I've tried so many things to remove this virus, usually i can remove it temporarily by deleting this regenerating file in c:\ called winstall.exe. and then doing a virus scan with ewido_micro but iit always comes back after a week or so!

Whenever i run a virus scan a file comes up that looks similar to this:

Name: Path: Risk:
Downloader.Agent.tc [1596] VM_003A0000 High

and the virus scanner is unable to remove it!

any help GREATLY appreciated.

First. Go [URL=http://www.bleepingcomputer.com/forums/topic22402.html]HERE[/URL] and follow the instructions.

Second. Go [URL=http://uk.trendmicro-europe.com/consumer/housecall/housecall_launch.php]HERE[/URL] and have your computer scanned.

Third. Go and read both these threads by RBS. Follow all the instructions exactly.

[URL=www.techspot.com/vb/topic30213.html]How to remove Trojans and its ilk![/URL] and [URL=www.techspot.com/vb/topic17297.html]How to remove Begin2search / coolwebsearch and other nasties. [/URL]

Then see. [URL=www.techspot.com/vb/topic19133.html]How to post your Hijackthis log-file as an ATTACHMENT. [/URL]

Only post a HJT log, after doing the above.

Regards Howard