Anti-Virus database last update: 2/02/2008
Kaspersky Anti-Virus database records: 545991
Scan Settings
Scan using the following antivirus database extended
Scan Archives true
Scan Mail Bases true
Scan Target My Computer
A:\
C:\
D:\
E:\
F:\
G:\
H:\
I:\
J:\
K:\
L:\
Scan Statistics
Total number of scanned objects 73518
Number of viruses found 4
Number of infected objects 8
Number of suspicious objects 0
Duration of the scan process 03:04:56

Infected Object Name Virus Name Last Action
C:\WINDOWS\system32\config\system.LOG Object is locked skipped
C:\WINDOWS\system32\config\software.LOG Object is locked skipped
C:\WINDOWS\system32\config\default.LOG Object is locked skipped
C:\WINDOWS\system32\config\SECURITY Object is locked skipped
C:\WINDOWS\system32\config\SAM Object is locked skipped
C:\WINDOWS\system32\config\SAM.LOG Object is locked skipped
C:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped
C:\WINDOWS\system32\config\SYSTEM Object is locked skipped
C:\WINDOWS\system32\config\SOFTWARE Object is locked skipped
C:\WINDOWS\system32\config\DEFAULT Object is locked skipped
C:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\Internet.evt Object is locked skipped
C:\WINDOWS\system32\config\Antivirus.Evt Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DAT A Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MA P Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MA P Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP Object is locked skipped
C:\WINDOWS\system32\CatRoot2\tmp.edb Object is locked skipped
C:\WINDOWS\system32\CatRoot2\edb.log Object is locked skipped
C:\WINDOWS\system32\h323log.txt Object is locked skipped
C:\WINDOWS\system32\help.exe.tmp Infected: Trojan-PSW.Win32.OnLineGames.ozf skipped
C:\WINDOWS\Temp\_avast4_\Webshlock.txt Object is locked skipped
C:\WINDOWS\Temp\Perflib_Perfdata_5a0.dat Object is locked skipped
C:\WINDOWS\Temp\Perflib_Perfdata_3a8.dat Object is locked skipped
C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped
C:\WINDOWS\Sti_Trace.log Object is locked skipped
C:\WINDOWS\wiaservc.log Object is locked skipped
C:\WINDOWS\wiadebug.log Object is locked skipped
C:\WINDOWS\SchedLgU.Txt Object is locked skipped
C:\WINDOWS\ModemLog_Lucent Win Modem.txt Object is locked skipped
C:\WINDOWS\$_hpcst$.hpc Object is locked skipped
C:\WINDOWS\WindowsUpdate.log Object is locked skipped
C:\WINDOWS\SoftwareDistribution\ReportingEvents.lo g Object is locked skipped
C:\WINDOWS\SoftwareDistribution\EventCache\{F8094F 07-FFB8-4D83-9A55-A784E77766E2}.bin Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Windows NT\MSFax\ActivityLog\InboxLOG.txt Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Windows NT\MSFax\ActivityLog\OutboxLOG.txt Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\LocalService\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\LocalService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\Gonzalo\ntuser.dat Object is locked skipped
C:\Documents and Settings\Gonzalo\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\Gonzalo\Local Settings\Temp\WCESCOMM.LOG Object is locked skipped
C:\Documents and Settings\Gonzalo\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\Gonzalo\Local Settings\History\History.IE5\MSHist012008020220080 203\index.dat Object is locked skipped
C:\Documents and Settings\Gonzalo\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\Gonzalo\Local Settings\Temporary Internet Files\Content.IE5\ALAUGEPQ\onlinescanner[1].sig Object is locked skipped
C:\Documents and Settings\Gonzalo\Local Settings\Temporary Internet Files\AntiPhishing\B3BB5BBA-E7D5-40AB-A041-A5B1C0B26C8F.dat Object is locked skipped
C:\Documents and Settings\Gonzalo\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\Gonzalo\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\Gonzalo\Local Settings\Application Data\Microsoft\Feeds Cache\index.dat Object is locked skipped
