Hola,

Cada vez que reinicio kaspersky me dice:

PROGRAMA ESPIA
C:\WINDOWS\system32\yayyawt.dll

lo intento eliminar y siempre me dice que lo eliminará cuando reinicie y tambien me dice:

PROGRAMA ESPIA
IEXPLORE.EXE\ssqpo.dll

Y cuando voy intentando desinfectar acaba reiniciandose el PC.


No se que hacer.

He intentado pasar el antivirus en modo seguro pero el la tarea explorer exe se cierra sola y cuando consigo ejecutar el kaspersky se queda el icono en gris y no hace nada mas que ocupar el 100% de la CPU. stoy desesperao.


Si alguien me puede echar una manilla ...

MUCHAS GRACIAS

Tengo el Spybot y no me deja eliminar

Hola,

Intenta eliminar el archivo con KillBox.

Nos comentas...

Saludos

Ante todo gracias por la ayuda,

con killbox no encuentro los archivos dentro de system32.

Con Spybot me salen dentro de BHO's pero me dice que no puedo abrirlos y cuando elimino el yayyawt.dll me aparece el ssqpo.dll y si elimino este me vuelve a aparecer el anterior.

Tambien me sale en inicio del sistema pero cuando los desabilito o borro vuelven a aparecer activos.

Alguna otra solution?

Hola,

Y estas intentando eliminarlos en mdodo seguro?

Saludos

Perdon por la tardanza en la respuesta, he estado fuera unos dias.

Si, he intentado eliminarlos en modo seguro y los problemas son los siguientes:

-No puedo pasar Kaspersky en modo seguro y no se muy bien porque.

-Como te comentaba mas arriba spybot no me deja eliminarlos.

Y tema a parte, modo seguro no me funciona muy fino la tarea explorer.exe se cierra sola y no se por que.

PD:tambien he pasado en modo seguro el DiskCleaner y el RegSeeker y nada.

Hola corvendallasnic, Bienvenido al Foro...

Con permiso de AntonioG...

Fijate si podés, luego de pasar el RegSeeker y el Disk Cleaner en Modo Normal, analizar con Ewido Online Scanner (eliminá lo que encuentre y lo que no nos lo dejás acá mismo) y Kaspersky (dejanos el reporte que genere si encuentra alguna infección).

De ese modo vamos a poder ver bien todas las infecciones...

Saludos!

Hola LeandroMed,

Hice exactamente lo que me dijiste. Despues de pasar regseeker y diskcleaner pase los antivirus online en el mismo orden que los nombraste:

-El Ewido encontro algunas cosas pero las elimino todas. (o eso me dijo)

Muchas gracias por la ayuda a los dos y aqui abajo os pongo el report del kaspersky



-------------------------------------------------------------------------------
KASPERSKY ONLINE SCANNER REPORT
Tuesday, December 12, 2006 7:49:22 PM
Operating System: Microsoft Windows XP Professional, Service Pack 1 (Build 2600)
Kaspersky Online Scanner version: 5.0.83.0
Kaspersky Anti-Virus database last update: 12/12/2006
Kaspersky Anti-Virus database records: 250207
-------------------------------------------------------------------------------

Scan Settings:
Scan using the following antivirus database: extended
Scan Archives: true
Scan Mail Bases: true

Scan Target - My Computer:
A:\
C:\
D:\
E:\
F:\

Scan Statistics:
Total number of scanned objects: 47738
Number of viruses found: 10
Number of infected objects: 20 / 0
Number of suspicious objects: 0
Duration of the scan process: 02:54:14

