Greetings all,
I have a serious problem regarding the removal of this virus(win32/cript.exe) on one of my clients pc,s..This is what i have done so far..
1.Ran AVG antivirus which removed 5 others and the one i am having trouble with..
2.Ran spyware doctor ver 4 which picked up 84 threats and cleaned them..
3.I have also used xoftspy which picked up another 3 threats which were removed..
4.Disabled system restore eventually because every time i restarted it seemed to be fine and as soon as you connect to the internet avg picks up the same virus again..I even went into safemode and repeated everything but to no avail..
5.The only thing which tickles me is that the windows firewall is disabled because of the use of group policies.My client said they have never used group policies and he does not even know where to do what with it..I ran gpedit.msc to see if i could change anything but to no avail..Is it possible that the machine would have to be formatted?

The machine is a intel celeron 2.5 gig,512 ram,120gig hdd,win xp prof,

Any ideas???