C:\Documents and Settings\Gonzalo\Local Settings\Application Data\Mozilla\Firefox\Profiles\1hnk28rg.default\Cac he\_CACHE_MAP_ Object is locked skipped
C:\Documents and Settings\Gonzalo\Local Settings\Application Data\Mozilla\Firefox\Profiles\1hnk28rg.default\Cac he\_CACHE_001_ Object is locked skipped
C:\Documents and Settings\Gonzalo\Local Settings\Application Data\Mozilla\Firefox\Profiles\1hnk28rg.default\Cac he\_CACHE_002_ Object is locked skipped
C:\Documents and Settings\Gonzalo\Local Settings\Application Data\Mozilla\Firefox\Profiles\1hnk28rg.default\Cac he\_CACHE_003_ Object is locked skipped
C:\Documents and Settings\Gonzalo\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\Gonzalo\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\SUPERAN TISPYWARE.LOG Object is locked skipped
C:\Documents and Settings\Gonzalo\Application Data\Mozilla\Firefox\Profiles\1hnk28rg.default\par ent.lock Object is locked skipped
C:\Documents and Settings\Gonzalo\Application Data\Mozilla\Firefox\Profiles\1hnk28rg.default\his tory.dat Object is locked skipped
C:\Documents and Settings\Gonzalo\Application Data\Mozilla\Firefox\Profiles\1hnk28rg.default\cer t8.db Object is locked skipped
C:\Documents and Settings\Gonzalo\Application Data\Mozilla\Firefox\Profiles\1hnk28rg.default\key 3.db Object is locked skipped
C:\Documents and Settings\Gonzalo\Application Data\Mozilla\Firefox\Profiles\1hnk28rg.default\for mhistory.dat Object is locked skipped
C:\Documents and Settings\Gonzalo\Application Data\Mozilla\Firefox\Profiles\1hnk28rg.default\sea rch.sqlite Object is locked skipped
C:\Documents and Settings\Gonzalo\Application Data\Mozilla\Firefox\Profiles\1hnk28rg.default\url classifier2.sqlite Object is locked skipped
C:\Documents and Settings\Gonzalo\UserData\index.dat Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcrst.dll Object is locked skipped
C:\Program Files\Microsoft SQL Server\MSSQL$MICROSOFTBCM\LOG\ERRORLOG Object is locked skipped
C:\Program Files\Microsoft SQL Server\MSSQL$MICROSOFTBCM\Data\master.mdf Object is locked skipped
C:\Program Files\Microsoft SQL Server\MSSQL$MICROSOFTBCM\Data\mastlog.ldf Object is locked skipped
C:\Program Files\Microsoft SQL Server\MSSQL$MICROSOFTBCM\Data\model.mdf Object is locked skipped
C:\Program Files\Microsoft SQL Server\MSSQL$MICROSOFTBCM\Data\modellog.ldf Object is locked skipped
C:\Program Files\Microsoft SQL Server\MSSQL$MICROSOFTBCM\Data\tempdb.mdf Object is locked skipped
C:\Program Files\Microsoft SQL Server\MSSQL$MICROSOFTBCM\Data\templog.ldf Object is locked skipped
C:\Program Files\Alwil Software\Avast4\DATA\report\Protección residente.txt Object is locked skipped
C:\Program Files\Alwil Software\Avast4\DATA\log\nshield.log Object is locked skipped
C:\Program Files\Alwil Software\Avast4\DATA\log\AshWebSv.ws Object is locked skipped
C:\Program Files\Alwil Software\Avast4\DATA\log\aswMaiSv.log Object is locked skipped
C:\Program Files\Alwil Software\Avast4\DATA\aswResp.dat Object is locked skipped
C:\Program Files\Alwil Software\Avast4\DATA\Avast4.db Object is locked skipped
D:\Chalo Documents\Downloads\Lime Wire Downloads\anti trojan elite register.zip/Setup.exe Infected: not-a-virus:AdWare.Win32.Agent.zk skipped
D:\Chalo Documents\Downloads\Lime Wire Downloads\anti trojan elite register.zip ZIP: infected - 1 skipped
D:\Chalo Documents\Downloads\Lime Wire Downloads\prevxcsi license.zip/Setup.exe Infected: not-a-virus:AdWare.Win32.Agent.zk skipped
D:\Chalo Documents\Downloads\Lime Wire Downloads\prevxcsi license.zip ZIP: infected - 1 skipped
D:\Chalo Documents\Downloads\PC Doctor 5\PC_Tools_Spyware_Doctor_5.0.rar/keygen.exe Infected: not-a-virus:AdWare.Win32.Virtumonde.edv skipped
D:\Chalo Documents\Downloads\PC Doctor 5\PC_Tools_Spyware_Doctor_5.0.rar/crack.exe Infected: Trojan.Win32.Dialer.yz skipped
D:\Chalo Documents\Downloads\PC Doctor 5\PC_Tools_Spyware_Doctor_5.0.rar RAR: infected - 2 skipped
Scan process completed.

