wenas soy Agustin y necesito saber como eliminar este feo virus k aparece y el Avast lo elimina y al cabo de un momento vuelve a aparecer.
La ruta k me marka el antivirus es la sigte.:
"C:docum &Setting/Gaby/configuracion local/temp/12354687.exe/(SFG)contiene rastros de "win32:agent-bsu (trj)"!
no kiero formatear la pc por q pierdo muchos datos muy importantes.
realice un escaneo con el "kavwebscan" y me ha dado este informe:
-------------------------------------------------------------------------------
KASPERSKY ONLINE SCANNER REPORT
Thursday, January 24, 2008 5:36:10 PM
Operating System: Microsoft Windows XP Professional, (Build 2600)
Kaspersky Online Scanner version: 5.0.98.0
Kaspersky Anti-Virus database last update: 24/01/2008
Kaspersky Anti-Virus database records: 531323
-------------------------------------------------------------------------------

Scan Settings:
Scan using the following antivirus database: extended
Scan Archives: true
Scan Mail Bases: true

Scan Target - My Computer:
A:\
C:\
D:\
E:\
F:\

Scan Statistics:
Total number of scanned objects: 97468
Number of viruses found: 4
Number of infected objects: 4
Number of suspicious objects: 0
Duration of the scan process: 01:51:49

Infected Object Name / Virus Name / Last Action
C:\WINDOWS\system32\config\system.LOG Object is locked skipped
C:\WINDOWS\system32\config\software.LOG Object is locked skipped
C:\WINDOWS\system32\config\default.LOG Object is locked skipped
C:\WINDOWS\system32\config\SAM.LOG Object is locked skipped
C:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped
C:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\Antivirus.Evt Object is locked skipped
C:\WINDOWS\system32\config\SECURITY Object is locked skipped
C:\WINDOWS\system32\config\SOFTWARE Object is locked skipped
C:\WINDOWS\system32\config\SYSTEM Object is locked skipped
C:\WINDOWS\system32\config\DEFAULT Object is locked skipped
C:\WINDOWS\system32\config\SAM Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DAT A Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked skipped
C:\WINDOWS\system32\h323log.txt Object is locked skipped
C:\WINDOWS\system32\__delete_on_reboot__H_f_k_r_4_ g_._d_l_l_ Infected: Trojan-Downloader.Win32.Small.hko skipped
C:\WINDOWS\inf\svchost.exe Infected: not-a-virus:RemoteAdmin.Win32.RAdmin.21 skipped
C:\WINDOWS\Temp\Perflib_Perfdata_57c.dat Object is locked skipped
C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped
C:\WINDOWS\Debug\oakley.log Object is locked skipped
C:\WINDOWS\Sti_Trace.log Object is locked skipped
C:\WINDOWS\wiaservc.log Object is locked skipped
C:\WINDOWS\wiadebug.log Object is locked skipped
C:\WINDOWS\SchedLgU.Txt Object is locked skipped
C:\Documents and Settings\NetworkService\Configuración local\Datos de programa\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\Configuración local\Datos de programa\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\ntuser.dat Object is locked skipped
C:\Documents and Settings\LocalService\Configuración local\Historial\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Configuración local\Archivos temporales de Internet\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Configuración local\Archivos temporales de Internet\Content.IE5\JWMBZN0W\severa[1].exe Infected: Trojan-Downloader.Win32.Agent.bkw skipped
C:\Documents and Settings\LocalService\Configuración local\Datos de programa\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\LocalService\Configuración local\Datos de programa\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\LocalService\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\LocalService\ntuser.dat Object is locked skipped
C:\Documents and Settings\Gaby\NTUSER.DAT.LOG Object is locked skipped
C:\Documents and Settings\Gaby\Configuración local\Temp\INMEM000.REM Object is locked skipped
C:\Documents and Settings\Gaby\Configuración local\Temp\JET442A.tmp Object is locked skipped
C:\Documents and Settings\Gaby\Configuración local\Temp\~DF71B0.tmp Object is locked skipped
C:\Documents and Settings\Gaby\Configuración local\Historial\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\Gaby\Configuración local\Historial\History.IE5\MSHist0120080124200801 25\index.dat Object is locked skipped
C:\Documents and Settings\Gaby\Configuración local\Archivos temporales de Internet\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\Gaby\Configuración local\Datos de programa\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\Gaby\Configuración local\Datos de programa\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\Gaby\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\Gaby\ntuser.dat Object is locked skipped
C:\Archivos de programa\Mozilla Firefox\plugins\NPMyWebS.dll Infected: not-a-virus:AdTool.Win32.MyWebSearch.i skipped
C:\Archivos de programa\Alwil Software\Avast4\DATA\report\Protección residente.txt Object is locked skipped
C:\Archivos de programa\Alwil Software\Avast4\DATA\log\nshield.log Object is locked skipped
C:\Archivos de programa\Alwil Software\Avast4\DATA\log\aswMaiSv.log Object is locked skipped
C:\Archivos de programa\Alwil Software\Avast4\DATA\log\AshWebSv.ws Object is locked skipped
C:\Archivos de programa\Alwil Software\Avast4\DATA\integ\avast.int Object is locked skipped
C:\Archivos de programa\Alwil Software\Avast4\DATA\aswResp.dat Object is locked skipped
C:\Archivos de programa\Alwil Software\Avast4\DATA\Avast4.db Object is locked skipped
C:\Archivos de programa\Telphos\log\telphos.log Object is locked skipped
C:\Locutorio\Tablas\ADTICKTMP.DB Object is locked skipped
C:\Locutorio\Tablas\LLTICKTMP.DB Object is locked skipped
C:\Locutorio\Tablas\Totalcabi.DB Object is locked skipped
C:\Locutorio\Tablas\Totalcabi.PX Object is locked skipped
C:\Locutorio\Tablas\Transaccion.DB Object is locked skipped
C:\Locutorio\Tablas\Transaccion.PX Object is locked skipped
C:\Locutorio\Tablas\Auditoria.DB Object is locked skipped
C:\Locutorio\Tablas\Auditoria.PX Object is locked skipped
C:\Locutorio\Tablas\Auditoria.XG0 Object is locked skipped
C:\Locutorio\Tablas\Auditoria.XG1 Object is locked skipped
C:\Locutorio\Tablas\Auditoria.XG2 Object is locked skipped
C:\Locutorio\Tablas\Auditoria.YG0 Object is locked skipped
C:\Locutorio\Tablas\Auditoria.YG1 Object is locked skipped
C:\Locutorio\Tablas\Auditoria.YG2 Object is locked skipped
C:\Locutorio\Tablas\Destinos.DB Object is locked skipped
C:\Locutorio\Tablas\Destinos.PX Object is locked skipped
C:\Locutorio\Tablas\Destinos.XG1 Object is locked skipped
C:\Locutorio\Tablas\Destinos.YG1 Object is locked skipped
C:\Locutorio\Tablas\Tiposcom.PX Object is locked skipped
C:\Locutorio\Tablas\BufLlam.DB Object is locked skipped
C:\Locutorio\Tablas\BufLlam.PX Object is locked skipped
C:\Locutorio\Tablas\BufLlam.XG1 Object is locked skipped
C:\Locutorio\Tablas\BufLlam.YG1 Object is locked skipped
C:\Locutorio\Tablas\BufLlam.XG0 Object is locked skipped
C:\Locutorio\Tablas\BufLlam.YG0 Object is locked skipped
C:\Locutorio\Tablas\BufAdic.DB Object is locked skipped
C:\Locutorio\Tablas\BufAdic.PX Object is locked skipped
C:\Locutorio\Tablas\BufCostos.db Object is locked skipped
C:\Locutorio\Tablas\BufCostos.PX Object is locked skipped
C:\Locutorio\Tablas\BufArti.DB Object is locked skipped
C:\Locutorio\Tablas\BufArti.PX Object is locked skipped
C:\Locutorio\Tablas\BufArti.XG0 Object is locked skipped
C:\Locutorio\Tablas\BufArti.YG0 Object is locked skipped
C:\Locutorio\Tablas\TempLlam.DB Object is locked skipped
C:\Locutorio\Tablas\TempLlam.PX Object is locked skipped
C:\Locutorio\Tablas\LL20080124.DB Object is locked skipped
C:\Locutorio\Tablas\LL20080124.PX Object is locked skipped
C:\Locutorio\Tablas\LL20080124.XG0 Object is locked skipped
C:\Locutorio\Tablas\LL20080124.XG1 Object is locked skipped
C:\Locutorio\Tablas\LL20080124.YG0 Object is locked skipped
C:\Locutorio\Tablas\LL20080124.YG1 Object is locked skipped
C:\Locutorio\Tablas\CO20080124.DB Object is locked skipped
C:\Locutorio\Tablas\CO20080124.PX Object is locked skipped
C:\CiberControl 4.0 PRO\database\ciber.mdb Object is locked skipped
C:\CiberControl 4.0 PRO\database\ciber.ldb Object is locked skipped
C:\PDOXUSRS.NET Object is locked skipped
E:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped

