Polymorphic viruses 'change' once detected by your Antivirus software to avoid deletion.
It looks like the only way to stop this is to use a whitelisting product like this:
It looks like the only way to stop this is to use a whitelisting product like this: