Hola. soy nueva en este foro asi que no se cuanto tardan en responder, pero ojala sea pronto POR FAVOR!
El caso es que al iniciar el ordenador, me marca que el archivo C:\WINDOWS\ntvdm.exe no se encuentra y que si deseo buscarlo vaya a inicio/buscar. eso solo es una ventana, pero aparte, me aparece que el Editor del Registro esta bloqueado por el administrador. esto ya me habia pasado antes (lo del registro) asi que lo he desbloqueado ya, pero el (o lo que era el virus) no deja de darme lata.
Analice mi computadora con el antivirus y me detecto, precisamente esta misma direccion como un troyano, lo elimine, y aun asi sigue apareciendo. Me ayudan? De antemano, muchas gracias.

Hola Xtina*

Realiza los siguientes pasos sin saltarte ninguno, por favor

«Paso 1» Descarga las siguientes herramientas, actualiza las que correspondan, pero no las ejecutes aún

(Es posible que el antivirus que tengas instalado te advierta de una infección en SDFix, es debido al tipo de código pero no te preocupes por ello, permite el paso de la herramienta)

• SDFix
• SuperAntiSpyware
• Ccleaner(Manual)

(Es posible que el antivirus que tengas instalado te advierta de una infección en SDFix, es debido al tipo de código pero no te preocupes por ello, permite el paso de la herramienta)

«Paso 5» Usa el Ccleaner para limpiar el sistema,primero utilizá la opción de "Limpiador" para borrar cookies, temporales de Internet y todos los archivos que este te muestre como obsoletos.y luego usa su opción de "Registro" para limpiar todo el registro de Windows (haciendo copia de seguridad).

«Paso 6» Ejecuta SDFix.exe en el escritorio, se creará una nueva carpeta en el escritorio, entra en dicha carpeta y ejecuta el archivo "Runthis.bat" luego, presiona la tecla "Y" para que comience el chequeo, al terminar, se creará un archivo dentro de la carpeta llamado Report.txt, copia y pega lo que indique ese reporte acá.

«Paso 7» Ejecuta SuperAntiSpyware y tú antivirus (previamente actualizado)

«Paso 8» Reinicia el PC a "Modo normal"

«Paso 9» Instálate el SpywareBlaster 3.4 Manual

«Paso 10» Elimina todas las cuarentenas que tengas y vacia la papelera tambien.

«Paso 11» Ejecuta solamente y nuevamente SuperAntiSpyware

«Paso 12» Pasa 2 antivirus online el Ewido Scanner Online (Cuando termine el análisis debes darle al botón Remove Infections) y Kaspersky Online Scanner (Este no elimina, asi que debes pegar el reporte, para que te indiquemos los pasos a seguir)

» Cuando termines los pasos Activa restaurar sistema y esconde los archivos ocultos...

» De preferencia, imprime las indicaciones para que se te haga más fácil seguirlas.

salu2
Recuerda volver y contarnos los resultados

Hooola de nuevo.
Estoy muy contenta y muy confundida a la vez jeje.
Lo importante es que segui cada uno de los pasos que me recomendaste, que por cierto, MUCHISIMAS GRACIAS! pues mi computadora... medio se desinfecto, hasta esta mas rapida. A demas, aqui les anexo lo que me pidieron para que porfa me digan que mas puedo hacer, ahora que detecte 3 de los como 15 virus que tenia mi computadora (de los otros ya me desice durante el proceso) y de los como 18 spyware que tenia.
Aqui esta el resultado:
Cuando ejecute el SDFix.exe, me mando al Norman, que produjo lo siguiente:
Norman Malware Cleaner
Copyright © 1990 - 2007, Norman ASA. Built 2007/06/18 08:38:59

Norman Scanner Engine Version: 5.91.02
Nvcbin.def Version: 5.90.00, Date: 2007/06/18 08:38:59, Variants: 1
Nvcmacro.def Version: 5.90.00, Date: 2007/06/18 08:38:59, Variants: 12
Running pre-scan cleanup routine:
Operating System: Microsoft Windows XP Professional 5.1.2600
Logged on user: CCS-PAY3IGAMSJR\cristy

Set registry value: HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell = "Explorer.exe %WINDIR%\ntvdm.exe" -> "Explorer.exe"
Removed registry value: HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVer sion\Policies\System -> DisableRegistryTools = 0x00000001

Scan started: 09/07/2007 15:12:42


Scanning running processes and process memory...

