SahAgent virus in startup.inf

product_name : HP Pavilion Media Center TV m7760n Desktop PC
operating system : winvistahomepremium

problem description : SypEraser by Uniblue reports a SahAgent in the
following file: C:\windows\Downloaded Program Files\setup.inf.
I want to delete the offending instructions by editing the setup.inf in
command.com

Setup.inf reads as follows:
>>>>>>>>>>>>>>
[Version ]
Signature=$CHICAGO$
AdvancedINF=2.0
[Add.Code ]
Setup.exe=setup.exe
[setup.exe]
Hook=Default.Installer
FileVersion=4.0.2.0
Clsid=[2F098595-D468-4881-B3AD-4EEDED032642]
RegisterServer=no
[Default.Installer]
File-win32-x86=HPProductDetection.cab
Run=%EXTRACT_DIR%\setup.exe /v/qn
>>>>>>>>>>>>>>
Any ideas which instructions are the virus? Is the file necessary or will
it be regernerated when needed if I delete it. The system does not allow me
to delete it but I assume I could make it's contents blank.

If you delete the file, the virus might replicate or regenerate itself
anyway, so I'm not sure if deletion is a good option. Making it blank
would probably be the best option. As far as I know, setup.inf is not a
necessary file or there won't be any major problems if you do alter it.
But I would make sure you have a backup version of the clean setup.inf
file somewhere before you change it.


--
steaminshrooms