Buen día, sorry por tardar… pues te comento que sobre la guía realice el método 1 y el 3 y sigue sin darme internet 
ya no sé que hacer, alguna otra idea?
Saludos cordiales!
Hola @AaronDev
Al tardar mucho en volver, se complica por que no podemos darle un correcto seguimiento a ese equipo.
Volvamos a empezar:
Realiza los siguientes pasos, sin cambiar el orden, en tu caso los vuelves a descargar desde Modo Seguro con Red, para que los tengas actualizados, luego inicias en Modo Normal y los ejecutas.
1.- Desactiva temporalmente tu antivirus y cualquier programa de seguridad. (esto solo cuando estés en Modo Normal)
2.- Descarga a tu escritorio las siguientes herramientas:
3.- Luego respetando el orden:
Malwarebytes
Instalalo y actualizalo. Realiza un Análisis Completo de acuerdo a su Manual.
[color=black][size=2]AdwCleaner[/size][/color]
Ejecutalo.(Clic derecho y selecciona Ejecutar como Administrador). Pulsa en el botón Escanear y espera a que se realice el proceso. Luego pulsa sobre el botón Limpiar. Espera a que se complete. Si te pidiera reiniciar el sistema Aceptas. Guardas el reporte que te aparecerá para copiarlo y pegarlo en tu próxima respuesta. El informe también se puede encontrar en “C:\AdwCleaner\AdwCleaner.txt”
[size=2][color=black]ZHPCleaner[/color][/size]
Siguiendo su manual, lo instalas y ejecutas. Cuando termine, eliminas todo lo que encuentre.
Nota Importante:
En tu próxima respuesta debes pegar los reportes de Malwarebytes, AdwCleaner y ZHPCleaner.
Guía : ¿Como Pegar reportes en el Foro?
Esperamos esos reporte y no olvides comentar como va el problema.
4.- Al finalizar vuelves a ejecutar FSS y nos traes nuevo reporte.
Salu2
Buenas tardes, disculpa la demora no había podido ni encender la pc… por acá te dejo los reportes
´Mbar:
Malwarebytes Anti-Rootkit BETA 1.10.3.1001
www.malwarebytes.org
Database version:
main: v2017.10.25.11
rootkit: v2017.10.14.01
Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 11.0.9600.18537
Aaron :: AVD-HP [administrator]
23/02/2019 12:32:21 p.m.
mbar-log-2019-02-23 (12-32-21).txt
Scan type: Quick scan
Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken
Scan options disabled:
Objects scanned: 456397
Time elapsed: 51 minute(s), 35 second(s)
Memory Processes Detected: 0
(No malicious items detected)
Memory Modules Detected: 0
(No malicious items detected)
Registry Keys Detected: 0
(No malicious items detected)
Registry Values Detected: 0
(No malicious items detected)
Registry Data Items Detected: 0
(No malicious items detected)
Folders Detected: 0
(No malicious items detected)
Files Detected: 0
(No malicious items detected)
Physical Sectors Detected: 0
(No malicious items detected)
(end)
AdwCleaner:
# -------------------------------
# Malwarebytes AdwCleaner 7.2.7.0
# -------------------------------
# Build: 01-30-2019
# Database: 2019-01-25.2 (Local)
# Support: https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Clean
# -------------------------------
# Start: 02-23-2019
# Duration: 00:00:02
# OS: Windows 7 Home Premium
# Cleaned: 3
# Failed: 2
***** [ Services ] *****
No malicious services cleaned.
***** [ Folders ] *****
No malicious folders cleaned.
***** [ Files ] *****
No malicious files cleaned.
***** [ DLL ] *****
No malicious DLLs cleaned.
***** [ WMI ] *****
No malicious WMI cleaned.
***** [ Shortcuts ] *****
No malicious shortcuts cleaned.
***** [ Tasks ] *****
No malicious tasks cleaned.