Number of processes/threads found: 1339
Number of processes/threads scanned: 1339
Number of processes/threads not scanned: 0
Number of infected processes/threads terminated: 0
Total scanning time: 39s


Scanning file system...

Scanning: C:\*.*

C:\System Volume Information\_RESTO~1\RP105\A0122200.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP105\A0122201.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP105\A0122202.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP105\A0122203.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP105\A0122250.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP105\A0122251.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP105\A0122252.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP105\A0122253.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP105\A0123250.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP105\A0123251.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP105\A0123252.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP105\A0123253.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP106\A0123373.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP106\A0123374.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP106\A0123375.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP106\A0123376.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP106\A0123383.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP106\A0123384.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP106\A0123385.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP106\A0123386.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP109\A0123584.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP109\A0123585.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP109\A0123586.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP109\A0123587.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP110\A0124603.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP110\A0124604.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP110\A0124605.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP110\A0124606.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP110\A0124659.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP110\A0124660.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP110\A0124661.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP110\A0124662.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP110\A0124668.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP110\A0124669.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP110\A0124670.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP110\A0124671.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP110\A0124683.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP110\A0124684.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP110\A0124685.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP110\A0124686.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP111\A0124700.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP111\A0124701.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP111\A0124702.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP111\A0124703.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP111\A0125700.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP111\A0125701.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP111\A0125702.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP111\A0125703.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP111\A0125713.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP111\A0125714.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP111\A0125715.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP111\A0125716.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP111\A0125722.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP111\A0125723.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP111\A0125724.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP111\A0125725.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP111\A0126722.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP111\A0126723.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP111\A0126724.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP111\A0126725.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP111\A0126746.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP111\A0126747.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP111\A0126748.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP111\A0126749.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP111\A0127745.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP111\A0127746.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP111\A0127747.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP111\A0127748.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP112\A0127781.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP112\A0127782.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP112\A0127783.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP112\A0127784.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP112\A0128780.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP112\A0128781.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP112\A0128782.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP112\A0128783.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP112\A0129780.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP112\A0129781.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP112\A0129782.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP112\A0129783.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP112\A0129793.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP112\A0129794.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP112\A0129795.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP112\A0129796.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP112\A0129812.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP112\A0129813.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP112\A0129815.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP112\A0129816.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP112\A0130813.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP112\A0130814.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP112\A0130815.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP112\A0130816.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP112\A0130831.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP112\A0130832.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP112\A0130833.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP112\A0130834.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP112\A0130845.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP112\A0130846.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP112\A0130847.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP112\A0130848.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP112\A0130863.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP112\A0130864.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP112\A0130865.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP112\A0130866.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP112\A0131864.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP112\A0131865.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP112\A0131866.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP112\A0131867.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP113\A0131890.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP113\A0131891.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP113\A0131892.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP113\A0131893.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP113\A0132891.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP113\A0132892.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP113\A0132893.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP113\A0132894.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP113\A0132917.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP113\A0132918.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP113\A0132919.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP113\A0132920.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP113\A0132938.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP113\A0132939.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP113\A0132940.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP113\A0132941.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP113\A0132949.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP113\A0132950.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP113\A0132951.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP113\A0132952.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP113\A0132965.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP113\A0132966.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP113\A0132967.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP113\A0132968.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP113\A0133965.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP113\A0133966.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP113\A0133967.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP113\A0133968.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP113\A0133980.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP113\A0133981.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP113\A0133982.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP113\A0133983.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP113\A0134980.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP113\A0134981.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP113\A0134982.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP113\A0134983.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP113\A0134990.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP113\A0134991.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP113\A0134992.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP113\A0134993.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP113\A0134997.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP113\A0134998.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP113\A0134999.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP113\A0135000.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP113\A0135006.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP113\A0135007.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP113\A0135008.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP113\A0135009.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP114\A0136032.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP114\A0136033.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP114\A0136034.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP114\A0136035.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP115\A0137006.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP115\A0137007.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP115\A0137008.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP115\A0137009.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP115\A0137151.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP115\A0137152.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP115\A0137153.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\System Volume Information\_RESTO~1\RP115\A0137154.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\WINDOWS\system32\ftp.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\WINDOWS\system32\tftp.exe (Infected with W32/SDBot.ALYX)
Deleted file

