I havea virus, what do I do?

[sdfsaasdf]

My AVG runs every night, but it did not pick up these for some reason. SOmeone suggested that I use a free online virus scan and it picked up these virus's: HAWAWI.F and JAVA BYTVERIFY and JAVA NOCHEAT.A

The java ones were in temporary internet files, so I deleted them, but the HAWAWI one is in C:\WINDOWS\SYSTEM

What can I do?

[Budfred]

I did a Google scan and found several references to the HAWAWI worm. Here is one site's version of what it is and how to deal with it...HERE... (http://www.sophos.com/virusinfo/analyses/w32hawawic.html)

Have you updated your Windoze?? I think they infections get in through an known vulnerability that has been patched. Also, do you keep AVG updated. If it isn't, it will miss all sorts of things.

Once you get it cleared out, it would probably be good to run a spyware scan and then, after rebooting, run HijackThis and copy/paste the log here for the experts to check out. Install if to its own folder if you want to be able to reverse any changes and don't make any changes until the experts take a look at it. Make sure you use the latest version too....

[sdfsaasdf]

I deleted what I could, but the HAWAWI virus is still on the computer. It says I cannot delete it because the file is in use.

I did use the hijack this program, and someone said my system restore was running and that might be slowing my computer down. So I assume the virus is running system restore to keep itself alive. Anyway, since System resotre is running I cannot delete the virus, what do I do?

There are 6 files that are infected and they are all of the kind: C:\_RESTORE\TEMP\(bunch of numbers and junk in here).cpx

[sdfsaasdf]

I mad a clean startup disk succesfully, but when I start the computer using the disk, normal windows does not come up, so i am lost what to do. Would starting the computer in safe mode enable me to delete the worm, or no? I really hate computers..

[Budfred]

I would start up in Safe Mode and see if you can get rid of it. I would also turn off System Restore and clear your restore points...

BTW, it is not computers that are the problem, it is rageful antisocial hackers that are the problem....

[sdfsaasdf]

ok, how do I turn off system restore?

[david eaton]

To clear system resore varies between win ME and WinXp. See HERE (http://forums.spywareinfo.com/index.php?showtopic=18913) for the way to do it on either system.

To ensure that the worm is removed completely, it would be an idea to post a hijack this log.