comet systems

[steven]

every time i boot my mach. microsoft antispyware alerts
me to remove the "comet system" spyware. I remove it
using the antispyware software., but the next time i boot
microsoft antispyware ask the same question. How do I
once and for all remove this threat?

 

[Engel]

http://www.spyany.com/program/article_adw_rm_Comet_Systems.
html

 

[Stefan]

Perhaps it's residing in a system restore point?
Try disabling System Restore, (WinKey+Pause/Break ->
System Restore-tab -> Check "Disable System Restore"-
box), Scan agin and remove, Enable System Restore again.

 

[Bill Sanderson]

As far as I've been able to determine, this is an urban myth. No antivirus
vendor states that viruses can remain active in restore points. Their
advice about removing restore points is generally muddled, but it comes down
to the fact that virus files can be detected by their products in the
restore points, and that they can't clean those files, so you need to remove
the infected restore points so those files won't be detected.

I'm definitely open to concrete evidence of something living in the SR
storage tree and having some effect on the running system, but I haven't
seen it yet. I'd look for something much more mundane first. In fact,
simply scanning and cleaning in safe mode would be my first recommendation.