C:\WINDOWS\system32\dllcache\ftp.exe (Infected with W32/SDBot.ALYX)

A fatal error occured whilst scanning.
0xC0000005 (100091B4)

Despues de eso, ejecute el SAS y el AV al mismo tiempo, y la reinicie.
Tuve un error al iniciar que me dijo que no podia accesar al sistema por un error de 0XC00000BB, pero accese por medio del "ultima configuracion buena que funciono" del menu mmm k no se como se llama (lo importante es que entre).
Despues de hacer todo lo demas, ejecute el Kaspersky y me produjo lo siguiente:
-------------------------------------------------------------------------------
KASPERSKY ONLINE SCANNER REPORT
Monday, July 09, 2007 10:17:18 PM
Operating System: Microsoft Windows XP Professional, (Build 2600)
Kaspersky Online Scanner version: 5.0.93.0
Kaspersky Anti-Virus database last update: 10/07/2007
Kaspersky Anti-Virus database records: 360360
-------------------------------------------------------------------------------

Scan Settings:
Scan using the following antivirus database: extended
Scan Archives: true
Scan Mail Bases: true

Scan Target - My Computer:
A:\
C:\
D:\

Scan Statistics:
Total number of scanned objects: 42401
Number of viruses found: 3
Number of infected objects: 5
Number of suspicious objects: 0
Duration of the scan process: 01:20:59

