bueno aqui estoy de nuevo lugo de luchar un rato aunque creo que en vano.
borre los archivos siempre con shift y luego borre cookies y registro.
despues analice con kaspersky por las dudas y me encontro muchas infecciones,ahora lo corri con la configuracion que ustedes recomiendan.
aqui les mando el reporte:
-------------------------------------------------------------------------------
KASPERSKY ONLINE SCANNER REPORT
Friday, January 05, 2007 9:52:12 PM
Operating System: Microsoft Windows XP Professional, Service Pack 2 (Build 2600)
Kaspersky Online Scanner version: 5.0.83.0
Kaspersky Anti-Virus database last update: 6/01/2007
Kaspersky Anti-Virus database records: 256315
-------------------------------------------------------------------------------

Scan Settings:
Scan using the following antivirus database: extended
Scan Archives: true
Scan Mail Bases: true

Scan Target - My Computer:
A:\
C:\
D:\

Scan Statistics:
Total number of scanned objects: 81859
Number of viruses found: 28
Number of infected objects: 67 / 0
Number of suspicious objects: 1
Duration of the scan process: 01:08:49

Infected Object Name / Virus Name / Last Action
C:\Archivos de programa\Archivos comunes\Symantec Shared\AntiSpam\Log\Spam.log Object is locked skipped
C:\Archivos de programa\Archivos comunes\Symantec Shared\SNDALRT.log Object is locked skipped
C:\Archivos de programa\Archivos comunes\Symantec Shared\SNDCON.log Object is locked skipped
C:\Archivos de programa\Archivos comunes\Symantec Shared\SNDDBG.log Object is locked skipped
C:\Archivos de programa\Archivos comunes\Symantec Shared\SNDFW.log Object is locked skipped
C:\Archivos de programa\Archivos comunes\Symantec Shared\SNDIDS.log Object is locked skipped
C:\Archivos de programa\Archivos comunes\Symantec Shared\SNDSYS.log Object is locked skipped
C:\Archivos de programa\Archivos comunes\Symantec Shared\SPPolicy.log Object is locked skipped
C:\Archivos de programa\Archivos comunes\Symantec Shared\SPStart.log Object is locked skipped
C:\Archivos de programa\Archivos comunes\Symantec Shared\SPStop.log Object is locked skipped
C:\Archivos de programa\eMule\Incoming\pianoteq_trial updated-fixed 12-2006.rar/setup.exe Infected: P2P-Worm.Win32.Kapucen.b skipped
C:\Archivos de programa\eMule\Incoming\pianoteq_trial updated-fixed 12-2006.rar RAR: infected - 1 skipped
C:\Archivos de programa\Norton Internet Security\Norton AntiVirus\AVApp.log Object is locked skipped
C:\Archivos de programa\Norton Internet Security\Norton AntiVirus\AVError.log Object is locked skipped
C:\Archivos de programa\Norton Internet Security\Norton AntiVirus\AVVirus.log Object is locked skipped
C:\Archivos de programa\Norton Internet Security\Norton AntiVirus\Quarantine\05A90A08.exe Infected: Trojan-Downloader.Win32.IstBar.ij skipped
C:\Archivos de programa\Norton Internet Security\Norton AntiVirus\Quarantine\1C376DBF.dll Infected: not-a-virus:AdWare.Win32.BrilliantDigital.3039 skipped
C:\Archivos de programa\Norton Internet Security\Norton AntiVirus\Quarantine\1EE15C87.exe/stream Infected: not-a-virus:AdWare.Win32.404Search.h skipped
C:\Archivos de programa\Norton Internet Security\Norton AntiVirus\Quarantine\1EE15C87.exe NSIS: infected - 1 skipped
C:\Archivos de programa\Norton Internet Security\Norton AntiVirus\Quarantine\1EE15C87.exe CryptFF: infected - 1 skipped
C:\Archivos de programa\Norton Internet Security\Norton AntiVirus\Quarantine\1EE33B1C.dll Infected: Trojan-Downloader.Win32.IstBar.gen skipped
C:\Archivos de programa\Norton Internet Security\Norton AntiVirus\Quarantine\25015542.exe Infected: Trojan-Downloader.Win32.IstBar.ij skipped
C:\Archivos de programa\Norton Internet Security\Norton AntiVirus\Quarantine\254E2D75.dll Infected: not-a-virus:AdWare.Win32.BrilliantDigital.3039 skipped
