can't delete infected file in SYSTEM32

D

Dances

ello dere -

i've found a relatively harmless virus in a file in
Windows\System32\

I can't delete it - access denied
I found the process in task manager and ended it - still
can't delete it.
I have a supervisor login but it doesn't make any
difference.

Any ideas please?
 
D

Doug Knox MS-MVP

Boot the computer in Safe Mode and then delete it. Also check for another
copy of the virus and make sure its not putting itself back. See
www.dougknox.com, Win XP Utilities, Startup Programs Tracker. This small
utility scans your system for startup programs and running processes. It
also allows you to create a log file that can be copied and pasted into a
newsgroup post. The contents of the program window are also copied to the
Windows Clipboard, automatically. For newsgroup posts, the Running Services
section, usually isn't necessary.
 
G

Guest

sometimes the file is active upon windows start up and
windows cant delete a file while it is active. So. you
can use the F8 key on boot (how ever you get into safe
mode is cool) Once in safe mode go into the windows find
the file and delete it. In safe mode the start up files
are bypased therefore the virus will not be active and
can be deleted.You can also try booting into dos mode.
(make sure you know the location of the file.) then just
delete the file.
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top