Virus or Trojan

Not much to go on. Are you turning off restore when you scan, see:http://vil.nai.com/vil/SystemHelpDocs/DisableSysRestore.htm

Here are a few other things to check.
Look in msconfig and see if something strange is in startup or remove startup altoghether and reboot to see if it stops.

Look in the hosts file and make sure it looks like this:
# Copyright (c) 1993-1999 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host

127.0.0.1 localhost

Try SpySweeper from www.Webroot.com, it will find things that Adaware and SpyBot Search and Destroy don't.

Try downloading a tool called HijackThis. it is best to download it from a site like www.cnet.com as several of the browser hijacks have incorporated stuff to keep you from going to the home site www.spywareinfo.com/~merijn/. Be Careful using this tool it can also remove good stuff. there are forums where you can post the output from the program and people will help you figure out what needs to be removed.
Good Luck.

You can try to boot into safe mode and the remove the Virus from Autostart from there. If that doesn't help, you can try creating a emergency boot disks with NAV on another, virus-free PC, make them read only an then boot your affected PC with those disks and try cleaning it that way. I'm not sure it the boot disks of NAV can write to ntfs partitions, though. Chack on the Symantec site for help on that.

Markus

Malware has progress into a formable tool to be used by script kiddies in attacking your system. By using spyware programs to gain access or root services. You should be aware if you had deleted that many spyware instances from the computer, you have a trojan, which supplies or rebuilds the malware when it can not access the net to do it. You must opt for a cut off point for these instances. Dos based virus scanner, remove directories from program files which are spyware, and clean registry. Hard task to do, not all anti-spyware programs will clean the computer at the point it has reached. You next option is to re-do the entire system, if you can't stop the instances from occuring by using an dos based approach. Have your client to invest into disk imaging software, get a good disk image from a safe installation point, and re-image the drive back to normal, if it occurs again. This is a session of lessons learned.

A trojan is a virus, if im not mistaking. if it was me? log off internet if any, restart pc, do the 3 key soulute "ctrl alt del" find the program your looking for, and do a search on it. when it pops up, click the secondary mouse button on it, and select "open containing folder" it should be on top. Try to delete the folder and such "but stop the processes first"

This question was closed by the author