C:\Archivos de programa\Norton Internet Security\Norton AntiVirus\Quarantine\265B14DF.htm Infected: Exploit.HTML.Mht skipped
C:\Archivos de programa\Norton Internet Security\Norton AntiVirus\Quarantine\29E07D58.exe Infected: Trojan.Win32.Small.cy skipped
C:\Archivos de programa\Norton Internet Security\Norton AntiVirus\Quarantine\29E42754.dll Infected: Trojan-Downloader.Win32.Dyfuca.dt skipped
C:\Archivos de programa\Norton Internet Security\Norton AntiVirus\Quarantine\2A721886.dll Infected: Trojan-Downloader.Win32.Dyfuca.gen skipped
C:\Archivos de programa\Norton Internet Security\Norton AntiVirus\Quarantine\2A721886.exe Infected: Trojan-Downloader.Win32.Dyfuca.ei skipped
C:\Archivos de programa\Norton Internet Security\Norton AntiVirus\Quarantine\2C21273E.dll Infected: not-a-virus:AdWare.Win32.Altnet.a skipped
C:\Archivos de programa\Norton Internet Security\Norton AntiVirus\Quarantine\2CC7212C.exe Infected: P2P-Worm.Win32.Tibick.d skipped
C:\Archivos de programa\Norton Internet Security\Norton AntiVirus\Quarantine\31772206.dll Infected: not-a-virus:AdWare.Win32.Altnet.a skipped
C:\Archivos de programa\Norton Internet Security\Norton AntiVirus\Quarantine\334738A7.exe Infected: not-a-virus:AdWare.Win32.SurfAccuracy.d skipped
C:\Archivos de programa\Norton Internet Security\Norton AntiVirus\Quarantine\36025484.exe Infected: not-a-virus:AdWare.Win32.SurfAccuracy.c skipped
C:\Archivos de programa\Norton Internet Security\Norton AntiVirus\Quarantine\3F950723.exe Infected: Trojan.Win32.Small.cy skipped
C:\Archivos de programa\Norton Internet Security\Norton AntiVirus\Quarantine\41921083.exe Infected: Trojan-Downloader.Win32.IstBar.jm skipped
C:\Archivos de programa\Norton Internet Security\Norton AntiVirus\Quarantine\46AB41FF.dll Infected: not-a-virus:AdWare.Win32.Altnet.a skipped
C:\Archivos de programa\Norton Internet Security\Norton AntiVirus\Quarantine\46AB41FF.exe Infected: not-a-virus:AdWare.Win32.Altnet.a skipped
C:\Archivos de programa\Norton Internet Security\Norton AntiVirus\Quarantine\46AE6BFC.dll Infected: not-a-virus:AdWare.Win32.Altnet.a skipped
C:\Archivos de programa\Norton Internet Security\Norton AntiVirus\Quarantine\46AE6BFC.exe Infected: not-a-virus:AdWare.Win32.Altnet.a skipped
C:\Archivos de programa\Norton Internet Security\Norton AntiVirus\Quarantine\46B215F8.dll Infected: not-a-virus:AdWare.Win32.Altnet.j skipped
C:\Archivos de programa\Norton Internet Security\Norton AntiVirus\Quarantine\46B215F8.exe Infected: Trojan-Downloader.Win32.IstBar.ll skipped
C:\Archivos de programa\Norton Internet Security\Norton AntiVirus\Quarantine\46B53FF4.exe/stream Infected: not-a-virus:AdWare.Win32.404Search.h skipped
C:\Archivos de programa\Norton Internet Security\Norton AntiVirus\Quarantine\46B53FF4.exe NSIS: infected - 1 skipped
C:\Archivos de programa\Norton Internet Security\Norton AntiVirus\Quarantine\46B53FF4.exe CryptFF: infected - 1 skipped
C:\Archivos de programa\Norton Internet Security\Norton AntiVirus\Quarantine\46B869F1.DLL Infected: not-a-virus:AdWare.Win32.MySearch.e skipped
C:\Archivos de programa\Norton Internet Security\Norton AntiVirus\Quarantine\46B869F1.exe Infected: Trojan-Downloader.Win32.IstBar.gen skipped
C:\Archivos de programa\Norton Internet Security\Norton AntiVirus\Quarantine\46BB13ED.cab/sysdetect.dll Infected: not-a-virus:AdWare.Win32.BrilliantDigital.1007 skipped
C:\Archivos de programa\Norton Internet Security\Norton AntiVirus\Quarantine\46BB13ED.cab CAB: infected - 1 skipped
C:\Archivos de programa\Norton Internet Security\Norton AntiVirus\Quarantine\46BB13ED.cab CryptFF: infected - 1 skipped
C:\Archivos de programa\Norton Internet Security\Norton AntiVirus\Quarantine\46BB13ED.dll Infected: Trojan-Downloader.Win32.Dyfuca.gen skipped
C:\Archivos de programa\Norton Internet Security\Norton AntiVirus\Quarantine\46BB13ED.exe Infected: Trojan-Downloader.Win32.Dyfuca.ei skipped
