I have a virus on a clients computer 1

[shenfo]

i have a client who messed up his computer big time. i think it has turned into a botnet. the reason for this is that ever two seconds a hundred messages are being scanned by norton and some get rejected. when it gets rejected it pops up with a message and it shows the info, random email addresses and randome messages. i scanned with adaware, spybot, mcafee stndalone virus scanner, norton antivirus 2007, a couple of removal tools i found although i dont know exactly what the problem is and hijack this. i deleted the temp and temporary internet file and prefetch folders all around. i dont know what else to do.

 

[TweakMYbox]

Are any of those utilities detecting, and removing anything? Make sure all of the definitions for the AV and AntiSpyware software is up to date. Reboot the PC in safe mode, andrun all of your full system scans from there. Also, check launch MSCONFIG, and take a look at the startup items.

Mike

http://tweekmybox.com

 

[LawnBoy]

Sounds like you've been hit with "zero-day"-itis. There are many reasons the scanners don't find anything, the most common being that the exploit has hidden itself with a rootkit.

The solution is to remove all partitions from the drive, re-write the boot sector, and reinstall windows from scratch. Don't trust any backups you may have, they are probably infected too.

 

[wahnula]

You could try Rootkit Revealer:

http://www.sysinternals.com/Utilities/RootkitRevealer.html

 

[LawnBoy]

Ah yes, sysinternals. Lots of great utilities over there, including Process Explorer, which gives you lots more info than Task Manager.