Rootkit.Win32.TDSS can't be delete !

[gelanor]

Thanks for your help. I'm a little bit lost.

[Aleksandra]

Make a log of GMER http://virusinfo.info/showthread.php?t=51878

[gelanor]

Here is the log file and also a log from TDSSKiller.
Thanks

[Rene-gad]

Switch off/Disable:
- Antivirus and and, if you have - Firewall.
- System Restore
- Execute following script in Manual disinfection

begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
ClearQuarantine;
QuarantineFile('C:\WINDOWS\system32\drivers\isapnp.sys','');
QuarantineFile('C:\WINDOWS\system32\drivers\nvatabus.sys','');
BC_ImportAll;
BC_Activate;
SetAVZPMStatus(True);
RebootWindows(true);
end.

After reboot execute following script in Manual disinfection

begin
CreateQurantineArchive('C:\quarantine.zip');
end.

and upload the C:\quarantine.zip over the link Upload quarantined files on the top of this page.

- Repeat a log file of AVPTool.

[gelanor]

The files isapnp.sys and nvatabus.sys are still presents in the system folder after the quarantine.

[Rene-gad]

The files isapnp.sys and nvatabus.sys are still presents in the system folder after the quarantine.

they aren't bad, we won't remove them.
Install Service Pack 3 for Windows XP, all subsequent updates, Internet Explorer 8.
Logfile seems to be clean.

[gelanor]

After Service Pack 3 for Windows XP update, the rookit has been delete.
Thanks for all !!!

[CyberHelper]

Статистика проведенного лечения:

• Получено карантинов: 2
• Обработано файлов: 6
• В ходе лечения вредоносные программы в карантинах не обнаружены