I've ran rkill around 5 times now, and this baby is still showing up - should I just go on to combofix or malwarebytes?

You need to run rkill and combofix straight after, rkill on its own will only stop things running not get rid, you would probably get away with using malwarebytes or an avast boot scan

Think I've finally got rid of it with the malwarebytes.

Spoke too soon, it's showing up again...

boot time virus scanning works if virus has frozen your os so it wont open

start in safe mode
rkill to stop running programs
then use like 3-4 different software to get rid of it but make sure there up to date
might have to use a rootkit for stuff hidden in lock files
or If its to nasty you might have to wipe and reload

rkill, combofix, avast, malwarebytes, and superantispyware haven't gotten rid of this one.

Looks like it's going to be a full re-install - unless anyone can suggest something else????

I haven't tried hijackthis... Does anyone know how to read hijackthis reports? I certainly don't...

if you can you can try to identify the virus and the program the virus is infecting and delete the infected program you can also google the removal of the virus if you know the name

Graftor 36517 This is a strain I have never even heard of. Doesn't appear to be much out there on it that I could see. Always makes me wonder how someone picks these up on their computer. You have your work cut out for you Sandra.

Originally Posted by ernie

if you can you can try to identify the virus and the program the virus is infecting and delete the infected program you can also google the removal of the virus if you know the name

It's a trojan gen.variant Graftor.36517. Googled it straight off, but couldn't find this one.

Even if I can't get rid of this and need to do a full re-install, I'll still have to scan the backup files. The customer is a graphic designer, so this isn't just Joe Bloggs machine, it's the guy's livelihood that's at stake.

Originally Posted by daisymae70

Graftor 36517 This is a strain I have never even heard of. Doesn't appear to be much out there on it that I could see. Always makes me wonder how someone picks these up on their computer. You have your work cut out for you Sandra.

From the malwarebytes report, it appears this trojan was downloaded within clipart, and there were hundreds of them...