Spyware

[snakehips]

Can anybody offer any advice?

A MS Windows Defender scan has detected Rivarts.a Backdoor. It classifies this as 'severe'! I deleted it and then ran a scan again, but it appeared again!

My questions are: How can I get rid of this for good and how can I stop something like this happening again? I've got MS Firewall, McAfee Virus Scan and MS Windows Defender.

Any simple advice would be greatly appreciated as I'm a bit of a novice with computers.

[snook]

If you've deleted it, it's still lurking in the Recycle Bin. Flush it and it should be gone for good.

Don't think you can stop it happening again, the morons just keep making garbage that does damage. Just keep your anti-virus software updated.

If it was up to me, putting a virus out would be punishable with a real virus injection - a very virulent one. Not that I'm extreme in my hatred of this particular form of stupidity or anything.

[snakehips]

Cheers, Snook.

So how do I 'flush' the recycling bin?

I totally agree with you. The people who create these things are total losers.

sh

[j2buttonsw]

right click the recycle bin icon on your desktop > empty the recycle bin. This will permanently delete the things you have deleted (as snook was alluding to).

[stevie_c2it]

I think you may find that the built in 'system restore' programme will have archived it under one of it's checkpoints, so emptying your recycle bin wont do the trick.

If my memory is correct (I'm sure it is, but I'd still recommend you double check for yourself).

You will need to turn off system restore and delete all your previous checkpoints, then restart it.

You need to be sure everything else is 'ship shape' before doing this as there is no way to back track later.

[commoner]

Try This piece of software...Trojan Remover....you can get a free tryout for a month from the link.......... I had a Backdoor Trojan a while ago which Adaware and Norton detected but couldn't remove......this did the trick..........commoner.

http://www.simplysup.com/tremover/download.html

[PatTheRat]

What mode are you running this software in? If you're just running it in normal mode (and possibly with the internet on), it might keep coming back. I dont have Windows Defender, so I dont know how it works, but if possible can you run it while the computer is in 'safe mode'?

[eddiek]

hi snakehips i have the same problem funny thing is it never gets picked up on defender scheduled full scan (daily) only detected on quick scan i run zone alarm spybot avg none have detected it Rivarts dont appear in list of virus on web is it a new one or a defender scam

[eddiek]

forget to mention i tried free scans from 3 respected anti virus none detected Rivarts try this site http://www.wilderssecurity.com/showthread.php

[snakehips]

Eddie

so how did YOU get rid of it? I've just deleted the recycle bin and will check if it comes back. Don't think it's a MS scam as my previous MS Spyware scan picked it up as well. Just how 'dangerous' is it? I've heard it's a keylogger so in theory it can remember passwords etc!!

sh

[snakehips]

Stevie

you suggested system restore option and I've seen similar advice in other forums. However, I'm not really sure what to do and don't want to do something that wrecks my whole system. Is it straight forward and will it work?

Cheers

SH