gracias pero indagando en mas foros llegue a conseguir el programa
Look2Me-Destroyer V1.0.12

Scanning for infected files.....
Scan started at 07/06/2006 01:44:20 p.m.

Infected! C:\WINDOWS\system32\ir0ml5d11.dll
Infected! C:\WINDOWS\system32\ir0ml5d11.dll
Infected! C:\WINDOWS\system32\irpml5711.dll
Infected! C:\WINDOWS\system32\j06mlaj11do.dll
Infected! C:\WINDOWS\system32\lvjs0917e.dll
Infected! C:\WINDOWS\system32\n0r2la9o1d.dll
Infected! C:\WINDOWS\system32\q4rq0e95eh.dll
Infected! C:\WINDOWS\system32\guard.tmp

Attempting to delete infected files...

Attempting to delete: C:\WINDOWS\system32\ir0ml5d11.dll
C:\WINDOWS\system32\ir0ml5d11.dll Deleted successfully!

Attempting to delete: C:\WINDOWS\system32\ir0ml5d11.dll
C:\WINDOWS\system32\ir0ml5d11.dll Deleted successfully!

Attempting to delete: C:\WINDOWS\system32\irpml5711.dll
C:\WINDOWS\system32\irpml5711.dll Deleted successfully!

Attempting to delete: C:\WINDOWS\system32\j06mlaj11do.dll
C:\WINDOWS\system32\j06mlaj11do.dll Deleted successfully!

Attempting to delete: C:\WINDOWS\system32\lvjs0917e.dll
C:\WINDOWS\system32\lvjs0917e.dll Deleted successfully!

Attempting to delete: C:\WINDOWS\system32\n0r2la9o1d.dll
C:\WINDOWS\system32\n0r2la9o1d.dll Deleted successfully!

Attempting to delete: C:\WINDOWS\system32\q4rq0e95eh.dll
C:\WINDOWS\system32\q4rq0e95eh.dll Deleted successfully!

Attempting to delete: C:\WINDOWS\system32\guard.tmp
C:\WINDOWS\system32\guard.tmp Deleted successfully!

Making registry repairs.

Removing: HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\App Management

Removing: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\She ll Extensions\Approved "{477B0D52-9330-47A8-96F2-ECCE167E5A82}"
HKCR\Clsid\{477B0D52-9330-47A8-96F2-ECCE167E5A82}

Removing: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\She ll Extensions\Approved "{51D3C73F-1433-4CF3-ACC9-DC9ADED762EE}"
HKCR\Clsid\{51D3C73F-1433-4CF3-ACC9-DC9ADED762EE}

Removing: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\She ll Extensions\Approved "{2B656399-D9BD-476C-85A9-78A672F4C73F}"
HKCR\Clsid\{2B656399-D9BD-476C-85A9-78A672F4C73F}

Restoring Windows certificates.

Replaced hosts file with default windows hosts file


Restoring SeDebugPrivilege for Administradores - Succeeded

y me dio muy buen resultado gracias por sus sugerencias