Réparer les dégats de trojan.win32.vb.gq

Salut à tous,
J'ai besoin de votre aide!

Ma configuration : win xp où j'ai déjà essayé de faire la restauration, mais seulement le seul point de restauration que je retrouve est celui d'aujourd'hui

Mon Pb : Kaspersky antivirus a détecté et éliminé le virus qu'il nomme trojan.win32.vb.gq de ma machine mais seulement, il n'a pas réparé les dégats causé par ce virus. maintenant impossible d'ouvrir mes fichiers m'affichent comme contenu :

"Virus MlourdesHReloaded II ha atakdo esta computadora"
"Virus 100% Méxicano, no es muy peligroso que digamos"
"Pero tu has sido el rival más débil ¡Adios!"
"Saludos a Ana Paty de Sinaloa y a Gedzac Labs"
"Espero y se hallan pasado una feliz Navidad y un próspero año nuevo"
"Feliz 2004 para todos"
"Para mayor información enviar un e-mail a tips@esmas.com"
"donde hablamos de computación en tu idioma"
""
"*-Dime solo esta vez, que has pensado... solo esta vez -*"


j'ai également la procédure d'élimination manuelle que j'ai trouvé :

"
Details:

Installation and Autostart 

Upon execution, the malware drops and opens the host document file attached to its body in the current directory. This document file will inherit the file name of the executable file but with a .DOC extension. 

The malware then drops its virus code as LSASS.EXE in the Windows directory. 

It creates the following registry entry so that it executes at every system startup: 

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Run
Winlogon = "%Windows%\Lsass.exe" 

(Note: %Windows% directory is usually C:\WINNT in Windows NT and 2000 and C:\WINDOWS in Windows 95, 98, ME and XP. 

File Infection 

This virus infects MS Word documents (.DOC) by inserting its malicious code of 49,152 Bytes at the beginning of the host file. It may also infect in the floppy drives. 

After infection, this virus renames the extension from DOC into EXE. 

Once the infected file is executed, the virus extracts the host document file into the current directory and renames the extension back to DOC. The virus then opens the .DOC file and drops a copy of itself in the Windows directory. 

Payload 

After few hours on its residency, this malware attempts to overwrite all files in the local drives including floppy drives with the following text: 

"Virus MlourdesHReloaded II ha atakdo esta computadora"
"Virus 100% Méxicano, no es muy peligroso que digamos"
"Pero tu has sido el rival más débil ¡Adios!"
"Saludos a Ana Paty de Sinaloa y a Gedzac Labs"
"Espero y se hallan pasado una feliz Navidad y un próspero año nuevo"
"Feliz 2004 para todos"
"Para mayor información enviar un e-mail a tips@esmas.com"
"donde hablamos de computación en tu idioma"
""
"*-Dime solo esta vez, que has pensado... solo esta vez -*"


The malware may also create this file in the root directory of drive C: 

MLHR_Corporation_GeDzAc.htm
The said file contains strings written in Spanish. 

Other Details 

The malware also drops the file GeDzaC.mlh which appears to be a counter for the malware’s routines.

 "