Virus Problems

celliott · 18 Nov 2006 at 18:23

Hi,

I have recently noticed this Virus popping up on the Family PC. NOD32 puts the virus into quarantine and I have then deleted it. After running a full system scan including memory in safe mode, the system is clean.

2 days later its back again. Its as if the virus is building itself from nothing. I have checked the running processes and it all looks fine. Has anybody else had this virus or have any suggestions on how to get rid of it?

Heres the screenshot from NOD32.

Thanks,
Chris

celliott · 18 Nov 2006 at 18:31

I always disable system restore on any PC's I look after.

Yes files are being shared however each PC on my home network has the Windows firewall enabled, and is also sat behind a Firewall Router with I have stealthed, the chances of things getting in is very low.

All my home PC's have been fully scanned with the latest available NOD32 signatures and show as clean, yet for some reason this virus comes back on its own.

celliott · 18 Nov 2006 at 18:45

Well the first time I saw this was when I was installing a firewall which someone on these forums reccomended. It was no good so I uninstalled and its been fine until recently.

I really cant see how anyone would get into my network. The router is configured to reject all incoming requests and as I said, the PC's also have the Windows firewall setup.

Think its worth writing their docs to a DVD and reformatting?

celliott · 18 Nov 2006 at 20:27

No idea why the other pc's dont have it, but I am very confident that its not someone accessing the PC. I have plenty of security in place, All incoming connections will be automatically rejected by the router and no PC's have open/forwarded ports except mine (which is not infected).

It doesnt seem to have any orgin, it can put itself in any directory on the hard disk, and on either partition.

I will have a go at locating where it is coming from again tomorrow but im not entirley sure where to start! I have got a backup Ghost image of the O/S installed on that pc so I think I will give that a go and see if it helps at all.

Thanks for your suggestions.

Chris.