Scan process completed.
si pudieran darme la solución muy agradecido estaré.
desde ya muchas gracias
salu2:smile:

Hola te doy la bienvenida a Foro de InfoSpyware (http://www.InfoSpyware.com).
Politicas del foro (http://www.forospyware.com/t3.html). Consejos a la hora de publicar nuevos mensajes (http://www.forospyware.com/t2.html).


Descargate OTMoveIt (http://download.bleepingcomputer.com/oldtimer/OTMoveIt.exe) lo guardas en el Escritorio.


Haz un doble clic sobre OTMoveIt.exe para ejecutarlo.
Asegurate que este marcado "Unregister Dll's and Ocx's".
Copia el texto que se encuentra en el cuadrado más abajo, y pega el texto en el marco de izquierdo de OTMoveIt nombrado Paste List of Filas / Folders to be moved.



C:\WINDOWS\system32\__delete_on_reboot__H_f_k_r_4_ g_._d_l_l_
C:\Documents and Settings\LocalService\Configuración local\Archivos temporales de Internet\Content.IE5\JWMBZN0W\severa[1].exe
C:\Archivos de programa\Mozilla Firefox\plugins\NPMyWebS.dll



Haz clic en MoveIt! Para lanzar la supresión.
Cuando el resultado aparece en el marco Results, haz clic enExit.
Reinicia el PC (Este paso es muy importante)


Envía el informe (reporte) de OTMoveIt situado sobre C: \ _ OTMoveIt\MovedFiles.