Posted 19 November 2009 - 11:40 PM
I recently had a computer that came into my office that was VERY infected. It was sooo bad that it wouldn't even boot. It wouldn't even boot into safe mode. I took out the HDD and scanned it with Vipre Enterprise. I was then able to boot. I cleaned the machine with Combofix. Combofix restored a bunch of system files, but after the reboot the machine just blue screened. I ran a repair install of XP, and got the machine up and running.
I cleaned with MBAM (full scan), SAS (full scan), Gmer, Vipre Rescue, Windows Defender, Spybot, Smitfraudfix, Dr Web Cure It, and some other random tools that I came across on some posts. After all this, the machine is perfect, but....
The Windows System Security Center reports that there is two antivirus programs installed, and Combofix says "AV: System Defender *On-access scanning enabled*"
I think the machine is clean, but could there be a reg key left over that is making Windows think there is more than one AV?