Infected Object Name / Virus Name / Last Action
C:\!KillBox\48915E11.exe Infected: Packed.Win32.Klone.g skipped
C:\!KillBox\4A042D9A.dll Infected: Trojan-Downloader.Win32.Busky.gen skipped
C:\!KillBox\4A554740.dll Infected: Trojan-Downloader.Win32.Busky.gen skipped
C:\!KillBox\Quarantine\4A042D9A.dll Infected: Trojan-Downloader.Win32.Busky.gen skipped
C:\!KillBox\Quarantine\4A554740.dll Infected: Trojan-Downloader.Win32.Busky.gen skipped
C:\Archivos de programa\VSAdd-in\VSAdd-in.dll Infected: not-a-virus:AdWare.Win32.Agent.at skipped
C:\Documents and Settings\All Users\Datos de programa\Microsoft\Network\Downloader\qmgr0.dat Object is locked skipped
C:\Documents and Settings\All Users\Datos de programa\Microsoft\Network\Downloader\qmgr1.dat Object is locked skipped
C:\Documents and Settings\All Users\Datos de programa\Symantec\LiveUpdate\2006-12-12_Log.ALUSchedulerSvc.LiveUpdate Object is locked skipped
C:\Documents and Settings\David\Configuración local\Archivos temporales de Internet\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\David\Configuración local\Datos de programa\ApplicationHistory\hpqimzone.exe.12eac55c .ini.inuse Object is locked skipped
C:\Documents and Settings\David\Configuración local\Datos de programa\HP\Digital Imaging\db\administrativeInfo.dbf Object is locked skipped
C:\Documents and Settings\David\Configuración local\Datos de programa\HP\Digital Imaging\db\albumImagesTable.cdx Object is locked skipped
C:\Documents and Settings\David\Configuración local\Datos de programa\HP\Digital Imaging\db\albumImagesTable.dbf Object is locked skipped
C:\Documents and Settings\David\Configuración local\Datos de programa\HP\Digital Imaging\db\albumTable.cdx Object is locked skipped
C:\Documents and Settings\David\Configuración local\Datos de programa\HP\Digital Imaging\db\albumTable.dbf Object is locked skipped
C:\Documents and Settings\David\Configuración local\Datos de programa\HP\Digital Imaging\db\CB_Server_Errors.txt Object is locked skipped
C:\Documents and Settings\David\Configuración local\Datos de programa\HP\Digital Imaging\db\EXIFTable.cdx Object is locked skipped
C:\Documents and Settings\David\Configuración local\Datos de programa\HP\Digital Imaging\db\EXIFTable.dbf Object is locked skipped
C:\Documents and Settings\David\Configuración local\Datos de programa\HP\Digital Imaging\db\imageTable.cdx Object is locked skipped
C:\Documents and Settings\David\Configuración local\Datos de programa\HP\Digital Imaging\db\imageTable.dbf Object is locked skipped
C:\Documents and Settings\David\Configuración local\Datos de programa\HP\Digital Imaging\db\imageTable.fpt Object is locked skipped
C:\Documents and Settings\David\Configuración local\Datos de programa\HP\Digital Imaging\db\keywordImagesTable.cdx Object is locked skipped
C:\Documents and Settings\David\Configuración local\Datos de programa\HP\Digital Imaging\db\keywordImagesTable.dbf Object is locked skipped
C:\Documents and Settings\David\Configuración local\Datos de programa\HP\Digital Imaging\db\keywordTable.cdx Object is locked skipped
C:\Documents and Settings\David\Configuración local\Datos de programa\HP\Digital Imaging\db\keywordTable.dbf Object is locked skipped
C:\Documents and Settings\David\Configuración local\Datos de programa\HP\Digital Imaging\db\managedFolderTable.dbf Object is locked skipped
C:\Documents and Settings\David\Configuración local\Datos de programa\HP\Digital Imaging\db\pathnameTable.cdx Object is locked skipped
C:\Documents and Settings\David\Configuración local\Datos de programa\HP\Digital Imaging\db\pathnameTable.dbf Object is locked skipped
C:\Documents and Settings\David\Configuración local\Datos de programa\HP\Digital Imaging\db\propertiesTable.cdx Object is locked skipped
C:\Documents and Settings\David\Configuración local\Datos de programa\HP\Digital Imaging\db\propertiesTable.dbf Object is locked skipped
C:\Documents and Settings\David\Configuración local\Datos de programa\HP\Digital Imaging\db\ROFImagesTable.cdx Object is locked skipped
C:\Documents and Settings\David\Configuración local\Datos de programa\HP\Digital Imaging\db\ROFImagesTable.dbf Object is locked skipped
C:\Documents and Settings\David\Configuración local\Datos de programa\HP\Digital Imaging\db\ROFTable.cdx Object is locked skipped
C:\Documents and Settings\David\Configuración local\Datos de programa\HP\Digital Imaging\db\ROFTable.dbf Object is locked skipped
C:\Documents and Settings\David\Configuración local\Datos de programa\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\David\Configuración local\Datos de programa\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\David\Configuración local\Historial\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\David\Configuración local\Historial\History.IE5\MSHist0120061204200612 11\index.dat Object is locked skipped
C:\Documents and Settings\David\Configuración local\Historial\History.IE5\MSHist0120061212200612 13\index.dat Object is locked skipped
C:\Documents and Settings\David\Configuración local\Temp\hpodvd09.log Object is locked skipped
