Hola, Por favor necesito de vuestra ayuda!!

[FONT=Times New Roman]Bueno... yo descarguй Kaskersky Virus Removal Tool porque se me habнa infectado la pc con no se que virus y que entre otras cosas me abrнa ventanas del explorador de internet y me habнa infectado el archivo winlogon.exe. Eso al parecer ya lo pude solucionar, pero al usar la secciуn Manual Cure de Kaspersky Tool me salen algunas cosas en color amarillo en el informe del mismo.En esa secciуn de Kaspersky Tools dice [B]1-colecte informaciуn y que luego 2-envнe esa informaciуn a los analistas y 3- cuando reciba un script del sitio lo pegue en Kaspersky Tool/ Manual Cure y lo ejecute.[/B] [/FONT]
[FONT=Times New Roman]Bueno les adjunto el archivo generado por Kaspersky Tool para que ustedes lo vean y me digan que debo hacer, si existe un script del sitio de Kaspersky para ejecutarlo y arreglar mi pc.[/FONT]
[FONT=Times New Roman][/FONT]
[FONT=Times New Roman]Los saludo atentamente.[/FONT]
[FONT=Times New Roman][/FONT]
[FONT=Times New Roman] Y muchisimas gracias.[/FONT]
[FONT=Times New Roman][/FONT]
[FONT=Times New Roman] Rubйn.[/FONT]
[FONT=Times New Roman][/FONT]
[FONT=Times New Roman][/FONT]

We don't known spanish, can you write in plant english?
Nevertheless, we would like to see copy of some files from your system. In order to do this, you should execute the following script at avptool:

[code]begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
QuarantineFile('C:\WINDOWS\System32\Drivers\aswSP.SYS','');
QuarantineFile('C:\ARCHIV~1\DAP\dapie.dll','');
QuarantineFile('C:\Archivos de programa\DAP\DAPNS.DLL','');
QuarantineFile('C:\WINDOWS\system32\we5.dll','');
QuarantineFile('C:\Archivos de programa\Internet Download Manager\IDMIECC.dll','');
QuarantineFile('C:\WINDOWS\system32\DRIVERS\sr.sys','');
QuarantineFile('C:\WINDOWS\System32\drivers\6058ed82.sys','');
BC_ImportAll;
BC_Activate;
RebootWindows(true);
end.
[/code]
Pack ( zip) (with pass 'virus') "Qurantine_AVZ" ( it is subfolder where your avptool exist)
Please upload it by link [url]http://virusinfo.info/upload_virus_eng.php?tid=33693[/url]

Hi, well my English it's not so good ( i am learnig) but i will du my best.

First: tanks you for answer me.
My last message say: Hi, i need your help please (title)

Well i download Kaspersky Virus Removal Tool because my computer has infected...
... in the section Manual Cure of the program say 1є collect system information, 2є send the report to analyst and follow the instruction and 3є when you recieve a script from the site, paste it here and press execute button.
Well... some virus i do have eliminate of my pc, but it's still do rare tings and am very sure the computer it's not 100% clean; the explorer.exe still so rare and use much memory, explorer every time work on 20KB and up, one of the svchost.exe do that too; and now with any thing what i open (archive .txt, folders, programs, etc. ) some little window make appear with this words "The aplication or DLL globalroot\systemroot\system32\TDSSacun.dll it's not a valid image of Windows (XP). Verify that with your instalation disk.

Some virus that bin in my computer were related with [COLOR="Red"]TDSS*.dll, TDSSS*.dll [/COLOR]and other more, no remember now.

Pdata: I have execute the script you give me and upload the generate archive in the link [url]http://virusinfo.info/upload[/url]... like you say me.

Pdata 2: Sorry for my English, i sure continue learning this idiom.

Tanks for the help.
Rubйn.

Try again upload by : [url]http://virusinfo.info/upload_virus_eng.php?tid=33693[/url]
We didn't get it yet.