C:\Archivos de programa\Norton Internet Security\Norton AntiVirus\Quarantine\46BF3DEA.b1f Infected: not-a-virus:AdWare.Win32.SurfAccuracy.d skipped
C:\Archivos de programa\Norton Internet Security\Norton AntiVirus\Quarantine\46C267E6.exe Infected: not-a-virus:AdWare.Win32.SurfAccuracy.c skipped
C:\Archivos de programa\Norton Internet Security\Norton AntiVirus\Quarantine\46C511E2.dll Infected: not-a-virus:AdWare.Win32.SideFind skipped
C:\Archivos de programa\Norton Internet Security\Norton AntiVirus\Quarantine\46C83BDF.dll Infected: not-a-virus:AdWare.Win32.SideFind skipped
C:\Archivos de programa\Norton Internet Security\Norton AntiVirus\Quarantine\46C83BDF.exe Infected: Trojan-Downloader.Win32.IstBar.jm skipped
C:\Archivos de programa\Norton Internet Security\Norton AntiVirus\Quarantine\46CC65DB.dll Infected: not-a-virus:AdWare.Win32.SideFind skipped
C:\Archivos de programa\Norton Internet Security\Norton AntiVirus\Quarantine\46CC65DB.exe Infected: Trojan-Downloader.Win32.IstBar.jm skipped
C:\Archivos de programa\Norton Internet Security\Norton AntiVirus\Quarantine\46CF0FD8.dll Infected: not-a-virus:AdWare.Win32.BrilliantDigital.1007 skipped
C:\Archivos de programa\Norton Internet Security\Norton AntiVirus\Quarantine\4D234C81.dll Infected: Trojan-Downloader.Win32.IstBar.ms skipped
C:\Archivos de programa\Norton Internet Security\Norton AntiVirus\Quarantine\4D894289.dll Infected: not-a-virus:AdWare.Win32.Altnet.a skipped
C:\Archivos de programa\Norton Internet Security\Norton AntiVirus\Quarantine\503D4729.htm Suspicious: Exploit.HTML.Mht skipped
C:\Archivos de programa\Norton Internet Security\Norton AntiVirus\Quarantine\555815B8.dll Infected: not-a-virus:AdWare.Win32.Beginto.c skipped
C:\Archivos de programa\Norton Internet Security\Norton AntiVirus\Quarantine\59197E88.dll Infected: not-a-virus:AdWare.Win32.Altnet.j skipped
C:\Archivos de programa\Norton Internet Security\Norton AntiVirus\Quarantine\67564FF8.dll Infected: Trojan-Downloader.Win32.IstBar.ms skipped
C:\Archivos de programa\Norton Internet Security\Norton AntiVirus\Quarantine\69860D12.exe Infected: not-a-virus:AdWare.Win32.Visua.a skipped
C:\Archivos de programa\Norton Internet Security\Norton AntiVirus\Quarantine\6BEE56AF.dll Infected: Trojan-Downloader.Win32.IstBar.gen skipped
C:\Archivos de programa\Norton Internet Security\Norton AntiVirus\Quarantine\6D63621A.exe Infected: Trojan.Win32.Dialer.eg skipped
C:\Archivos de programa\Norton Internet Security\Norton AntiVirus\Quarantine\7BCA3283.dll Infected: not-a-virus:AdWare.Win32.SideFind skipped
C:\Archivos de programa\Norton Internet Security\Norton AntiVirus\Quarantine\7CB745EC.dll Infected: not-a-virus:AdWare.Win32.Altnet.a skipped
C:\Archivos de programa\Norton Internet Security\Norton AntiVirus\Quarantine\7EC64D8B.DOC Infected: Virus.MSWord.Cap skipped
C:\Archivos de programa\Norton Internet Security\Norton AntiVirus\Quarantine\7ECD2184.DOC Infected: Virus.MSWord.Cap skipped
C:\Documents and Settings\All Users\Datos de programa\avg7\Log\emc.log Object is locked skipped
C:\Documents and Settings\All Users\Datos de programa\Grisoft\Avg7Data\avg7log.log Object is locked skipped
C:\Documents and Settings\All Users\Datos de programa\Grisoft\Avg7Data\avg7log.log.lck Object is locked skipped
C:\Documents and Settings\All Users\Datos de programa\Symantec\Common Client\Confid.log Object is locked skipped
C:\Documents and Settings\All Users\Datos de programa\Symantec\Common Client\Content.log Object is locked skipped
C:\Documents and Settings\All Users\Datos de programa\Symantec\Common Client\Privacy.log Object is locked skipped
C:\Documents and Settings\All Users\Datos de programa\Symantec\Common Client\Restrict.log Object is locked skipped