C:\Documents and Settings\David\Configuración local\Temp\ngylorww.dll Infected: Trojan-Spy.Win32.VBStat.h skipped
C:\Documents and Settings\David\Configuración local\Temp\Perflib_Perfdata_8d8.dat Object is locked skipped
C:\Documents and Settings\David\Configuración local\Temp\Perflib_Perfdata_d10.dat Object is locked skipped
C:\Documents and Settings\David\Configuración local\Temp\tbkxidmo.dll Infected: Trojan-Spy.Win32.VBStat.h skipped
C:\Documents and Settings\David\Configuración local\Temp\_hphtra07.log Object is locked skipped
C:\Documents and Settings\David\Configuración local\Temp\~DF2CFA.tmp Object is locked skipped
C:\Documents and Settings\David\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\David\Datos de programa\Roxio\MediaManager8\Album.ldb Object is locked skipped
C:\Documents and Settings\David\Datos de programa\Roxio\MediaManager8\Album.psod Object is locked skipped
C:\Documents and Settings\David\ntuser.dat Object is locked skipped
C:\Documents and Settings\David\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\LocalService\Configuración local\Archivos temporales de Internet\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Configuración local\Datos de programa\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\LocalService\Configuración local\Datos de programa\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\LocalService\Configuración local\Historial\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\ntuser.dat Object is locked skipped
C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\Configuración local\Datos de programa\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\NetworkService\Configuración local\Datos de programa\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\ntuser.dat Object is locked skipped
C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked skipped
C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped
C:\WINDOWS\SchedLgU.Txt Object is locked skipped
C:\WINDOWS\SoftwareDistribution\ReportingEvents.lo g Object is locked skipped
C:\WINDOWS\Sti_Trace.log Object is locked skipped
C:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\default Object is locked skipped
C:\WINDOWS\system32\config\default.LOG Object is locked skipped
C:\WINDOWS\system32\config\SAM Object is locked skipped
C:\WINDOWS\system32\config\SAM.LOG Object is locked skipped
C:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\SECURITY Object is locked skipped
C:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped
C:\WINDOWS\system32\config\software Object is locked skipped
C:\WINDOWS\system32\config\software.LOG Object is locked skipped
C:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\system Object is locked skipped
C:\WINDOWS\system32\config\system.LOG Object is locked skipped
C:\WINDOWS\system32\config\systemprofile\Configura ción local\Archivos temporales de Internet\Content.IE5\index.dat Object is locked skipped
C:\WINDOWS\system32\config\systemprofile\Configura ción local\Historial\History.IE5\index.dat Object is locked skipped
C:\WINDOWS\system32\config\systemprofile\Cookies\i ndex.dat Object is locked skipped
C:\WINDOWS\system32\dlqzkpcx.dll Infected: not-a-virus:AdWare.Win32.PurityScan.ak skipped
C:\WINDOWS\system32\drivers\dtscsi.sys Object is locked skipped
C:\WINDOWS\system32\drivers\fidbox.dat Object is locked skipped
C:\WINDOWS\system32\drivers\fidbox.idx Object is locked skipped
C:\WINDOWS\system32\drivers\fidbox2.dat Object is locked skipped
C:\WINDOWS\system32\drivers\fidbox2.idx Object is locked skipped
C:\WINDOWS\system32\drivers\sptd.sys Object is locked skipped
C:\WINDOWS\system32\drivers\sptd6589.sys Object is locked skipped
C:\WINDOWS\system32\dsquskhn.exe Infected: not-a-virus:AdWare.Win32.Agent.at skipped
C:\WINDOWS\system32\h323log.txt Object is locked skipped
C:\WINDOWS\system32\jezmesh.dll Infected: Trojan-Downloader.Win32.Busky.gen skipped
C:\WINDOWS\system32\mhaiidvd.dll Infected: Trojan-Spy.Win32.VBStat.h skipped
C:\WINDOWS\system32\pqtfatru.dll Infected: Trojan-Spy.Win32.VBStat.h skipped
C:\WINDOWS\system32\qwogcebl.dll Infected: Trojan-Spy.Win32.VBStat.h skipped
C:\WINDOWS\system32\ssqpo.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.fj skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DAT A Object is locked skipped
C:\WINDOWS\system32\wirvufc.dll Infected: Trojan-Downloader.Win32.Busky.gen skipped
C:\WINDOWS\system32\xgtkmnpr.dll Infected: Trojan.Win32.BHO.o skipped
C:\WINDOWS\system32\yayyawt.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.dr skipped
C:\WINDOWS\system32\__delete_on_reboot__f_m_r_m_h_ c_._d_l_l_ Infected: Trojan-Downloader.Win32.Small.dzp skipped
C:\WINDOWS\system32\__delete_on_reboot__w_y_t_r_r_ o_n_n_._d_l_l_ Infected: Trojan.Win32.BHO.g skipped
C:\WINDOWS\Temp\JETA5F4.tmp Object is locked skipped
C:\WINDOWS\Temp\~DFEAF2.tmp Object is locked skipped
C:\WINDOWS\wiadebug.log Object is locked skipped
C:\WINDOWS\wiaservc.log Object is locked skipped
C:\WINDOWS\WindowsUpdate.log Object is locked skipped

