How was it detected? What was scanning, you yourself or the back-ground scanner? When did the message occur on a download, unzipping, opening a file, mail or mail-attachment, etc.?
I was doing a system startup scan.
What was the source of the file, where did the file come from?.: e.g. address, URL, source.
C:\WINDOWS\system32~GLH0006.TMP
C:\WINDOWS\system32\rkinstaller.exe
C:\WINDOWS\system32\RKINST~1.exe
When was it downloaded or received?
Not sure.
What is the exact file name with extension.
C:\WINDOWS\system32~GLH0006.TMP
C:\WINDOWS\system32\rkinstaller.exe
C:\WINDOWS\system32\RKINST~1.exe
I can’t seem to figure out how to get rid of it. There’s another virus, but I forgot to write it down. It began with a K… but I don’t know if that helps.
You might also consider proactive protection, in order to place files in the system folders and create registry entries you need permission.
Whilst browsing or collecting email, etc. if you get infected then the malware by default inherits the same permissions that you have for your user account. So if the user account has administrator rights, the malware has administrator rights and can reap havoc. With limited rights the malware can’t put files in the system folders, create registry entries, etc. This greatly reduces the potential harm that can be done by an undetected or first day virus, etc.
Check out the link to DropMyRights (in my signature below) - Browsing the Web and Reading E-mail Safely as an Administrator. This obviously applies to those NT based OSes that have administrator settings, winNT, win2k, winXP.
The ones you just mentioned are more "spyware" than
"virus"; therefore, an antiSPYWARE/antiTROJAN program
is more appropiate. I recommend the FREE version of
"SUPERantispyware" from www.superantispyware.com
AND/OR Ewido ( free ) from :
www.filehippo.com/download_ewido/?1208 .
P.S. This is assuming your Operating System is Win XP,
which you have NOT mentioned at this point and is
very important in making recommendations.