C:\Documents and Settings\All Users\Datos de programa\Symantec\Common Client\settings.dat Object is locked skipped
C:\Documents and Settings\All Users\Datos de programa\Symantec\Common Client\WebHist.log Object is locked skipped
C:\Documents and Settings\Carolina\Configuración local\Archivos temporales de Internet\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\Carolina\Configuración local\Archivos temporales de Internet\Content.IE5\K22O980K\ADSAdClient31[1].htm Object is locked skipped
C:\Documents and Settings\Carolina\Configuración local\Archivos temporales de Internet\Content.IE5\K22O980K\ADSAdClient31[2].htm Object is locked skipped
C:\Documents and Settings\Carolina\Configuración local\Datos de programa\Microsoft\Messenger\turinieto@hotmail.com \SharingMetadata\Logs\Dfsr.log Object is locked skipped
C:\Documents and Settings\Carolina\Configuración local\Datos de programa\Microsoft\Messenger\turinieto@hotmail.com \SharingMetadata\pending.dat Object is locked skipped
C:\Documents and Settings\Carolina\Configuración local\Datos de programa\Microsoft\Messenger\turinieto@hotmail.com \SharingMetadata\Working\database_7CE4_657A_E465_3 812\dfsr.db Object is locked skipped
C:\Documents and Settings\Carolina\Configuración local\Datos de programa\Microsoft\Messenger\turinieto@hotmail.com \SharingMetadata\Working\database_7CE4_657A_E465_3 812\fsr.log Object is locked skipped
C:\Documents and Settings\Carolina\Configuración local\Datos de programa\Microsoft\Messenger\turinieto@hotmail.com \SharingMetadata\Working\database_7CE4_657A_E465_3 812\fsrtmp.log Object is locked skipped
C:\Documents and Settings\Carolina\Configuración local\Datos de programa\Microsoft\Messenger\turinieto@hotmail.com \SharingMetadata\Working\database_7CE4_657A_E465_3 812\tmp.edb Object is locked skipped
C:\Documents and Settings\Carolina\Configuración local\Datos de programa\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\Carolina\Configuración local\Datos de programa\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\Carolina\Configuración local\Datos de programa\Microsoft\Windows Live Contacts\turinieto@hotmail.com\real\members.stg Object is locked skipped
C:\Documents and Settings\Carolina\Configuración local\Datos de programa\Microsoft\Windows Live Contacts\turinieto@hotmail.com\shadow\members.stg Object is locked skipped
C:\Documents and Settings\Carolina\Configuración local\Historial\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\Carolina\Configuración local\Historial\History.IE5\MSHist0120070105200701 06\index.dat Object is locked skipped
C:\Documents and Settings\Carolina\Configuración local\Temp\~DFBA5D.tmp Object is locked skipped
C:\Documents and Settings\Carolina\Configuración local\Temp\~DFBA74.tmp Object is locked skipped
C:\Documents and Settings\Carolina\Configuración local\Temp\~DFD263.tmp Object is locked skipped
C:\Documents and Settings\Carolina\Configuración local\Temp\~DFD277.tmp Object is locked skipped
C:\Documents and Settings\Carolina\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\Carolina\ntuser.dat Object is locked skipped
C:\Documents and Settings\Carolina\NtUser.dat.LOG Object is locked skipped
C:\Documents and Settings\Carolina\UserData\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Configuración local\Archivos temporales de Internet\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Configuración local\Datos de programa\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\LocalService\Configuración local\Datos de programa\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\LocalService\Configuración local\Historial\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Configuración local\Temp\Archivos temporales de Internet\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Configuración local\Temp\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Configuración local\Temp\Historial\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\ntuser.dat Object is locked skipped
