Virus never leaves PC

[lanwan]

I have a cable modem using ZoneAlarm Pro as my firewall. Turned my ZoneAlarm Pro off one working on the PC and forgot to turn firewall back on. Went to work next day, come home and had some popup ads on my PC and IE was not open. Figured someone hacked into my PC so I installed McAfee. MacAfee finds 4 viruses:

BackDoor-GI
IRC/Flood.bi
IRC/Flood.e
IRC/Flood.bk

These viruses are found on various files on C:\ and in total have 10 files infected.

I have updated McAfee with lated DAT file and latest DAT engine. I then proceed to delete viruses found on files on my C:\ b/c McAfee can not clean viruses. McAfee says that it has sucessfully deleted the files, yet as soon as I run McAfee again it finds them all over again. I have since turned on my ZoneAlarm Pro of course. Is my only option to reformate the drive and re-install Windows?

Thanks,
Ryan

 

[2ffat]

Are you using XP? If so, turn off auto restore. You may also have to drop down to safe mode to delete them. Also check out this site:

http://www.sophos.com/support/disinfection/trojan.html

James P. Cottingham

When a man sits with a pretty girl for an hour, it seems like a minute. But let him sit on a hot stove for a minute and it's longer than any hour. That's relativity.
[tab][tab]Albert Einstein explaining his Theory of Relativity to a group of journalists.

 

[lanwan]

James,

I am using Windows 2000. I'll try deleting them is safe mode first and see what happens....

 

[mike722]

Check all the strings under this reg key and make sure that the files it runs are legit. Sometimes the virus and re run from this key when you reboot.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

 

[russellhancock]

Hi,

Did you ever get this fixed?

If not and you want to try a second anti virus product free try:

http://www.pandasoftware.com/activescan/com/activescan_principal.htm

This is a compleatly free online scanner that is very good, it found virus on my machine even though i run NAV in the background!

Hope this helps and you didn't have to format!

Russell

 

[lanwan]

Russell,

Never did fix this problem. I will try your suggestion.

Thanks.