Can't delete Trojan..

Viruses and worms
1

Can someone help me eliminate a trojan. I’ve ran the antivirus and chose delete trojan, but everytime i restart my computer it notifies me of the trojans’s presence.

Regards,

C.P.

2

I suggest:

  1. Disable System Restore and reenable it after step 3.
  2. Clean your temporary files.
  3. Schedule a boot time scanning with avast with archive scanning turned on.
  4. Use SUPERantispyware and/or Spyware Terminator to scan for spywares and trojans. If any infection is detected, better and safer is send the file to Quarantine than to simple delete than.
  5. Test your machine with anti-rootkit applications. I suggest avast! antirootkit or Trend Micro RootkitBuster.
  6. Make a HijackThis log to post here or, better, submit the RunScanner log to to on-line analysis.
  7. Immunize your system with SpywareBlaster or Windows Advanced Care.
  8. Check if you have insecure applications with Secunia Software Inspector.

Also, can you say what is the infected file name, where was it found (C:\windows\system32\infected-file-name.xxx)?
What avast! version and virus database are you using? (see About dialog of avast!)

3
  1. “Disable System Restore” . Does this not remove all existing Restore Points?
  2. “Schedule a boot time scanning”. When should the reboot take place? Why is “Schedule Boot-Time Scan” greyed? What then?

Thanks,
Dan

4

  1. Yes, it removes ‘all’ restore points. For many infections where files are in the system folders if you don’t disable system restore, the infected file when removed would be saved in a restore point. Here it could lie dormant (though avast would likely detect it there also) until you use system restore to a point in time where that infected restore point would be restored.

  2. You don’t mention your OS ?
    That is the reason for this, the boot-time scan isn’t supported by older OSes win9x, winME and for 64bit OSes like winXP or Vista 64bit versions.

5

Thanks.
OS is Vista x64.
As #3 is irrelevant in my case, when should the System Restore be reenabled?

6

When you have completed the scanning process and can be reasonably sure that your system is clean, when you re-enable system restore it should create a new restore point.

7

can you boot into safe mode with vista 64 and run scan from there?

tools for 64 bit are sparse
MajorGeeks has a vista section but BVVC and dbl check for 64 bit support for each program suggested
http://forums.majorgeeks.com/showthread.php?t=35407
also follow the links in order

please report back how it goes