Unable to remove VIRUS (please Help).

My friend's system has been hit with a virus and multiple KIS system scans has not been able to remove the virus. KIS did locate 1 virus in the "My Documents" folder but it said it was "disinfected."


The following problems are occuring:

Besides running a normal scan....can something else be done differently to remove this bugger from the system (besides formatting)?

Also any good tools/software recommended in this situation?

Any help is greatly appreciated. Thanks.

 

try scanning in safe mode.

 

As per:
https://www.wilderssecurity.com/showthread.php?t=42148

I'd recommend:
http://www.castlecops.com/f67-Hijackthis_Spyware_Viruses_Worms_Trojans_Oh_My.html

 

he could always try drwebs cureit, the new version has better removal (if it detects it )

 

~snip~

failing that there are several online scanners such as Trend Micros House Call, which has worked for me in the past

 

In addition to Trend Micro,Panda and F-Secure also have online scanners.


http://www.pandasecurity.com/homeusers/solutions/activescan/

http://support.f-secure.com/enu/home/ols.shtml

 

It's a real toss-up anymore. It depends on "IF" one of those AV's can accurately identify the particular virus and if there are other variants of the same sort.

Sometimes it comes down to trying to salvage any programs not affected and wipe & reinstall and/or if it's a file infector, even the "BEST" av's don't always "clean" effectively enough i just found out recently. That leaves the only alternative of completely deleting the drive/partition then zeroing the disc before format & reinstall again.

I notice also some of the most recent viruses are wedging deeper into the drive, causing even some AV's to BSOD while they are trying to capture or repair the damaging intruder.

That's why its important to use a reliable IMAGING program against these potential intrusions. Then all you have to do is D-BAN the whole disk or partition and restore a "Clean" duplicated system to get back on-track again.