Windows live one keeps finding and stopping a virus in my computer.
The problem is it keeps coming back. It comes up as win32/Trufip!rts. Any thoughts on ho to find the host program that is doing this?

__________________
http://www.cycleawareness.org

Try this:
Malwarebytes.org

__________________
---
"Charlie don't surf!"
The Cake is a Lie!
"You're gonna love my nuts!"
"I haven't seen Yayo..."
07 ZX-6R - "crack"
07 Mean Streak Special Edition - "blow"

+1

Or use Hijack This. Let me know if it persists and I'll help you out.

__________________
2005 Suzuki Hayabusa Limited Edition - lots of mods
2000 Honda CBR600F4 - outfitted with the NRC case cover of invincibility
http://www.gleno.net

What's happening is that your last restore point has the virus in the file and that's where it keeps re-creating it.

Turn off System Restore, delete ALL restore points, restart computer and delete the virus. Restart again, turn on System Restore, and create a restore point.

__________________
SCS Founding Member (Member ever since)

Now as a question of etiquette, as I pass do I give you the ass or the crotch? - Tyler Durden

It is better to be defeated on principle than to win on lies. - Arthur Calwell

Common Sense Isn't Common


http://www.gleno.net

eric, im in desperate need of a pc medic!

recommend spybot.. i used to use malwarebytes.. but couldnt get rid of the hard ones...

The home of Spybot-S&D!

hijack this would be the first thing i use. but if you do not know what you are doing you can totally fuck your system up with it.

__________________
myspace

5+ year member - and still going.

Bring it by this weekend foo!

__________________
2005 Suzuki Hayabusa Limited Edition - lots of mods
2000 Honda CBR600F4 - outfitted with the NRC case cover of invincibility
http://www.gleno.net

Good point about Hijack This.

__________________
2005 Suzuki Hayabusa Limited Edition - lots of mods
2000 Honda CBR600F4 - outfitted with the NRC case cover of invincibility
http://www.gleno.net

and depending on what you use this computer for i would suggest updating all passwords you use for bills, etc...

__________________
myspace

5+ year member - and still going.

The reason for my suggestion is that I had the same thing happen a few years ago. Every time I would turn on the pc, the virus would come back.

Doing a scan for the virus file name, it was in the folder it keeps popping up in, but also in the image that the Restore Point creates. So every time I turn on the machine, it would put it right back where I deleted it from.

A dood on one of the virus forums suggested what I typed above. And it worked. After you delete the restore points, you could make sure that it is gone by defragging the drive, then restart and turn on the System Restore and create a restore point.

I'll bet you $20 it works.

__________________
SCS Founding Member (Member ever since)

Now as a question of etiquette, as I pass do I give you the ass or the crotch? - Tyler Durden

It is better to be defeated on principle than to win on lies. - Arthur Calwell

Common Sense Isn't Common


http://www.gleno.net

spybot and nod32 ftw...

__________________

Even if you use a cleaner like spybot, the virus file will recreate unless you delete it out of the restore point file. The restore point files are in a locked system file so you can't just go in and delete it out of the file.

__________________
SCS Founding Member (Member ever since)

Now as a question of etiquette, as I pass do I give you the ass or the crotch? - Tyler Durden

It is better to be defeated on principle than to win on lies. - Arthur Calwell

Common Sense Isn't Common


http://www.gleno.net

spybot cleans and scans your restore files..=p

__________________
myspace

5+ year member - and still going.

it also deletes all your temp files.. its a great program..

__________________
myspace

5+ year member - and still going.

When I had my virus, it couldn't go into those files. But that was years ago, so maybe it can now.

__________________
SCS Founding Member (Member ever since)

Now as a question of etiquette, as I pass do I give you the ass or the crotch? - Tyler Durden

It is better to be defeated on principle than to win on lies. - Arthur Calwell

Common Sense Isn't Common


http://www.gleno.net

I downloaded spybot so I will try it later today Thanks guys

__________________
http://www.cycleawareness.org

I use Spybot.

I disabled System Restore years ago. Use Firefox and be careful when looking at pr0n.

__________________
'06 GSX-R 600

Just re-install your mouse drivers and clear your cookies.
That will fix anything...

__________________
---
"Charlie don't surf!"
The Cake is a Lie!
"You're gonna love my nuts!"
"I haven't seen Yayo..."
07 ZX-6R - "crack"
07 Mean Streak Special Edition - "blow"

I install spy bot and it is still popping up. Windows live one keeps finding it.

__________________
http://www.cycleawareness.org

Really?

__________________
http://www.cycleawareness.org

Not really.

__________________
"If you ever wanted to see what the law of unintended consequences looked like, you're about to find out."

Are you running in Windows Safe Mode? You may also want to check the registry (HKEY_CURRENT_USER or HKEY_LOCAL_MACHINE ->Software->Microsoft->Windows->CurrentVersion->Run) for any programs running with crazy names. Just google them to make sure you're not gonna disable graphics drivers.

I know WinXP also has msconfig that you can use to easily disable registry settings and windows services.

Do everything at your own risk.

__________________
'06 GSX-R 600

I think I got it. 3 consecutive scans with no virus' found.

__________________
http://www.cycleawareness.org