Scan process completed.

hola, bueno pues comencemos con lo siguiente:

descarga el AVG antispyware 7.5

ve a panel de control y desinstala si es que esta algo llamado asi como VSAdd-in

reinicia en modo seguro, luego vete a el boton de inicio, luego ejecutar y escribes %temp%, con todos los programas cerrados, elimina todo lo que haya alli, despues escanea con el AVG antispyware 7.5

ya hehco eso, busca y elimina:

C:\Archivos de programa\VSAdd-in\VSAdd-in.dll

C:\WINDOWS\system32\dlqzkpcx.dl

C:\WINDOWS\system32\dsquskhn.exe

C:\WINDOWS\system32\jezmesh.dll

C:\WINDOWS\system32\mhaiidvd.dll

C:\WINDOWS\system32\pqtfatru.dll

C:\WINDOWS\system32\qwogcebl.dll

C:\WINDOWS\system32\ssqpo.dll

C:\WINDOWS\system32\wirvufc.dll

C:\WINDOWS\system32\xgtkmnpr.dll

C:\WINDOWS\system32\yayyawt.dll

C:\WINDOWS\system32\__delete_on_reboot__f_m_r_m_h_ c_._d_l_l_

C:\WINDOWS\system32\__delete_on_reboot__w_y_t_r_r_ o_n_n_._d_l_l_

reinicia en modo normal y realiza este tutorial:

Eliminar Vundo - Winfixer

borra todo lo que haya en el interior de la carpeta

c:\killbox!

pasa el regseeker para limpiar el registro y escanea con el panda y el kaspersky online, si te encuentran algo nos pegas sus reportes


salu2

Hola y gracias nuevamente por vuestra rapida respuesta,

He seguido todos los pasos uno a uno y he obtenido muy buenos resultados.
Por si acaso he repetido por segunda vez todos los pasos que me indicasteis y solo tengo una duda, al ejecutar vundofix se creo una carpeta con unos backups de los archivos infectados, eso he de eliminarlo?

Parece que aun queda algo pero el rendimiento de la maquina es mucho mejor ahora.

Os pego el report del antivirus online para ver que se puede hacer con lo que queda:

-------------------------------------------------------------------------------
KASPERSKY ONLINE SCANNER REPORT
Wednesday, December 13, 2006 11:41:44 PM
Operating System: Microsoft Windows XP Professional, Service Pack 1 (Build 2600)
Kaspersky Online Scanner version: 5.0.83.0
Kaspersky Anti-Virus database last update: 13/12/2006
Kaspersky Anti-Virus database records: 250556
-------------------------------------------------------------------------------

Scan Settings:
Scan using the following antivirus database: extended
Scan Archives: true
Scan Mail Bases: true

Scan Target - My Computer:
A:\
C:\
D:\
E:\
F:\

Scan Statistics:
Total number of scanned objects: 47881
Number of viruses found: 2
Number of infected objects: 3 / 0
Number of suspicious objects: 0
Duration of the scan process: 03:03:22

