i use avast

I use Task Manager + DrWeb CureIT + Regedit and then (Avira AntiVir or Kapersky/AVS).

i scan but cant detect the virus see here

have you tried to used hijack to check on it then post the log! HAve you scan through safe mode?: tried to clear the temp file and cookies as well.

after i delete the virus come back

This post has been edited by nikmuhammadhafiz: Apr 18 2007, 07:46 PM

Your case is VERY Simple. Just:-

Download CCleaner (Crap Cleaner) From File Hippo.

Run it to REMOVE Temporary Files from the TEMP Folder. Rescan after that. Cheers!

CLEANING COMPLETE - (0.724 secs)
------------------------------------------------------------------------------------------
24.1MB removed.


Details of files deleted
------------------------------------------------------------------------------------------
C:\WINDOWS\TEMP\Perflib_Perfdata_604.dat 16.00KB
C:\WINDOWS\TEMP\WGAErrLog.txt 255 bytes
C:\DOCUME~1\Apih\LOCALS~1\Temp\cfx12.tmp 0.25MB
C:\DOCUME~1\Apih\LOCALS~1\Temp\cfx13.tmp 0.25MB
C:\DOCUME~1\Apih\LOCALS~1\Temp\cfx1E.tmp 0.25MB
C:\DOCUME~1\Apih\LOCALS~1\Temp\cfx27.tmp 0.25MB
C:\DOCUME~1\Apih\LOCALS~1\Temp\cfx30.tmp 0.25MB
C:\DOCUME~1\Apih\LOCALS~1\Temp\cfx3B.tmp 0.25MB
C:\DOCUME~1\Apih\LOCALS~1\Temp\cfx44.tmp 0.25MB
C:\DOCUME~1\Apih\LOCALS~1\Temp\cfx4F.tmp 0.25MB
C:\DOCUME~1\Apih\LOCALS~1\Temp\cfx58.tmp 0.25MB
C:\DOCUME~1\Apih\LOCALS~1\Temp\cfx63.tmp 0.25MB
C:\DOCUME~1\Apih\LOCALS~1\Temp\cfx6C.tmp 0.25MB
C:\DOCUME~1\Apih\LOCALS~1\Temp\cfx7.tmp 0.25MB
C:\DOCUME~1\Apih\LOCALS~1\Temp\Cookies\index.dat 16.00KB
C:\DOCUME~1\Apih\LOCALS~1\Temp\csh10.tmp 1.88MB
C:\DOCUME~1\Apih\LOCALS~1\Temp\csh11.tmp 1.88MB
C:\DOCUME~1\Apih\LOCALS~1\Temp\csh1C.tmp 1.88MB
C:\DOCUME~1\Apih\LOCALS~1\Temp\csh2E.tmp 1.88MB
C:\DOCUME~1\Apih\LOCALS~1\Temp\csh39.tmp 1.88MB
C:\DOCUME~1\Apih\LOCALS~1\Temp\csh42.tmp 1.88MB
C:\DOCUME~1\Apih\LOCALS~1\Temp\csh4D.tmp 1.88MB
C:\DOCUME~1\Apih\LOCALS~1\Temp\csh5.tmp 1.88MB
C:\DOCUME~1\Apih\LOCALS~1\Temp\csh56.tmp 1.88MB
C:\DOCUME~1\Apih\LOCALS~1\Temp\csh61.tmp 1.88MB
C:\DOCUME~1\Apih\LOCALS~1\Temp\csh6A.tmp 1.88MB
C:\DOCUME~1\Apih\LOCALS~1\Temp\History\History.IE5\desktop.ini 113 bytes
C:\DOCUME~1\Apih\LOCALS~1\Temp\History\History.IE5\index.dat 32.00KB
C:\DOCUME~1\Apih\LOCALS~1\Temp\jusched.log 340 bytes
C:\DOCUME~1\Apih\LOCALS~1\Temp\Temporary Internet Files\Content.IE5\452RKHEN\desktop.ini 67 bytes
C:\DOCUME~1\Apih\LOCALS~1\Temp\Temporary Internet Files\Content.IE5\CXUB05EN\desktop.ini 67 bytes
C:\DOCUME~1\Apih\LOCALS~1\Temp\Temporary Internet Files\Content.IE5\desktop.ini 67 bytes
C:\DOCUME~1\Apih\LOCALS~1\Temp\Temporary Internet Files\Content.IE5\index.dat 48.00KB
C:\DOCUME~1\Apih\LOCALS~1\Temp\Temporary Internet Files\Content.IE5\VUPYDC0M\desktop.ini 67 bytes
C:\DOCUME~1\Apih\LOCALS~1\Temp\Temporary Internet Files\Content.IE5\WX6BOH2B\desktop.ini 67 bytes
C:\DOCUME~1\Apih\LOCALS~1\Temp\TMP81.tmp 239 bytes
C:\DOCUME~1\Apih\LOCALS~1\Temp\TMP8A.tmp 239 bytes
C:\DOCUME~1\Apih\LOCALS~1\Temp\~DF154E.tmp 16.00KB
C:\DOCUME~1\Apih\LOCALS~1\Temp\~DF3B7F.tmp 48.00KB
C:\DOCUME~1\Apih\LOCALS~1\Temp\~DF59F9.tmp 48.00KB
C:\DOCUME~1\Apih\LOCALS~1\Temp\~DF8521.tmp 16.00KB
C:\WINDOWS\system32\wbem\Logs\wbemess.log 18.62KB
C:\WINDOWS\system32\wbem\Logs\wmiprov.log 201 bytes
C:\WINDOWS\setupact.log 60 bytes
C:\WINDOWS\setuperr.log 0 bytes
C:\WINDOWS\ntbtlog.txt 71.13KB
C:\Documents and Settings\All Users\Application Data\Microsoft\Dr Watson\drwtsn32.log 68.47KB
C:\Documents and Settings\All Users\Application Data\Microsoft\Dr Watson\user.dmp 24.56KB
C:\WINDOWS\Debug\UserMode\userenv.log 5.75KB

after run cc cleaner also the virus come back help please

---

Added on April 18, 2007, 9:51 pmhelp

This post has been edited by nikmuhammadhafiz: Apr 18 2007, 09:51 PM

What sites have you been visiting so far?

Did you by any chance install Marketscore Internet Accelerator?? If u do, then please uninstall it because it is a known malware.

1st of all, if your TEMP Folder is cleaned by CCleaner, reinfection of this sort should not happen unless the infection is from elsewhere.

Do a Dr Web CureIt Scan paste the log made. Cheers!

help please

I told you already. Do a Dr Web CureIt Scan. Paste the Log. Simple. Don't tell me downloading an AV Component To Scan and Paste a Log is that hard?!

Cheers!

yes, natakasd is correct; just follow his instruction. good luck mate

Just install trial version of trend micro pc-cilin or norton or kaspersky. Kinda like pakai buang ler..

you can try TrendMicro Housecall Online scanning. google for it. or just do like zubai suggest lol.

Tell you what, you are solely entitled to what you get, if the pc screwed up, it's your business for doing so. No one will help you then.