need help with threat message

i was doing a virus scan when this message popped up about a treat.

File C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RVRI31NJ\upgrade[1].cab is infected with a variant of Win32/Adware.OneStep application. The file can be deleted. It is strongly recommended that you back up any crucial data before you proceed.


I backed up my data like it said and then i did another scan and it showed up again but it would only let me choose the option leave. What do i do about this threat? Please Help.

 

Since this is a temporary file, it can be removed by hand. You can go into the folder and delete the file.

 

i have no idea where to find this file

 

You can use ccleaner to delete the file. CCleaner can be downloaded here:
http://www.majorgeeks.com/CCleaner_Slim_No_Toolbar_d4191.html

Do not check any boxes in the 'Advanced section'.
If you have further questions, post again.

 

i did what you said and i did another scan just to be safe and it came up again.

 

Did you click 'Run Cleaner'?

 

I suggest you run the cleaner in safe mode.http://www.computerhope.com/issues/chsafe.htm

 

yes i did run the cleaner

 

and i also did run the cleaner in safe mode.

 

I'm going to assume it didn't work, in which case you're probably infected with something at startup re-creating the file.

 

so what do i do about?

 

Download the free version of malwarebytes at www.malwarebytes.com.
Update the definitions and scan your computer.
This malware is detected by Malwarebytes:
http://www.malwarebytes.org/malwarenet.php

 

If it quarantines files, don't delete them. Restore them to a safe location later and follow these steps: http://www.eset.com/support/kb.php?option=com_kb&Itemid=29&page=articles&articleid=141

 

i downloaded the malwarebytes and updated it and scanned but it did not find any infected files so idid another scan on nod32 and the infected file showed up again. i also sent the file them.

thanks for the suggestions so far if you have any more i am still open to them
and if it comes to my last resort i will take it somwhere to get it fixed.