Infected Object Name / Virus Name / Last Action
C:\Documents and Settings\All Users\Datos de programa\Kaspersky Lab\AVP6\Report\02dd_File_Monitoring_eventlog.rpt Object is locked skipped
C:\Documents and Settings\All Users\Datos de programa\Kaspersky Lab\AVP6\Report\02e0_Web_Monitoring_eventlog.rpt Object is locked skipped
C:\Documents and Settings\All Users\Datos de programa\Kaspersky Lab\AVP6\Report\detected.idx Object is locked skipped
C:\Documents and Settings\All Users\Datos de programa\Kaspersky Lab\AVP6\Report\detected.rpt Object is locked skipped
C:\Documents and Settings\All Users\Datos de programa\Kaspersky Lab\AVP6\Report\eventlog.rpt Object is locked skipped
C:\Documents and Settings\All Users\Datos de programa\Kaspersky Lab\AVP6\Report\report.rpt Object is locked skipped
C:\Documents and Settings\All Users\Datos de programa\Microsoft\Network\Downloader\qmgr0.dat Object is locked skipped
C:\Documents and Settings\All Users\Datos de programa\Microsoft\Network\Downloader\qmgr1.dat Object is locked skipped
C:\Documents and Settings\All Users\Datos de programa\Symantec\LiveUpdate\2006-12-13_Log.ALUSchedulerSvc.LiveUpdate Object is locked skipped
C:\Documents and Settings\David\Configuración local\Archivos temporales de Internet\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\David\Configuración local\Datos de programa\ApplicationHistory\hpqimzone.exe.12eac55c .ini.inuse Object is locked skipped
C:\Documents and Settings\David\Configuración local\Datos de programa\HP\Digital Imaging\db\administrativeInfo.dbf Object is locked skipped
C:\Documents and Settings\David\Configuración local\Datos de programa\HP\Digital Imaging\db\albumImagesTable.cdx Object is locked skipped
C:\Documents and Settings\David\Configuración local\Datos de programa\HP\Digital Imaging\db\albumImagesTable.dbf Object is locked skipped
C:\Documents and Settings\David\Configuración local\Datos de programa\HP\Digital Imaging\db\albumTable.cdx Object is locked skipped
C:\Documents and Settings\David\Configuración local\Datos de programa\HP\Digital Imaging\db\albumTable.dbf Object is locked skipped
C:\Documents and Settings\David\Configuración local\Datos de programa\HP\Digital Imaging\db\CB_Server_Errors.txt Object is locked skipped
C:\Documents and Settings\David\Configuración local\Datos de programa\HP\Digital Imaging\db\EXIFTable.cdx Object is locked skipped
C:\Documents and Settings\David\Configuración local\Datos de programa\HP\Digital Imaging\db\EXIFTable.dbf Object is locked skipped
C:\Documents and Settings\David\Configuración local\Datos de programa\HP\Digital Imaging\db\imageTable.cdx Object is locked skipped
C:\Documents and Settings\David\Configuración local\Datos de programa\HP\Digital Imaging\db\imageTable.dbf Object is locked skipped
C:\Documents and Settings\David\Configuración local\Datos de programa\HP\Digital Imaging\db\imageTable.fpt Object is locked skipped
C:\Documents and Settings\David\Configuración local\Datos de programa\HP\Digital Imaging\db\keywordImagesTable.cdx Object is locked skipped
C:\Documents and Settings\David\Configuración local\Datos de programa\HP\Digital Imaging\db\keywordImagesTable.dbf Object is locked skipped
C:\Documents and Settings\David\Configuración local\Datos de programa\HP\Digital Imaging\db\keywordTable.cdx Object is locked skipped
C:\Documents and Settings\David\Configuración local\Datos de programa\HP\Digital Imaging\db\keywordTable.dbf Object is locked skipped
C:\Documents and Settings\David\Configuración local\Datos de programa\HP\Digital Imaging\db\managedFolderTable.dbf Object is locked skipped
C:\Documents and Settings\David\Configuración local\Datos de programa\HP\Digital Imaging\db\pathnameTable.cdx Object is locked skipped
C:\Documents and Settings\David\Configuración local\Datos de programa\HP\Digital Imaging\db\pathnameTable.dbf Object is locked skipped
C:\Documents and Settings\David\Configuración local\Datos de programa\HP\Digital Imaging\db\propertiesTable.cdx Object is locked skipped
C:\Documents and Settings\David\Configuración local\Datos de programa\HP\Digital Imaging\db\propertiesTable.dbf Object is locked skipped
C:\Documents and Settings\David\Configuración local\Datos de programa\HP\Digital Imaging\db\ROFImagesTable.cdx Object is locked skipped
C:\Documents and Settings\David\Configuración local\Datos de programa\HP\Digital Imaging\db\ROFImagesTable.dbf Object is locked skipped
C:\Documents and Settings\David\Configuración local\Datos de programa\HP\Digital Imaging\db\ROFTable.cdx Object is locked skipped
