Virus and Guest account

[Birthe]

My Norton Antivirus detected spybot.worm on the guest
account, even if no one had been using the account and it
was not acctivated. Norton told me that it could not do
anything to the infection, because access was denied. I
immidiately ran Norton again, and nothing was detected. I
also downloaded a removal tool from Trend and it also did
not detect anything. When I entered the suggested tftp*.*
in the search engine, it found a explore page in the temp
folder with the name spybot.worm. This time it was not on
the guest account, but on my daughters account.
I also have a file called ctfmon.exe running in my
taskmanager. When I search on the net for this, it tells
me it is a virus, but when I look for it, then I cannot
find it. All this is making me crazy, so if anyone has
any idea how to solve this, then I would appriciate your
help a lot.
Thanks in advance
Birthe

 

[Doug Knox MS-MVP]

ctfmon.exe is a valid file, and is part of Office

http://support.microsoft.com/?id=282599

Virus's can use valid Windows and other file names, to attempt to hide from
a casual inspection. Simply deleting one because the name matches is a bad
practice.

The best way to clear a virus that may be spread across multiple user
accounts is to boot the computer into Safe Mode and log into the built in
Administrator account. Run your antivirus software from there.