Virus creating files

My daughter has some type of virus that keeps adding hundreds of exe files to the startup menu and into the windows and sytem folder. I clean it out once but they keep coming back. Before I format and start over I need to find out how to delete a file that windows considers in use.

I get error "File in use by windows ". How can you delete those files or purge them. The do not show up in the Task Manager, only in running processes.

All help appreciated

 

Hello laurio, Welcome to the board

Have you already started to do this? If not, why don't we try and clean it up? To answer your question,

you can startup in safe mode. Restart your computer.
Start tapping the F8 key until the startup menu appears.

Choose the Safe Mode option then press Enter.

 

And, if you are attempting to do this manually, try this on line virus scan

And, if you do not have an AV, invest in one. And if you do have one, start running it continuously in the background, as it should be.

 

lauri, I suggest you do this first.

Make sure you have the up-to-date versions of Spybot (v1.3), Ad-aware (build 6.181) and HijackThis. All are free and available bellow.

Download Spybot, install, and update. Then download Ad-aware, install, and update.

Spybot:
Go to Start > Programs >Spybot > Search & Destroy and choose Spybot S&D

Close ALL windows except Spybot S&D
Click the button to "Search for Updates" and download and install the Updates.
Next click the button "Check for Problems"
When Spybot is complete, it will be showing "RED" (RED) entries "BLACK" entries and "GREEN" (GREEN) entries in the window
Put a check mark beside the RED (RED) entries ONLY.
Choose "Fix Selected Problems" and allow Spybot to fix the RED (RED) entries.

Ad-Aware FULL SCAN:
Click on the Start Button, Tick Use Custom scanning options, Customize

Scan Within Archives
Scan Active Processes
Scan Registry
Deep Scan Registry
Scan my IE favorites for banned URL’s
Scan my Hosts file
Under Click here to select drives + folders, choose:
All of your hard drives
Click on the Advanced button on the left and select:

Include additional process information
Include additional file information
Include environment information
Include additional object details
Click the Tweak button and select:

Under the Scanning Engine:
Unload recognized processes during scanning
Include basic Ad-aware settings in logfile
Include additional Ad-aware settings in logfile
Under the Cleaning Engine:
Tick Let Windows remove files in use at next reboot

Click on Proceed to save the settings.

Click Start and on the next screen choose Activate in-depth Scan at the bottom of the page and then choose:

Use Custom Scanning Options
Click Next and Ad-aware will scan your hard drive(s) with the options you have selected.

Save the log file when it asks and then click Finish

When finished, mark everything for removal and get rid of it. (Right-click the window and choose Select All from the drop down menu and click Next).

Also download CWShredder bellow.

Download HijackThis from link in my signature. Save it to a permanent folder (I create a new folder in C:\ named HJT). Open and hit scan, then save log. Once it is saved it will open in notepad. Select all from the edit button, copy and paste the results here. Don't fix anything with it yet! Someone experienced with the logs will advise you.

 

http://www.mts.net/~kbateman/tiny_nasties.htm

Try all the online scans from this place. Download Kapersky. After you're through with that run AGV. Run them all!