Infected with win32:orez

[heze54]

Hi,

I have a  win xp infected with win32:orez.

Avast 4.8 detects it but It can not delete. I restart computer and avast detects and deletes but even restarted... a message is shown with the advertise.... virus found.


What can I do? I can not clean the pc.

Best regards

[FreewheelinFrank]

Try a boot time scan with avast! Right click the scanner screen, select 'schedule a boot time scan' and reboot when requested.

Try the repair option first, as this may be a file infector:

http://web.zdnet.de/itsupport/virencenter/dict/virus/virus3185-wc.html

If still having problems, post a HijackThis! log.

[Maxx_original]

what do you mean with "can not delete"? what's the error message while deleting?

[heze54]

Hi,


First, I run on demand antivirus in windows.... detected and deleted..

Second, boot computer,as you say,  with avast booting antivirus... detected and deleted

But........ Then I log into windows and again same virus, same files infected at in same folders...

[Lisandro]

I suggest:

1. Disable System Restore and reenable it after step 3.
2. Clean your temporary files.
3. Schedule a boot time scanning with avast with archive scanning turned on.
4. Use SUPERantispyware and/or Spyware Terminator to scan for spywares and trojans. If any infection is detected, better and safer is send the file to Quarantine than to simple delete than.
5. Test your machine with anti-rootkit applications. I suggest avast! antirootkit or Trend Micro RootkitBuster.
6. Make a HijackThis log to post here or, better, submit the RunScanner log to to on-line analysis.
7. Immunize your system with SpywareBlaster or Windows Advanced Care.
8. Check if you have insecure applications with Secunia Software Inspector.