I need some help regarding the Trojano-1152 virus.
I scanned my friend's computer using avast's home edition. Two Trojano-1152 viruses were found.
First virus location: c:\_RESTORE\TEMP\A0007313.CPY
Avast's recommended action: Move to chest, so I clicked on that option, but a window popped up from avast: Access is denied, cannot process c:\_RESTORE\TEMP\A0007313.CPY. So I clicked on okay, then the virus alert popped up and I couldn't move the trojan to the chest.
I clicked on delete, and then clicked on delelet permanently, and the scanning resumed.
Results of the scan: c:\WINDOWS\SYSTEM\SSK3.exe, Win32 Trojano-1152, file was successfully moved to chest.
Results of the scan: c:\_RESTORE\TEMP\A0007313.CPY, Win32 Trojano-1152, file was marked to be deleted t.... (this part was not revealed, I don't know the rest of the info).
Two questions: Was the virus that infected the SSK3 file deleted or is it located somewhere on the computer?
Also, do I use hijakthis, search & destroy, spyblaster, and other programs in "safe mode" to clean up the computer? This is what I was instructed to do about a year and a half ago whenever a virus was found on the computer.
After scanning with Avast, I didn't do anymore virus, spyware "clean-up."
What else do I do? Thanks, Megaman