C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\Configuración local\Datos de programa\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\NetworkService\Configuración local\Datos de programa\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked skipped
C:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped
C:\System Volume Information\_restore{19A965BF-4CBB-4C32-B3AB-1A8B840CA1CE}\RP556\A0156116.dll Infected: not-a-virus:AdWare.Win32.RXBar.d skipped
C:\System Volume Information\_restore{19A965BF-4CBB-4C32-B3AB-1A8B840CA1CE}\RP556\A0156118.exe/data0003 Infected: not-a-virus:AdWare.Win32.Beginto.c skipped
C:\System Volume Information\_restore{19A965BF-4CBB-4C32-B3AB-1A8B840CA1CE}\RP556\A0156118.exe NSIS: infected - 1 skipped
C:\System Volume Information\_restore{19A965BF-4CBB-4C32-B3AB-1A8B840CA1CE}\RP557\A0156715.exe/data0003 Infected: not-a-virus:AdWare.Win32.Beginto.c skipped
C:\System Volume Information\_restore{19A965BF-4CBB-4C32-B3AB-1A8B840CA1CE}\RP557\A0156715.exe NSIS: infected - 1 skipped
C:\System Volume Information\_restore{19A965BF-4CBB-4C32-B3AB-1A8B840CA1CE}\RP557\A0156733.dll Infected: not-a-virus:AdWare.Win32.RXBar.d skipped
C:\System Volume Information\_restore{19A965BF-4CBB-4C32-B3AB-1A8B840CA1CE}\RP557\A0156737.exe Infected: not-a-virus:Porn-Dialer.Win32.InstantAccess.m skipped
C:\System Volume Information\_restore{19A965BF-4CBB-4C32-B3AB-1A8B840CA1CE}\RP557\A0156738.dll Infected: not-a-virus:AdWare.Win32.EZula.bn skipped
C:\System Volume Information\_restore{19A965BF-4CBB-4C32-B3AB-1A8B840CA1CE}\RP557\A0156739.dll Infected: not-a-virus:AdWare.Win32.EZula.bn skipped
C:\System Volume Information\_restore{19A965BF-4CBB-4C32-B3AB-1A8B840CA1CE}\RP557\change.log Object is locked skipped
C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped
C:\WINDOWS\Internet Logs\AMBIENTH-C09246.ldb Object is locked skipped
C:\WINDOWS\Internet Logs\fwdbglog.txt Object is locked skipped
C:\WINDOWS\Internet Logs\fwpktlog.txt Object is locked skipped
C:\WINDOWS\Internet Logs\IAMDB.RDB Object is locked skipped
C:\WINDOWS\Internet Logs\tvDebug.log Object is locked skipped
C:\WINDOWS\SchedLgU.Txt Object is locked skipped
C:\WINDOWS\SoftwareDistribution\EventCache\{6C1DD0 19-AA92-4471-82CF-51CD62FA605D}.bin Object is locked skipped
C:\WINDOWS\SoftwareDistribution\ReportingEvents.lo g Object is locked skipped
C:\WINDOWS\Sti_Trace.log Object is locked skipped
C:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\default Object is locked skipped
C:\WINDOWS\system32\config\DEFAULT.LOG Object is locked skipped
C:\WINDOWS\system32\config\SAM Object is locked skipped
C:\WINDOWS\system32\config\SAM.LOG Object is locked skipped
C:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\SECURITY Object is locked skipped
C:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped
C:\WINDOWS\system32\config\software Object is locked skipped
C:\WINDOWS\system32\config\SOFTWARE.LOG Object is locked skipped
C:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\system Object is locked skipped
C:\WINDOWS\system32\config\SYSTEM.LOG Object is locked skipped
C:\WINDOWS\system32\h323log.txt Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MA P Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MA P Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DAT A Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP Object is locked skipped
C:\WINDOWS\Temp\ZLT006a4.TMP Object is locked skipped
C:\WINDOWS\Temp\ZLT02380.TMP Object is locked skipped
C:\WINDOWS\wiadebug.log Object is locked skipped
C:\WINDOWS\wiaservc.log Object is locked skipped
C:\WINDOWS\WindowsUpdate.log Object is locked skipped

Scan process completed.