saludos,
hace unos dias pregunte sobre el iuhx32.exe y segun lo elimine y se dio por solucionado el tema. pero la verdad es que no, sigo teniendo problemas desde entonces.
me sigue apareciendo el recycler y adicional me sale en la ruta D:\System Volume Information\_restore{AC1CDD61-F4DA-4068-B585-655E3E2DFBF7}\RP1 los archivos de A0000005.ini y el de change.log

el primero tiene por contenido:
[.ShellClassInfo]
CLSID={645FF040-5081-101B-9F08-00AA002F954E}

y el segundo:
ü ïÍ« è  \ D e v i c e \ H a r d d i s k V o l u m e 2 \ S y s t e m V o l u m e I n f o r m a t i o n \ _ r e s t o r e { A C 1 C D D 6 1 - F 4 D A - 4 0 6 8 - B 5 8 5 - 6 5 5 E 3 E 2 D F B F 7 } \ R P 1 \ c h a n g e . l o g ü `
ïÍ«     \ R e c y c l e d ` º
ïÍ«    4  \ R e c y c l e d \ d e s k t o p . i n i "  A 0 0 0 0 0 0 5 . i n i D E S K T O P . I N I º z
ïÍ«       \ R e c y c l e d  R E C Y C L E D z

y ahora ya me aparece D:\System Volume Information\_restore\RP1\change.log

y no las puedo eliminar porque dice que estan siendo usados.
En mis unidades usb sigue apareciendo infeccion por mas que use el flash_disinfector.
¡Alguien me podria decir como eliminar esto?

por cierto que en virustotal no me sale nada de change.log, pero de A0000005.ini sale como resultado BlockReason.0

hola si tenes un virus en \System Volume Information\_restore
solo tiene que apagar restaurar sistema reiniciar volver a activarlo y volver a reiniciar.
luego hace un escaneo con kaspersky online y pega el reporte que te genere

KASPERSKY ONLINE SCANNER REPORT
Friday, May 09, 2008 7:35:23 PM
Operating System: Microsoft Windows XP Professional, Service Pack 2 (Build 2600)
Kaspersky Online Scanner version: 5.0.98.0
Kaspersky Anti-Virus database last update: 9/05/2008
Kaspersky Anti-Virus database records: 750464


Scan Settings
Scan using the following antivirus database extended
Scan Archives true
Scan Mail Bases true

Scan Target My Computer
A:\
C:\
D:\
E:\
F:\

Scan Statistics
Total number of scanned objects 51926
Number of viruses found 1
Number of infected objects 3
Number of suspicious objects 0
Duration of the scan process 0145

Infected Object Name Virus Name Last Action
C:\Archivos de programa\Prodigy Antivirus\Prodigy Antivirus\a5f85435c8d4c84be3949333b78a8235PSK_NAME S Object is locked skipped

C:\Archivos de programa\Prodigy Antivirus\Prodigy Antivirus\a5f85435c8d4c84be3949333b78a8235PSK_NAME S2 Object is locked skipped

C:\autorun.inf\lpt3.This folder was created by Flash_Disinfector Object is locked skipped

C:\Documents and Settings\LocalService\Configuración local\Archivos temporales de Internet\Content.IE5\index.dat Object is locked skipped

C:\Documents and Settings\LocalService\Configuración local\Datos de programa\Microsoft\Windows\UsrClass.dat Object is locked skipped

C:\Documents and Settings\LocalService\Configuración local\Datos de programa\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped

C:\Documents and Settings\LocalService\Configuración local\Historial\History.IE5\index.dat Object is locked skipped

C:\Documents and Settings\LocalService\Cookies\index.dat Object is locked skipped

C:\Documents and Settings\LocalService\NTUSER.DAT Object is locked skipped

C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked skipped

C:\Documents and Settings\NetworkService\Configuración local\Datos de programa\Microsoft\Windows\UsrClass.dat Object is locked skipped

C:\Documents and Settings\NetworkService\Configuración local\Datos de programa\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped

C:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked skipped

C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked skipped

C:\Documents and Settings\nieves\Configuración local\Archivos temporales de Internet\Content.IE5\index.dat Object is locked skipped

C:\Documents and Settings\nieves\Configuración local\Datos de programa\Microsoft\Feeds Cache\index.dat Object is locked skipped

C:\Documents and Settings\nieves\Configuración local\Datos de programa\Microsoft\Windows\UsrClass.dat Object is locked skipped

C:\Documents and Settings\nieves\Configuración local\Datos de programa\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped

C:\Documents and Settings\nieves\Configuración local\Historial\History.IE5\index.dat Object is locked skipped

C:\Documents and Settings\nieves\Configuración local\Historial\History.IE5\MSHist0120080509200805 10\index.dat Object is locked skipped

C:\Documents and Settings\nieves\Configuración local\Temp\~DF39DF.tmp Object is locked skipped

C:\Documents and Settings\nieves\Configuración local\Temp\~DF63B2.tmp Object is locked skipped

C:\Documents and Settings\nieves\Cookies\index.dat Object is locked skipped

C:\Documents and Settings\nieves\Mis documentos\mxone\archivos_instalacion\mxone.exe Infected: Trojan-Downloader.Win32.Delf.hhg skipped

C:\Documents and Settings\nieves\Mis documentos\mxone.zip/archivos_instalacion/mxone.exe Infected: Trojan-Downloader.Win32.Delf.hhg skipped

C:\Documents and Settings\nieves\Mis documentos\mxone.zip ZIP: infected - 1 skipped

C:\Documents and Settings\nieves\NTUSER.DAT Object is locked skipped

C:\Documents and Settings\nieves\ntuser.dat.LOG Object is locked skipped

C:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped

C:\System Volume Information\_restore\RP1\change.log Object is locked skipped

C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped

C:\WINDOWS\SchedLgU.Txt Object is locked skipped

C:\WINDOWS\SoftwareDistribution\ReportingEvents.lo g Object is locked skipped

C:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped

C:\WINDOWS\system32\config\default Object is locked skipped

C:\WINDOWS\system32\config\default.LOG Object is locked skipped

C:\WINDOWS\system32\config\Internet.evt Object is locked skipped

C:\WINDOWS\system32\config\SAM Object is locked skipped

C:\WINDOWS\system32\config\SAM.LOG Object is locked skipped

C:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped

C:\WINDOWS\system32\config\SECURITY Object is locked skipped

C:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped

C:\WINDOWS\system32\config\software Object is locked skipped

C:\WINDOWS\system32\config\software.LOG Object is locked skipped

C:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped

C:\WINDOWS\system32\config\system Object is locked skipped

C:\WINDOWS\system32\config\system.LOG Object is locked skipped

C:\WINDOWS\system32\h323log.txt Object is locked skipped

C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked skipped

C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP Object is locked skipped

C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER Object is locked skipped

C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MA P Object is locked skipped

C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MA P Object is locked skipped

C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DAT A Object is locked skipped

C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP Object is locked skipped

C:\WINDOWS\WindowsUpdate.log Object is locked skipped

D:\autorun.inf\lpt3.This folder was created by Flash_Disinfector Object is locked skipped

Scan process completed.




-----------------------
los que me marca lo baje para mis usb

Descarga MalwareBytes actualizalo y hace un escaneo completo y elimina lo que detecte MalwareBytes

Tenes que eliminar ese archivo ya que esta infectado

C:\Documents and Settings\nieves\Mis documentos\mxone.zip

Comenta si seguis teniendo problema con restore