--------------------------------------------------------------------

Pues si sigo con infeccion ahora que pasos tomo por favor.

Gracias por la ayuda.

Chalo

Hola, espero al terminar el escaneo online con Ewido no hayas olvidado darle en REMOVE INFECTIONS para que elimine todo lo que ha encontrado, ahora realiza lo siguiente:

Descargate OTMoveIt lo guardas en el Escritorio.

• Haz un doble clic sobre OTMoveIt.exe para ejecutarlo.
• Asegurate que este marcado "Unregister Dll's and Ocx's".
• Copia el texto que se encuentra en el cuadrado más abajo, y pega el texto en el marco de izquierdo de OTMoveIt nombrado Paste List of Filas / Folders to be moved.

• Haz clic en MoveIt! Para lanzar la supresión.
• Cuando el resultado aparece en el marco Results, haz clic enExit.
• Reinicia el PC (Este paso es muy importante)

Envía el informe (reporte) de OTMoveIt situado sobre C: \ _ OTMoveIt\MovedFiles\********_******.txt (Donde sale "********_******" es el "date_time")


Luego de ello realizas los siguientes pasos:


Descarga e instala los siguientes programas(aún no los ejecutes):

- VundoFix.
- Delpsguard(esta en la parte final del link que te doy).
- ATF-Cleaner

Posteriormente realiza lo siguiente:

Apaga Restaurar sistema.

Inicias en modo a prueba de fallos .

Ejecutas VundoFix(no olvides regresar con su reporte) siguiendo estas instrucciones:

Ejecutas Delpsguard (no olvides regresar con su reporte).

Ejecutas ATF- Cleaner de la siguiente manera:

• Dale doble clic a ATF-Cleaner
• Marca la Casilla de "Select All."
• Para eliminar da clic en "Empty Selected"
• Por último, dale clic a Exit

Finalmente reinicias en modo normal y realizas un nuevo escaneo con Kaspersky online y regresas con su nuevo reporte.

Saludos

Saludos,

Reporte OTMoveIT

C:\WINDOWS\system32\help.exe.tmp moved successfully.
File/Folder D:\Chalo Documents\Downloads\Lime Wire Downloads\anti trojan elite register.zip not found.
File/Folder D:\Chalo Documents\Downloads\Lime Wire Downloads\prevxcsi license.zip not found.
File/Folder D:\Chalo Documents\Downloads\PC Doctor 5\PC_Tools_Spyware_Doctor_5.0.rar not found.

OTMoveIt2 v1.0.17 log created on 02022008_230341

-----------------------------------------------------------------------

Para los otros pasos sigo sin poder poner en windows en modo seguro !!