So here's the story. A friend of mine apparently had his MSN Hotmail account hacked and I've been receiving these IM's saying to download stuff. Well, I was an idiot the first time and I did. I did it again and AVG caught me and warned me the file contained TWO Worms. So I stopped. I found out at that point he had been hacked. It happened again a day or so later ie. last night. I didn't download this one, nor did I touch it. AVG found two usernames (spyware I assume), 2 Worms, 1 Trojan Horse, some sort of MS-DOS virus, 2 infected Java files, and one infected document file. I have them in the Virus Vault for now. But what's my next step, what do I do with them now?

Wiping the objects from the virus vault using the button at the top (do not restore them). This will remove them from your system. After doing so, run another scan and it should come up clean.