help needed removing virus please

loobylou36

I have logged onto my daughter's computer which is running on xp professional with, lavasoft adaware and avg antivirus.

AVG resident shield has detected a virus which says:

while opening file: C:\Documents and Settings\OTHERUSERS\LocalSettings\Temp|UnistallRar.Bat
Warning: Hidden extension.Bat

I cannot get rid of this virus and was wondering if I had done anything wrong as I had uninstalled loads of programs she doesn't need as the computer was really slow

Any advice would be greatly appreciated, bearing in mind I am not very techie minded!!!

intel

Did you run AVG in Safe mode, and AdAware with restore off?

loobylou36

No I haven't can you explain how I run in safe mode please?

Browntoa

http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/2001052409420406?OpenDocument&src=sec_doc_nam

also download Crapcleaner from www.ccleaner.com as it seems to be hiding in the temp folder...this will remove all the temp files , run this first in safe mode before your antivirus

also worth downloading Ewido

http://www.ewido.net/en/download/

and running that in safe mode after the anti virus has run...just to make sure there is no spyware/trojans lurking

is it my imagination or this stuff just got worse all of a sudden Intel ??

intel

loobylou36 wrote:

No I haven't can you explain how I run in safe mode please?

Ok to run in safe mode restart the PC and at startup tap F8 and that should
get you into safe mode and that will enable a more thorough scan with less processes running so that a nastie cant hide away.

Also when using AdAware disable system restore, Right click My Computer Icon, Properties, Restore Tab, Put a tick in turn off restore, run a scan then enable restore.

loobylou36

I am answering you from my laptop, and have turned off system restore on the pc and started in safe mode, I am now running avg, thanks for your help so far!

intel

Browntoa wrote:

is it my imagination or this stuff just got worse all of a sudden Intel ??

Not your imagination unfortunately.. New PC for Xmas never used one before lets have a look for !!!!!! and downloadable DVD films Syndrome. :rolleyes:

When most ppl dont need a PC or know how to use one... :mad:

This is not aimed at anyone inparticular just a fact of life.

intel

loobylou36 wrote:

I am answering you from my laptop, and have turned off system restore on the pc and started in safe mode, I am now running avg, thanks for your help so far!

Mmmm why did you turn off system restore and go into safe mode.. Oh well nay matter.

Edit: I didnt say both at the same time in the previous post but it doesnt matter, Now im getting confused... lol

loobylou36

It is my daughters computer who is 12 so would be very concerned if it was !!!!!!!!! I do check what she is up to online, saving all her chat logs and internet history!! She has had this computer for over a year

skiddy2k

intel wrote:

Mmmm why did you turn off system restore and go into safe mode.. Oh well nay matter.

usualy, when you have a virus, worm or trojan, you dissable system restore before you remove it because if you dont dissable system restore and one day you have a problem and decide to restore your computer, the virus will infect it again when you restore.

you scan for the virus, worm or trojan in safe-mode, maximising the chance of it being deleated or repared. this is because when you are in safemode, only system files are open... all other files including viruses are dissabled. you can only delete a file when its closed. if you aer not in safe-mode, chance of virus being open are higher, so the antivirus may not delete it.

intel

skiddy2k wrote:

usualy, when you have a virus, worm or trojan, you dissable system restore before you remove it because if you dont dissable system restore and one day you have a problem and decide to restore your computer, the virus will infect it again when you restore.

you scan for the virus, worm or trojan in safe-mode, maximising the chance of it being deleated or repared. this is because when you are in safemode, only system files are open... all other files including viruses are dissabled. you can only delete a file when its closed. if you aer not in safe-mode, chance of virus being open are higher, so the antivirus may not delete it.

Ah sorry it just that I didnt mention doing the two at the same time I do however know about restore and why it should be turned off, Its just that if you go into safe mode restore is disabled anyway.. so thats why there aint much point in turning it off then going into safe mode.

:beer:

Edit:I edited previous post.