C:\Documents and Settings\David\Configuración local\Datos de programa\HP\Digital Imaging\db\ROFTable.dbf Object is locked skipped
C:\Documents and Settings\David\Configuración local\Datos de programa\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\David\Configuración local\Datos de programa\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\David\Configuración local\Historial\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\David\Configuración local\Historial\History.IE5\MSHist0120061213200612 14\index.dat Object is locked skipped
C:\Documents and Settings\David\Configuración local\Temp\hpodvd09.log Object is locked skipped
C:\Documents and Settings\David\Configuración local\Temp\ngylorww.dll Infected: Trojan-Spy.Win32.VBStat.h skipped
C:\Documents and Settings\David\Configuración local\Temp\tbkxidmo.dll Infected: Trojan-Spy.Win32.VBStat.h skipped
C:\Documents and Settings\David\Configuración local\Temp\_hphtra07.log Object is locked skipped
C:\Documents and Settings\David\Configuración local\Temp\~DFE0DF.tmp Object is locked skipped
C:\Documents and Settings\David\Configuración local\Temp\~DFE862.tmp Object is locked skipped
C:\Documents and Settings\David\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\David\Datos de programa\Roxio\MediaManager8\Album.ldb Object is locked skipped
C:\Documents and Settings\David\Datos de programa\Roxio\MediaManager8\Album.psod Object is locked skipped
C:\Documents and Settings\David\ntuser.dat Object is locked skipped
C:\Documents and Settings\David\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\LocalService\Configuración local\Archivos temporales de Internet\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Configuración local\Datos de programa\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\LocalService\Configuración local\Datos de programa\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\LocalService\Configuración local\Historial\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\ntuser.dat Object is locked skipped
C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\Configuración local\Datos de programa\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\NetworkService\Configuración local\Datos de programa\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\ntuser.dat Object is locked skipped
C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked skipped
C:\VundoFix Backups\ssqpo.dll.bad Infected: not-a-virus:AdWare.Win32.Virtumonde.fj skipped
C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped
C:\WINDOWS\SchedLgU.Txt Object is locked skipped
C:\WINDOWS\SoftwareDistribution\ReportingEvents.lo g Object is locked skipped
C:\WINDOWS\Sti_Trace.log Object is locked skipped
C:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\default Object is locked skipped
C:\WINDOWS\system32\config\default.LOG Object is locked skipped
C:\WINDOWS\system32\config\SAM Object is locked skipped
C:\WINDOWS\system32\config\SAM.LOG Object is locked skipped
C:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\SECURITY Object is locked skipped
C:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped
C:\WINDOWS\system32\config\software Object is locked skipped
C:\WINDOWS\system32\config\software.LOG Object is locked skipped
C:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\system Object is locked skipped
C:\WINDOWS\system32\config\system.LOG Object is locked skipped
C:\WINDOWS\system32\drivers\dtscsi.sys Object is locked skipped
C:\WINDOWS\system32\drivers\fidbox.dat Object is locked skipped
C:\WINDOWS\system32\drivers\fidbox.idx Object is locked skipped
C:\WINDOWS\system32\drivers\fidbox2.dat Object is locked skipped
C:\WINDOWS\system32\drivers\fidbox2.idx Object is locked skipped
C:\WINDOWS\system32\drivers\sptd.sys Object is locked skipped
C:\WINDOWS\system32\drivers\sptd6589.sys Object is locked skipped
C:\WINDOWS\system32\h323log.txt Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DAT A Object is locked skipped
C:\WINDOWS\Temp\JET92D9.tmp Object is locked skipped
C:\WINDOWS\Temp\~DFF0B2.tmp Object is locked skipped
C:\WINDOWS\wiadebug.log Object is locked skipped
C:\WINDOWS\wiaservc.log Object is locked skipped
C:\WINDOWS\WindowsUpdate.log Object is locked skipped

Scan process completed.

Hola

Sí, vacía esa carpeta con Backups
Además borrá estos dos archivos con el Killbox:
C:\Documents and Settings\David\Configuración local\Temp\ngylorww.dll Infected: Trojan-Spy.Win32.VBStat.h skipped
C:\Documents and Settings\David\Configuración local\Temp\tbkxidmo.dll
Luego, volvé a ejecutar VundoFix y nos conseguis un nuevo reporte de Kaspersky Online.

Salu2