I have a virus on my pc my antivirus tries to heal it but it just comes back. What should I do next.?

Question

I'm using AVG -free version. the file that it pulls up says:

winnt\system32CsdDriver.
sysTrojanhorsePSW.
Generic2.ODU

Whats strange is this started happening after I tried to download a windows intaller v 3.1 can anyone confirm the file above as a virus I'm not sure. I think it maybe a protected windows file that my antivirus can't delete.

Answer 1

Do this. Open My Computer, then go to Tools, Folder Options, click View, go to where it says hidden files and folders,, uncheck the box that says, hide protected operating system files... Then, run your antivirus when you've done this. Email me to let me know the outcome. I fixed my pc last night by doing this. Got rid of an hella annoying file! remacc.spector!

Answer 2

AVG-free version is off my two computers. Since I have gone to Trend Micro, I am virus-free. AVG...is an antivirus that is free...however you get what you pay for. This winnt/system 32Csd Driver was also a file and it was causing me a lot of problems. Get rid of AVG and ask your computer expert where you bought your computer to help you start off with a new antivirus.

Answer 3

VIRUS REMOVAL PROCEDURE FOR WINDOWS XP

Removing infections from your computer is never as easy as aquiring them. Malware infections are not meant to be removed, so, it takes TIME and PATIENCE to get rid of them. ONLY RESORT TO A REFORMAT AFTER ALL ELSE FAILS TO REMOVE THE INFECTION.

This procedure works for all Malware. Use any AntiVirus or AntiSpy program you choose.


UPDATE YOUR ANTI-VIRUS PROGRAM.


TEMPORARILY SHOW HIDDEN FILES AND FOLDERS.

1. Click Start, and then click Control Panel.

2. Click Appearance and Themes, and then click Folder Options.

3. On the View tab, under Hidden files and folders, click "Show hidden files and folders", and clear(uncheck) the "Hide protected operating system files" check box.

IMPORTANT: Files are hidden by Windows for a very good reason. It is not wise to experiment with these files. Unfortunately, to successfully remove modern spyware we must turn this protection off temporarily. Please turn the protection back on when you have finished cleaning your system.


EMPTY INTERNET EXPLORER BROWSER CACHE:

1. On the Internet Explorer Tools menu, click Internet Options.

2. On the General tab, in the Temporary Internet Files section, click the Delete Files button. Select the Delete all offline content check box in the confirmation dialogue box that appears, click OK. Click OK again.

RESTART IN SAFE MODE:

To do this you need to hold down or repeatedly tap the F8 key while the computer is booting (when the computer is displaying a black screen with white text). When the boot menu appears, use your keyboard arrows to select "Safe Mode."

Safe Mode can look quite ugly. The color may look bad, and all of your desktop icons will be very large. This is normal.



START THE SCAN WITH YOUR ANTI-VIRUS PROGRAM.


When the scan and removal are completed REBOOT COMPUTER. This will restart you in normal mode. DON'T FORGET TO RESET HIDDEN FILES AND FOLDERS.


NEW RESTORE POINT.

The RESTORE POINTS may be infected with the Malware and cannot be used.

HERE'S HOW:

1. Click Start, and then click Control Panel.

2. Click Performance and Maintenance, click System, and then click on the System Restore tab.

3. Select the Turn Off System Restore check box, click Apply, then restart your computer.

4. Return to the System Restore Tab and turn System Restore back on.


TO SET A NEW RESTORE POINT:

1. Click the Start button.

2. Point to Programs, then navigate to Accessories, then System Tools, then click System Restore.

3. Choose Create a restore point, and then click Next.

4. In the Restore point description box, type a name for your restore point, and then click Next.

5. Click OK.

NOTE: If you are using Windows XP Service Pack 2 (SP2) and are unable to access the Internet after removing Malware, there is a command that may fix the problem. It works by resetting the winsock catalogue. Click on Start, then Run and type CMD in the box. Click OK. Type "netsh winsock reset" (no quotes)into the DOS window that appears.


ADDITION INFORMATION ABOUT TROJANS:

There are Trojans that fall into the Smitfraud family. These require the use of a specialized program for removal. Here are two sites that specialize in removing these:

http://www.internetinspiration.co.uk/rog...

http://siri.urz.free.fr/fix/smitfraudfix...

Answer 4

#1. Find the source of the file (from your anti-virus).
#2. Using the command " Msconfig " in your Run prompt, go to the startup tab and then fiddle till you find your virus ( or a name that might give you a clue that it might be the infected one causing all the hassle ) then un-tick it.
#3. Got the name ? suppose its " blah " and has a directory C:\program files\blah.exe ; go to the Run prompt and type the command " Regedit ", then search for the file name.
Found the file ? DeLeTe it.

Voila ! ; - )

Answer 5

Restart the system and go in to Safe mode. The file that is infected is most likely running in memory and can not be changed until it is removed from memory. If you start in safe mode it most likely will not load and AVG can take care of it. click start>Shut down> Restart. Press f-8 to access Safe mode after you seen you Post screen. go to in windows Safe mode. re-run AVG.

Answer 6

Well, where did you get the 'windows installer' from? If from Microsoft, it is unlikely to have a trojan.

Maybe your virus scanner simply isn't fit to operate against this virus.

Try a quick scan with Stinger:
http://vil.nai.com/vil/stinger/

Or this TrendMicro online scan:
http://housecall.trendmicro.com/

Symantec has a similar scan:
http://security.symantec.com/

As does PAnda Software:
http://www.pandasoftware.com/products/ActiveScan.htm

And Bitdefender:
http://www.bitdefender.com/scan8/

All free resources that should cure your problem once and for all.

For good measure, also get Spybot S&D: http://safer-networking.com or adaware: http://www.lavasoft.com/

Answer 7

It's probably not a virus, but a worm of some sort. You should get AdAlert, or SpyBot Search and Destroy (both are free.) It is probably something associated with a website that you visit frequently, or a program that you downloaded (for file sharing, etc.)

Answer 8

Heya I stay in New Zealand :D. I honestly have been advised by way of my father that their techniques are undesirable, and that they've undesirable centers. So I have been given variety Micro. i think of variety is powerful, and no im no longer a sales individual

Answer 9

its a virus and a self replicatior http://www.myspace.com/computer_works
go here and follow the directions for removing viruses manualy
cudos on the avg i recomend it

Answer 10

The bad news is... you may need to format your hard drive and re-install Windows.