Viruses that just wont go away!!!

[lockett1977]

Hi

I have downloaded the following products Avast and Antivir on the anti-virus front and Spybot search & destroy, Ad aware SE, CWSShredder and Hijackthis. Hijackthis is the only one I haven't used yet, but everytime I run one of these programmes they get interrupted by I think it windows AV or something saying that one of the following was found PMS/SEARCHBAR.DLL.2 and TR/DLDR.STARTPAGE, then it gives you the option whether you wont to quarantine, delete, ignore etc and I have pressed delete everytime but when I scanned again using avast it brought them up again, I also had these 2 as well but I think they might of gone now Trojan.byteverify virus and Backdoor.coreflood dr virus, I haven't run any of these with the system restore off, I dont know whether thats important or not, have you got any suggestions how I can get rid of these buggers?

Thanks in Advance

[fritzi93]

Sounds like your suspicions are correct- it /they could be lurking in system restore. You have Avast Antivirus. Have you tried setting Avast to bootup scan so it can be killed before it loads? That worked for me on a real nasty one. Other possibilities are Stinger and McAfee Housecall, but you may end up having to turn off system restore to kill the bugger. Good luck.

[dxj40c]

I've had viruses that Norton couldn't delete and had to hunt them down and do it manually. If your virus software is giving you the file name, enter that name in the 'Search (for files & folders)' feature. It should tell you where all instances of the file are, you can then go there and delete them all. If the virus files are written as 'read only', you will have to change that to 'archive' before you can delete, I think that's why an anti-virus program won't delete them.

[dxj40c]

Add to previous post:

I don't use system restore, but I would guess you would have to 'set' the new system restore point after you manually delete the files or they would show up if you ever use system restore. I've only browsed the system restore dialogs, and I think you can remove all previous restore points.

[zzyzzx]

You might have to exit to DOS to remove the file (or boot to a DOS disk and then delete it).

[ViRaL1]

Another option is to slave the hard drive in another system (if you have one available) and run the virus scan on it since no processes or applications will be running on it.

[smearbrick1]

I've had viruses that Norton couldn't delete and had to hunt them down and do it manually. If your virus software is giving you the file name, enter that name in the 'Search (for files & folders)' feature. It should tell you where all instances of the file are, you can then go there and delete them all. If the virus files are written as 'read only', you will have to change that to 'archive' before you can delete, I think that's why an anti-virus program won't delete them.

Ditto

[thecoalman]

They sometimes hide in the registry deleting it won't do anything in some cases. It simply recreates itself on reboot. Try doing a google search. Enter the the scumware name, you should find something. Try hijackthis, that's a great scumware remover but be careful....