Ask Leo! by Leo A. Notenboom

I've been told I have the (fill in the blank) virus, but my anti-virus program doesn't remove it. What do I do?

Search First! Then browse: Categories | Full Archive | By Date | Newsletter

Home » Viruses and Malware » Viruses

Summary: Making sure your anti-virus program and its definition database are up-to-date is the best way to make sure that it can recognize and remove viruses.

I've been told I have the (fill in the blank) virus, but my anti-virus program doesn't remove it. What do I do?

I get variations of this question a lot. Someone has somehow correctly determined that they have a virus; either by its symptoms or by some other means and yet the anti-virus program that they're running fails to detect the virus, or perhaps detects it but fails to repair it.

It's a race, folks, and sometimes the anti virus-packages aren't in the lead.

The fact is new viruses are being discovered every single day. Anti virus (AV) programs are constantly having to update the list of viruses that they know to look for. The AV software firms are always racing to catch up with the new discoveries. Each time a new virus is found they update their information; typically called "signatures" or "virus definitions database" which then must be downloaded by users of their software.

That's you, by the way. And that's why I, and many others, constantly harp on the fact that you must be running up-to-date virus software. And that means both the latest version of the AV program as well as the virus definitions. You need to be regularly downloading the new virus definitions to stay up-to-date and protected against all the new viruses found every day.

How often is "regularly downloading"? I download every night. I wouldn't feel safe going much longer than a week without getting the latest for my anti-virus software.

It doesn't have to be a burden. In fact, all I've done is configured my anti-virus software to automatically download new virus definitions in the middle of the night when no one is using the computer. It just happens and I rarely have to think about it.

Now all that having been said, unfortunately AV programs aren't perfect. In fact it's turning out to be not uncommon for one AV program to catch infections that another will miss. It shouldn't be that way, and quite frankly I'm not sure why it is that way, but it's reality. That's why, when you know you have a virus and your (up-to-date!) AV software doesn't catch it, I recommend running another package. Many AV software vendors have free trials, or free on-line demos, that server wonderfully as a second-line check.

Finally, occasionally a virus will be detected by an AV program, but cannot be removed by it. Certainly the first thing to try again is another AV program. However sometimes there are technical reasons why removing a virus takes additional work. In such cases you should visit the web site of your AV software publisher and search for specific instructions, or occasionally a downloadable tool, to remove that specific virus. Most of the major AV software publishers provide this service.

Related:

Article C2015 - June 10, 2004

Helpful? Get new articles weekly by email in my FREE newsletter!

Your Name:
Your Email:


Why Subscribe?

Recent Comments
12 Comments

I have the blank virus. Everytime I try to check my email at home this search page pops up. I have to sign off to get rid of it. I have spyware that I bought called Stopzilla and this hasn't gotten rid of it either. I don't want to keep wasting money buying software that doesn't get rid of this. Any suggestions?

Thanks,

Danny Hudson

Posted by: danny at October 4, 2004 10:15 PM

I think you want this article: http://ask-leo.com/aboutblank_hijacked_my_homepage_how_do_i_fix_it.html

Posted by: Leo at October 5, 2004 11:48 AM

You explained it very well, thank you

Posted by: Jim Telesco at November 21, 2004 2:33 PM

hi well i am getting two error messages one is about the svchost.exe after which no links opens and cant copy and paste ...

another trouble is the supu.exe ...i am using windows2000 and using norton anti virus 2003 it catches the virus not able to delete it
as this virus error comes regularly ....

recommend me a cure ....
:-)

Posted by: Red devil at January 8, 2005 10:43 PM

For svchost, this article: http://ask-leo.com/svchost_and_svchostexe_crashs_cpu_maximization_viruses_exploits_and_more.html

Supu is touched on briefly here:
http://ask-leo.com/supuexe.html

As for Norton not catching it: as the article says - try other anti-virus scanners.

Posted by: Leo at January 8, 2005 10:51 PM

Norton identifies "non-viral threats," but can't remove them. They are listed as "Temporary Internet Files\Content.IE5" but MY SEARCH COMPANION CAN'T FIND ANYTHING UNDER THE NAME "CONTENT IE5."

How can I find these files, to delete them ?

Posted by: Eric Haubert at February 17, 2005 1:12 PM

right now on my laptop i have a virus i have about 8 or more viruses thats what stopzilla says on other AV programs it says i have 2 or 3 and i delete the memory with my boot disk and everytime i download stopzilla i end up having more viruses? and does anyone know if stopzilla is a virus/spyware/trogan/or more? these are the viruses stopzilla told me i had makemeseach.com and zero spyware said i had spyware strike then i restarted my laptop so swiftswitch would work and then stopzilla popped out and i read the list i had like 7 more viruses! but i couldnt find anymore info because i was using a free trial and it expired

Posted by: William at October 3, 2006 4:26 PM

06/06/2007
Hello Leo.
Have a PC running windows XP and McAfee antivirus, windows defender etc.
It now also has Contravirus and I cannot get rid of it completely.
Have tried Smitfraudfix, Sophos Anti-rootkit, AVG Antirootkit (because it seem to be able to re-install itself after I remove it manually), also tried something called 'Superantispyware' as touted on some forum extracts i found while browsing. Bottom line is none of it gets rid of Contravirus completely. Anything good to report on this ?

p.s. I understand that Contravirus is supposed to be a genuine program, but with deviant methods of inveigling itself into our wallets, so I'm posting this here because I don't know where else on your reply site to put it.

Tony

Posted by: Tony Madden at June 6, 2007 3:20 AM

It keeps popping up I have a virus, contravirus got in I suspect due to my necglecting to log off internet for a weekend and pops up every couple of seconds trying to get me to purchase their virus program. I manged to get the bigger ad off but they still pop up constantly on low part of computer and it's been about 2 months and still hangs on. McAfee comes up blocking them but they someone got one and you can't catch it. How do I get rid of this pest. Heard this outfit is getting into alot of people's computers. Thanks.

Posted by: Loisjean Fossen at July 28, 2007 11:49 AM

hi...i've read some of your advice and it helps me a lot....ive had a problem on my computer and i am hoping you give me some advice...i run Windows XP pro with norton antivrus 2006 updated the thing is norton detect the virus but virus cannot be fix because it run by the other program/memory it said please help me......!!!

Posted by: Jeffrey Capulong at August 4, 2007 11:43 AM

Post a comment on "I've been told I have the (fill in the blank) virus, but my anti-virus program doesn't remove it. What do I do?":






(Email Address will not be published.)

Remember Me?

By popular demand...
my tip jar
Cuppa Joe
Buy Leo a Latte!

(you may use HTML tags for style)

RSS feed Subscribe to the RSS Feed specifically for comments on this article.

Before commenting, please...

  • Read the article at the top of this page. If your comment shows you didn't, it'll be deleted and ignored.

  • Comment only on this article. Use the Google search box at the top of the page if you have a question about something else.

  • Don't include personal information in the comment. No email addresses. No phone numbers. No physical addresses.

  • Don't spam. Excessive links to unrelated sites within a comment or across multiple comments will cause all such comments to be removed.

  • Don't ask me to recover lost passwords or hacked accounts. I can't, and those comments will be deleted.

  • I can't respond to every comment. And I can't vouch for the accuracy of others who do.

Please wait. Your comment is being processed ...


Question? Ask Leo!