Guys, Can any one help me on this??

I need to delete an infected file which is protected by the system,
'C:\WININT\System32\saristar.dll', it is a dialer which has nested itself the
system. I can not Diasable the System Restore (like with Windows XP ) because
I run Windows 2000 Professional version. My antivirus program can't delete it
either.

Does anybody know how I can remove this file???

Thanks in Advance

It's not protected by anything natively. You'll have to kill the process
that loads it first.

--
Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft Certified Professional
Microsoft MVP [Windows]
http://www.microsoft.com/protect

"sggv" wrote:
| Guys, Can any one help me on this??
|
| I need to delete an infected file which is protected by the system,
| 'C:\WININT\System32\saristar.dll', it is a dialer which has nested itself
the
| system. I can not Diasable the System Restore (like with Windows XP )
because
| I run Windows 2000 Professional version. My antivirus program can't delete
it
| either.
|
| Does anybody know how I can remove this file???
|
| Thanks in Advance
|
|

Thanks a lot!!!

"Dave Patrick" wrote:

> It's not protected by anything natively. You'll have to kill the process
> that loads it first.
>
> --
> Regards,
>
> Dave Patrick ....Please no email replies - reply in newsgroup.
> Microsoft Certified Professional
> Microsoft MVP [Windows]
> http://www.microsoft.com/protect
>
> "sggv" wrote:
> | Guys, Can any one help me on this??
> |
> | I need to delete an infected file which is protected by the system,
> | 'C:\WININT\System32\saristar.dll', it is a dialer which has nested itself
> the
> | system. I can not Diasable the System Restore (like with Windows XP )
> because
> | I run Windows 2000 Professional version. My antivirus program can't delete
> it
> | either.
> |
> | Does anybody know how I can remove this file???
> |
> | Thanks in Advance
> |
> |
>
>
>

"Dave Patrick" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> It's not protected by anything natively. You'll have to kill the process
> that loads it first.
>
> --
> Regards,
>
> Dave Patrick ....Please no email replies - reply in newsgroup.
> Microsoft Certified Professional
> Microsoft MVP [Windows]
> http://www.microsoft.com/protect
>
> "sggv" wrote:
> | Guys, Can any one help me on this??
> |
> | I need to delete an infected file which is protected by the system,
> | 'C:\WININT\System32\saristar.dll', it is a dialer which has nested
> itself
> the
> | system. I can not Diasable the System Restore (like with Windows XP )
> because
> | I run Windows 2000 Professional version. My antivirus program can't
> delete
> it
> | either.
> |
> | Does anybody know how I can remove this file???
> |
> | Thanks in Advance
> |
> |
>
>

Boot to a safe command prompt, then delete it.

James Mawson
www.dirctsos.co.uk

You're welcome.

--
Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft Certified Professional
Microsoft MVP [Windows]
http://www.microsoft.com/protect

"sggv" wrote:
| Thanks a lot!!!