Infected Object Name / Virus Name / Last Action
C:\Archivos de programa\ESET\logs\virlog.dat Object is locked skipped
C:\Archivos de programa\ESET\logs\warnlog.dat Object is locked skipped
C:\Documents and Settings\All Users\Datos de programa\Microsoft\Network\Downloader\qmgr0.dat Object is locked skipped
C:\Documents and Settings\All Users\Datos de programa\Microsoft\Network\Downloader\qmgr1.dat Object is locked skipped
C:\Documents and Settings\cristy\Configuración local\Archivos temporales de Internet\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\cristy\Configuración local\Datos de programa\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\cristy\Configuración local\Datos de programa\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\cristy\Configuración local\Datos de programa\Mozilla\Firefox\Profiles\6aa3ok77.default \Cache\_CACHE_001_ Object is locked skipped
C:\Documents and Settings\cristy\Configuración local\Datos de programa\Mozilla\Firefox\Profiles\6aa3ok77.default \Cache\_CACHE_002_ Object is locked skipped
C:\Documents and Settings\cristy\Configuración local\Datos de programa\Mozilla\Firefox\Profiles\6aa3ok77.default \Cache\_CACHE_003_ Object is locked skipped
C:\Documents and Settings\cristy\Configuración local\Datos de programa\Mozilla\Firefox\Profiles\6aa3ok77.default \Cache\_CACHE_MAP_ Object is locked skipped
C:\Documents and Settings\cristy\Configuración local\Historial\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\cristy\Configuración local\Historial\History.IE5\MSHist0120070709200707 10\index.dat Object is locked skipped
C:\Documents and Settings\cristy\Configuración local\Temp\hpodvd09.log Object is locked skipped
C:\Documents and Settings\cristy\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\cristy\Datos de programa\Mozilla\Firefox\Profiles\6aa3ok77.default \cert8.db Object is locked skipped
C:\Documents and Settings\cristy\Datos de programa\Mozilla\Firefox\Profiles\6aa3ok77.default \formhistory.dat Object is locked skipped
C:\Documents and Settings\cristy\Datos de programa\Mozilla\Firefox\Profiles\6aa3ok77.default \history.dat Object is locked skipped
C:\Documents and Settings\cristy\Datos de programa\Mozilla\Firefox\Profiles\6aa3ok77.default \key3.db Object is locked skipped
C:\Documents and Settings\cristy\Datos de programa\Mozilla\Firefox\Profiles\6aa3ok77.default \parent.lock Object is locked skipped
C:\Documents and Settings\cristy\Datos de programa\Mozilla\Firefox\Profiles\6aa3ok77.default \search.sqlite Object is locked skipped
C:\Documents and Settings\cristy\Datos de programa\Mozilla\Firefox\Profiles\6aa3ok77.default \urlclassifier2.sqlite Object is locked skipped
C:\Documents and Settings\cristy\Datos de programa\SUPERAntiSpyware.com\SUPERAntiSpyware\SUP ERANTISPYWARE.LOG Object is locked skipped
C:\Documents and Settings\cristy\Mis documentos\peliculas y DivX\DivX\DIVXPRO502GAINBUNDLE.EXE/Gain_Trickler.exe Infected: not-a-virus:AdWare.Win32.Gator.3202 skipped
C:\Documents and Settings\cristy\Mis documentos\peliculas y DivX\DivX\DIVXPRO502GAINBUNDLE.EXE Vise: infected - 1 skipped
C:\Documents and Settings\cristy\ntuser.dat Object is locked skipped
C:\Documents and Settings\cristy\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\LocalService\Configuración local\Archivos temporales de Internet\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Configuración local\Datos de programa\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\LocalService\Configuración local\Datos de programa\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\LocalService\Configuración local\Historial\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\Configuración local\Datos de programa\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\NetworkService\Configuración local\Datos de programa\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked skipped
C:\System Volume Information\_restore{B3F799F9-5DDC-4517-986A-E7956C646C60}\RP116\A0140144.exe Infected: Backdoor.Win32.SdBot.bjk skipped
C:\System Volume Information\_restore{B3F799F9-5DDC-4517-986A-E7956C646C60}\RP116\A0140145.exe Infected: Backdoor.Win32.SdBot.bjk skipped
C:\System Volume Information\_restore{B3F799F9-5DDC-4517-986A-E7956C646C60}\RP116\change.log Object is locked skipped
C:\WINDOWS\Debug\oakley.log Object is locked skipped
C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped
C:\WINDOWS\SchedLgU.Txt Object is locked skipped
C:\WINDOWS\SoftwareDistribution\ReportingEvents.lo g Object is locked skipped
C:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\default Object is locked skipped
C:\WINDOWS\system32\config\default.LOG Object is locked skipped
C:\WINDOWS\system32\config\SAM Object is locked skipped
C:\WINDOWS\system32\config\SAM.LOG Object is locked skipped
C:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\SECURITY Object is locked skipped
C:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped
C:\WINDOWS\system32\config\software Object is locked skipped
C:\WINDOWS\system32\config\software.LOG Object is locked skipped
C:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\system Object is locked skipped
C:\WINDOWS\system32\config\system.LOG Object is locked skipped
C:\WINDOWS\system32\h323log.txt Object is locked skipped
C:\WINDOWS\system32\i Infected: Trojan-Downloader.BAT.Ftp.ab skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DAT A Object is locked skipped
C:\WINDOWS\WindowsUpdate.log Object is locked skipped

Scan process completed.

------
Bueno. Ese es el resultado. ahora... ¿que hago?
Subraye los virus para que no les costara tanto trabajo verlo.
Ojala pudieran ayudarme d nuevo, se los agradezco en el alma!
Atte. Xtina*

Hola

1. - Apagá Restaurar Sistema.
2. - Eliminá estos dos archivos:

• C:\WINDOWS\system32\i
• C:\Documents and Settings\cristy\Mis documentos\peliculas y DivX\DivX\DIVXPRO502GAINBUNDLE.EXE

3. - Reiniciá el equipo.
4. - Reactivá Restaurar Sistema.

Salu2