Windows XP Home. Using Avast Free as real time virus protection, and Spyware Blaster for malware protection.
Avast is detecting 2 Trojans, after Boot Scans, Quick Scan and Full Scans.
It describes them as:
C:\System Volume Information\Microsoft\services.exe
Severity:High
Status: Threat:Win32:Cycler-F [Trj]
C:\System Volume Information\Microsoft\sms
s.exe
Severity:High
Status: Threat:Win32:Cycler-F [Trj]
During a boot scan when it discovers these it gives me a choice of action - I've run the boot scan at least 3 times, and tried selecting: #3 - "Move to Chest", after which it says "Moved to Chest"; #5 "Repair", after which it says "Repaired"; #1 "Delete", after which it says "Deleted".
However, it is still there.
If I run a Quick Scan or Full Scan, it discovers them again. In those modes, when I try each of those 3 options, after each one it lets me know that it was unsuccessful.
Doing a google search, I see posts across many of the antivirus forums, describing this problem, beginning especially during June 2010.
This post describes it perfectly, as well as unsuccessful attempts to solve the problem:
http://www.bleepingcomputer.com/forums/topic326120-30.htmlI've run scans with Malwarebyes, Spybot, a-squared and Super anti-spyware. Most of these detect the same 2 problems.
And with the same results - they cannot remove it.
Please help. Thanks.