Done!!
When upload ready, on the page say "Upload result
File saved as 081114_075244_000f_AVZ_Scan_eventlog_491d82ac1788a.zip
File size 6281
MD5 a01ba701378fb63e4c695df6dfa18b71

File uploaded, thank you!"

Well, you did send us some report and not files, that i did requested from you. Perhaps it because misunderstanding or bug of the avptool. I don't know.
In order to solve this litle problem, please download avz, unzip it to some new folder, run avz.exe and execute my script there.Then send us quarantine, like it described in the rules

[quote=drongo;309710]Well, you did send us some report and not files, that i did requested from you. Perhaps it because misunderstanding or bug of the avptool. I don't know.
In order to solve this litle problem, please download avz, unzip it to some new folder, run avz.exe and execute my script there.Then send us quarantine, like it described in the rules[/quote]
---------------------------------------------------------------------------

Am sorry, may be i have no understand.
Here i go again, but whit sometingh more. And it's that:

Whit an antirootkit i have detected possible some rootkit, on the folder system32\drivers i can't see the file but whit the program Regscanner yes, i can se the file on the system registry (regedit). I have upload too a file where copied the entries on the system registry.
The thing is... whit the antirootkit i delete te file and reebot my pc (the program ask me that) and delete too the entries on the system registry, but when i back of the reebot i pass again the antirootkit and he finde other one whit a diferent name, and never end that.
Can you tell me what it's all that and what i have to do, Please

Padata: sr Moderator you requested some file from the quarantine folder, well thear have 2 folder whit similar name, but one it's empty; so i upload 3 zip file whit all haven in the folder quarantine: File saved as 081115_140729_AVP Quarantine 13-11-2008_491f2c016bb81.zip
File size 2256358
MD5 dbfb0cf97817c2cb5098ff8a09ad9bc2, File saved as 081115_141458_AVP Quarantine 14-11-2008_491f2dc2ae4b4.zip
File size 2256358
MD5 0b931e321284430af9e44b1536b453b2
and File saved as 081115_142303_AVP Quarantine 15-11-2008_491f2fa762335.zip
File size 2256358
MD5 720e4c024aa10157e61bbcd8fcc04012
, and the other one file File saved as 081115_141647_one rootkit_491f2e2fc273d.zip
File size 496
MD5 c437ed9d03dd4e5342f744c062e72d59; whit the last may be you can see and tell me what happening.

Hope you can help me.
Thankz very much.

Well, first of all it's hard to understand what are you doing. Did you have some disk emulation programs?
Please don't do anything without our instructions.
Lets start from beginning:
Please read and follow carefully: [url]http://virusinfo.info/showthread.php?t=9184[/url]
use a dictionary, if you unable to understand something.
We will wait from you for all 3 new logs, in this topic.
P.s.We did received your files, thanks. I think they are clean. Nevertheless, we will get an answer from the antivirus lab soon.

[quote=drongo;310187]Well, first of all it's hard to understand what are you doing. Did you have some disk emulation programs?
Please don't do anything without our instructions.
Lets start from beginning:
Please read and follow carefully: [URL]http://virusinfo.info/showthread.php?t=9184[/URL]
use a dictionary, if you unable to understand something.
We will wait from you for all 3 new logs, in this topic.
P.s.We did received your files, thanks. I think they are clean. Nevertheless, we will get an answer from the antivirus lab soon.[/quote]
----------------------------------------------------------------------

Sorry, but you not give me a minimal solution at last. You say my computer it's clean but i am sure it's not because after i upload the 4 file for you i have pass AVG Internet Security 8 and he finde 4 hiden virus on system 32, and an antirootkit finde a hiden driver on system 32\drivers but after delete this hiden file and reboot the pc agains it's thear; i can't see the file on the folder but yes on the system registry (regedit), thats meants my computer have some virus whats reproduce again the hiden driver i have delete. The rare of the case it's 4 antivirus (including Kaspersky and Kaspersky Removal Tool) and a antispyware can't finde them.

Anyway... thanks you very much for all. Can you close this threat if you will.

Some day i finde the solution or do format to my pc.

Bye.

Pdata: no offense to you.