Hi, I recently got broadband, and (VERY stupidly i know) didn't
activate my virus software/firewall immediately and straight away i
got hacked, and a worm was also on my computer. I sorted eveythin out,
and installed antivir free virus software.   Everything has been fine
since, but it keeps flagging up one file as containg the worm
signature and i am unable to remove it either via the anti-virus
software or manually, as it says it is being used by another person or
programme. I am running xp (eurgh i know), and the file is called
0003.spl in the following directory:
C:\WINDOWS\system32\spool\PRINTERS
i have tried virus cleaners from sophos and symantec, but they can't
detect anything.  There doesn't seem to be any visible affect on my
computers day-to-day running (although it is being rather slow to load
up windows).  Hope thats enough info, and that you can help,
Many thanks

Hello happy monkey,

Well, how nice - thank you. I'm happy to hear all is well but I'm not
surprised to hear that HouseCall found something when others failed -
it really is one of those very useful programs and it's free to boot.
Another nice program is AVG antivirus - I use the free version for my
day-to-day monitoring and every few months use HouseCall just to
double-check.

HouseCall:
http://housecall.trendmicro.com/ 

AVG:
http://www.grisoft.com/us/us_index.php

Thanks again - may your computer stay virus-free for years to come,
hummer

thanks, it was very prompt and useful!

Hi monkey moo. 

Try HouseCall:

http://housecall.trendmicro.com/

It's very thorough (do it when you can spare lots of time) - it once
worked for me when all else failed.

hummer

hi hummer,
i found a way around by putting windows onto diagnostic startup and it
let me delete the file, but the virus checker you sent was very
thorough- it found the remains of another worm so thank you - how do i
pay you?  you do deserve the cash...
a happy monkey

so no more answers please....