Hello friends
I need help to remove a virus from pc rootkits.
This is the log that shows the aswMBR version 0.9.9.1771
aswMBR version 0.9.9.1771 Copyright(c) 2011 AVAST Software
Run date: 2013-04-02 17:20:44
17:20:44.812 OS Version: Windows 5.1.2600 Service Pack 2
17:20:44.812 Number of processors: 2 586 0x409
17:20:44.828 ComputerName: WINDOWS-0BE67BA UserName: Usuario…xp
17:20:47.062 Initialize success
17:20:52.843 AVAST engine defs: 13040201
17:21:09.796 Disk 0 (boot) \Device\Harddisk0\DR0 → \Device\Ide\IdeDeviceP0T0L0-3
17:21:09.796 Disk 0 Vendor: HDS728080PLAT20 PF2OA2AA Size: 78533MB BusType: 3
17:21:09.828 Disk 0 MBR read successfully
17:21:09.828 Disk 0 MBR scan
17:21:09.828 Disk 0 Windows XP default MBR code
17:21:09.843 Disk 0 Partition 1 80 (A) 07 HPFS/NTFS NTFS 39997 MB offset 63
17:21:09.859 Disk 0 Partition - 00 0F Extended LBA 38523 MB offset 81915435
17:21:09.875 Disk 0 Partition 2 00 07 HPFS/NTFS NTFS 38523 MB offset 81915498
17:21:09.890 Disk 0 scanning sectors +160810650
17:21:09.968 Disk 0 scanning C:\WINDOWS\system32\drivers
17:21:23.031 Service scanning
17:21:27.062 Service COMSysApp C:\WINDOWS\system32\dllhost.exe INFECTED Win32:Evo-gen [Susp]
17:21:39.640 Service sptd C:\WINDOWS\System32\Drivers\sptd.sys LOCKED 32
17:21:40.234 Service SwPrv C:\WINDOWS\system32\dllhost.exe INFECTED Win32:Evo-gen [Susp]
17:21:46.734 Modules scanning
17:22:01.328 Disk 0 trace - called modules:
17:22:01.343 ntoskrnl.exe CLASSPNP.SYS disk.sys ACPI.sys hal.dll >>UNKNOWN [0x82bdf1f8]<<
17:22:01.343 1 nt!IofCallDriver → \Device\Harddisk0\DR0[0x82bd5ab8]
17:22:01.343 3 CLASSPNP.SYS[f85c305b] → nt!IofCallDriver → \Device\0000006a[0x82afaf18]
17:22:01.359 5 ACPI.sys[f842d620] → nt!IofCallDriver → \Device\Ide\IdeDeviceP0T0L0-3[0x82bd7608]
17:22:01.359 \Driver\atapi[0x82bd7f38] → IRP_MJ_CREATE → 0x82bdf1f8
17:22:01.906 AVAST engine scan C:\WINDOWS
17:22:05.968 AVAST engine scan C:\WINDOWS\system32
17:22:10.437 File: C:\WINDOWS\system32\bootok.exe INFECTED Win32:Evo-gen [Susp]
17:22:10.500 File: C:\WINDOWS\system32\bootvrfy.exe INFECTED Win32:Evo-gen [Susp]
17:22:10.953 File: C:\WINDOWS\system32\cacls.exe INFECTED Win32:Evo-gen [Susp]
17:22:24.078 File: C:\WINDOWS\system32\dllhost.exe INFECTED Win32:Evo-gen [Susp]
17:22:24.125 File: C:\WINDOWS\system32\dllhst3g.exe INFECTED Win32:Evo-gen [Susp]
17:22:27.953 File: C:\WINDOWS\system32\dvdplay.exe INFECTED Win32:Evo-gen [Susp]
17:22:28.046 File: C:\WINDOWS\system32\dwwin.exe INFECTED Win32:Evo-gen [Susp]
17:22:30.359 File: C:\WINDOWS\system32\eventvwr.exe INFECTED Win32:Evo-gen [Susp]
17:22:56.625 File: C:\WINDOWS\system32\lodctr.exe INFECTED Win32:Evo-gen [Susp]
17:23:03.484 File: C:\WINDOWS\system32\mqsvc.exe INFECTED Win32:Evo-gen [Susp]
17:23:03.765 File: C:\WINDOWS\system32\mrinfo.exe INFECTED Win32:Evo-gen [Susp]
17:23:26.281 File: C:\WINDOWS\system32\pentnt.exe INFECTED Win32:Evo-gen [Susp]
17:23:33.234 File: C:\WINDOWS\system32\regwiz.exe INFECTED Win32:Evo-gen [Susp]
17:23:39.750 File: C:\WINDOWS\system32\skeys.exe INFECTED Win32:Evo-gen [Susp]
17:23:47.906 File: C:\WINDOWS\system32\unlodctr.exe INFECTED Win32:Evo-gen [Susp]
17:24:02.500 File: C:\WINDOWS\system32\wpnpinst.exe INFECTED Win32:Evo-gen [Susp]
17:24:02.562 File: C:\WINDOWS\system32\write.exe INFECTED Win32:Evo-gen [Susp]
17:24:42.031 AVAST engine scan C:\WINDOWS\system32\drivers
17:24:52.609 AVAST engine scan C:\Documents and Settings\Usuario…xp
17:30:02.453 Disk 0 MBR has been saved successfully to “D:\Documents and Settings\Usuario…xp\Mis documentos\MBR.dat”
17:30:02.687 The log file has been saved successfully to “D:\Documents and Settings\Usuario…xp\Mis documentos\aswMBR.txt”
17:30:46.968 File: C:\Documents and Settings\Usuario…xp\Configuración local\Datos de programa\Xenocode\Sandbox\Decrypter\0.8.1.2\2010.03.07T12.40\Virtual\STUBEXE\8.0.1112@DOCUMENTS@\Descargas\Decrypter_v0.8.1.2\Decrypter_v0.8.1.2.exe INFECTED Ac?
17:33:27.890 AVAST engine scan C:\Documents and Settings\All Users
17:35:14.406 Scan finished successfully
Thanks
Help Please!!!