downloder.banload.apjf ?

[fvargas23510]

can you see if anything else is infected?

[Aleksandra]

Execute the script in AVZ:

begin
 ClearHostsFile;
 RegKeyIntParamWrite('HKLM','SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer','NoDriveTypeAutoRun', 221);
 DeleteFile('0.exe');
ExecuteWizard('TSW', 3, 3, true);
ExecuteSysClean;
RebootWindows(true);
end.

Attach a new virusinfo_syscheck.zip.

[fvargas23510]

Thank you so much for your time

[Aleksandra]

Please open new text file in Editor. Copy follow text into it:

# Copyright (c) 1993-1999 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host

127.0.0.1 localhost

Switch a File type from TEXT to ALL FILES.

Save the file as:

C:\windows\system32\drivers\etc\hosts

Attention: this file has not any extension!

After that attach a new virusinfo_sysheck.zip.

[fvargas23510]

hope i did this right

[Numb]

it seems that you've missed some of Aleksandra's instructions. But It seems to me also that your hosts file wasn't modified by malware but by this PC's administrator in order to block some undesirable sites. It's not the best way to do that but it could also work. If you want to fix your hosts file, just execute the script:

begin
ClearHostsFile;
end.

Besides, I see nothing harmful in your log.

[fvargas23510]

I am very greatful you guys provide this service. Right on and thanks alot