PC Review Forums Newsgroups Windows XP Windows XP Security Cannot Delete Infected File

Reply

Cannot Delete Infected File

 
Thread Tools Rate Thread
Old 03-07-2004, 04:00 PM   #1
Jeff Halblaub
Guest
 
Posts: n/a
Default Cannot Delete Infected File


I have been dealing with the infamous about:blank trojan
from CoolWebSearch that hijacks IE since last April. I
finally found the hidden file (c:\windows\system32
\hlpe.dll) responsible for my IE browsing problems. I
need to delete it but every time I attempt to change
permissions (from "read only"), access is denied.
Under "Properties", when I click on the "Security" tab,
to allow full control, it's greyed out. I've attempted
this all in safe mode (to avoid the in-use problem). I've
even booted to a command prompt and attempted to change
the attributes and force delete the read-only file and I
get access denied everytime. I have got to get rid of
this file! Can anyone help? I'd appreciate any insight
into getting rid of this monster.
  Reply With Quote
Old 03-07-2004, 04:15 PM   #2
Carey Frisch [MVP]
Guest
 
Posts: n/a
Default Re: Cannot Delete Infected File

Boot into Safe Mode and try to delete the file.

How to Delete A File That Is Seemingly "Undeletable"
http://www.theeldergeek.com/delete_undeletable_file.htm

--
Carey Frisch
Microsoft MVP
Windows XP - Shell/User

Be Smart! Protect your PC!
http://www.microsoft.com/security/protect/

--------------------------------------------------------------------------------------------

"Jeff Halblaub" <anonymous@discussions.microsoft.com> wrote in message:
news:25bbd01c4610e$8c8d1870$a501280a@phx.gbl...

|I have been dealing with the infamous about:blank trojan
| from CoolWebSearch that hijacks IE since last April. I
| finally found the hidden file (c:\windows\system32
| \hlpe.dll) responsible for my IE browsing problems. I
| need to delete it but every time I attempt to change
| permissions (from "read only"), access is denied.
| Under "Properties", when I click on the "Security" tab,
| to allow full control, it's greyed out. I've attempted
| this all in safe mode (to avoid the in-use problem). I've
| even booted to a command prompt and attempted to change
| the attributes and force delete the read-only file and I
| get access denied everytime. I have got to get rid of
| this file! Can anyone help? I'd appreciate any insight
| into getting rid of this monster.
  Reply With Quote
Reply



Thread Tools
Rate This Thread
Rate This Thread:

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off