Hey, sorry for asking for help on my first post but i’ve come home from uni to find my parents have completely messed up his computer, I installed Avast and i came accross a bunch of trojans i can’t delete, so i ran Avast on startup and managed to delete the files…then i realised they were there again!
So i went into safe mode and deleted files that were believed to be viruses…then i started my computer up normally again to find that the same files were back on my computer!!!
I know there’s some sort of file that keeps creating these files every time i startup and i have no idea what file it is.
I just sent a few files to the chest, but some viruses still remain…some of them change names whenver they’re re-created…here’s a screenshot of what my C drive usually looks like…
This one has a combined Smitfraud (removes a number of different rogue programs) removal tool with instructions, http://siri.urz.free.fr/Fix/SmitfraudFix_En.php Smitfraud is mentioned in the first link.
Don’t neglect to have a quick check for rootkits too. This is malware which hides itself- although not always 100%- files which keep appearing like this are sometimes the symptom of other malware hidden by a rootkit.
I’m using MS XP Home SP2. As far as i know it’s up to date, apart from IE7…as it keeps rebooting whenever i try to install it. My avast version is 4.7-892 I think.
I’ve just sent a load of C:\Documents and Settings\Comet (no idea why it’s called that, not my pc) I also have a lot of infected files within Tempory Internet Files, which all re-appear after deleting!
I suspect that you only have the windows XP firewall (?), which won’t stop unauthorised outbound internet access, which can make it difficult to clean your system.
Whilst the windows XP firewall is usually good at keeping your ports stealthed (hidden) it provides no outbound protection and you should consider a third party firewall.
Any malware that manages to get past your defences will have free reign to connect to the internet to either download more of the same, pass your personal data (sensitive or otherwise, user names, passwords, keylogger retrieved data, etc.) or open a backdoor to your computer, so outbound protection is essential.