Spam-xarvester

I have McAfee antivirius which comes up every time I start my computer and says "The file C:\cp1041.nls has been infected by the Spam-Xarvester virius and has been deleted to complete the cleaning process". It does this every time I start-up the computer. I've gone into safe mode and found the file C:\cp1041.nls under My computer, C: drive, and I deleted it, but it keeps coming back. I've gone in safe mode as USER & ADMIN, to delete it, still comes back. Thanks for any help.

Hello and Welcome to the Forum.

You need to get a complete installer that installs HijackThis to C:\Program Files\HijackThis, making an entry in the start menu and also providing a desktop shortcut from http://downloads.malwareremoval.com/HJTsetup.exe.

Click on the link and select Save, save it to your desktop and double click HJTsetup.exe.

Open HijackThis and select: Do a system scan and save a log file.

When the scan is finished, Click Edit> Select All> Edit> Copy> and paste its contents here please use the [Add Reply] button below.

Thank You, for the reply. After waiting for awhile (for help) I started surfing around TomCoyote forum and found some help. SDfix, and NOD32. Since I've run these programs, I haven't seen the file with the virus Spam-Xarvester pop up again. I think it's been fixed. Thanks, cflist PS. And thank you TomCoyote forum.

Glad you got it fixed and letting us know

If you dont have any programs like these, I would recommend that you get them.
Spywareblaster,
Spywareguard.


Also get a FREE FIREWALL and FREE ANTI VIRUS if you need one.

Only run one Anti-Virus and Firewall program.

It is critical to have both a firewall and anti virus to protect your system.

Keep your system up to date and run Adaware & Spybot, once a week works, and hopefully you will be ok from here on. Both are available below.

Do not use Ad-aware if you have McAfee's VirusScan and AntiSpyware


Safe Surfing.

I would also suggest you read this:
So how did I get infected in the first place?
by Tony Klein