***** [ Registry ] *****
Deleted HKU\S-1-5-80-997390408-2153310517-3119169589-2253446180-2226563786\Software\Microsoft\Internet Explorer\SearchScopes\{d43b3890-80c7-4010-a95d-1e77b5924dc3}
Deleted HKU\S-1-5-80-425977601-1203083412-1631309457-2457533047-3321749933\Software\Microsoft\Internet Explorer\SearchScopes\{d43b3890-80c7-4010-a95d-1e77b5924dc3}
Deleted HKU\S-1-5-80-3880006512-4290199581-1648723128-3569869737-3631323133\Software\Microsoft\Internet Explorer\SearchScopes\{d43b3890-80c7-4010-a95d-1e77b5924dc3}
***** [ Chromium (and derivatives) ] *****
Not Deleted Facemoods
Not Deleted Panda Safe Web
***** [ Chromium URLs ] *****
No malicious Chromium URLs cleaned.
***** [ Firefox (and derivatives) ] *****
No malicious Firefox entries cleaned.
***** [ Firefox URLs ] *****
No malicious Firefox URLs cleaned.
*************************
[+] Delete Tracing Keys
[+] Reset Winsock
*************************
AdwCleaner[S00].txt - [1792 octets] - [16/01/2019 22:20:59]
AdwCleaner[C00].txt - [1866 octets] - [16/01/2019 22:21:32]
AdwCleaner[S01].txt - [1962 octets] - [23/02/2019 13:33:10]
########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C01].txt ##########
FSS:
Farbar Service Scanner Version: 27-01-2016
Ran by Aaron (administrator) on 23-02-2019 at 14:18:53
Running from "C:\Users\Aaron\Desktop"
Microsoft Windows 7 Home Premium Service Pack 1 (X64)
Boot Mode: Normal
****************************************************************
Internet Services:
============
Connection Status:
==============
Localhost is accessible.
There is no connection to network.
Attempt to access Google IP returned error. Google IP is unreachable
Attempt to access Google.com returned error: Other errors
Attempt to access Yahoo.com returned error: Other errors
Windows Firewall:
=============
Firewall Disabled Policy:
==================
System Restore:
============
System Restore Policy:
========================
Action Center:
============
Windows Update:
============
Windows Autoupdate Disabled Policy:
============================
Windows Defender:
==============
Other Services:
==============
File Check:
========
C:\Windows\System32\nsisvc.dll => File is digitally signed
C:\Windows\System32\drivers\nsiproxy.sys => File is digitally signed
C:\Windows\System32\dhcpcore.dll => File is digitally signed
C:\Windows\System32\drivers\afd.sys => File is digitally signed
C:\Windows\System32\drivers\tdx.sys => File is digitally signed
C:\Windows\System32\Drivers\tcpip.sys => File is digitally signed
C:\Windows\System32\dnsrslvr.dll => File is digitally signed
C:\Windows\System32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\System32\mpssvc.dll => File is digitally signed
C:\Windows\System32\bfe.dll => File is digitally signed
C:\Windows\System32\drivers\mpsdrv.sys => File is digitally signed
C:\Windows\System32\SDRSVC.dll => File is digitally signed
C:\Windows\System32\vssvc.exe => File is digitally signed
C:\Windows\System32\wscsvc.dll => File is digitally signed
C:\Windows\System32\wbem\WMIsvc.dll => File is digitally signed
C:\Windows\System32\wuaueng.dll => File is digitally signed
C:\Windows\System32\qmgr.dll => File is digitally signed
C:\Windows\System32\es.dll => File is digitally signed
C:\Windows\System32\cryptsvc.dll => File is digitally signed
C:\Program Files\Windows Defender\MpSvc.dll => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
**** End of log ****Sigue sin funcionar, quise restaurar el sistema y no se logró, ocurrió un error y no se pudo realizar la restauración a una fecha anterior…
ZHPCleaner.txt (169,8 KB)
Hola @AaronDev:
Estuve colocando tus reportes en el tema para que sea mas fácil verlos, salvo el de ZHPCleaner que era muy largo, te estas re-infectando, por ello nunca se acaba con el problema.
Salu2.