Attn: Rock

[Rachel K]

Hi Rock,

I went through the steps you gave me below in regards to
my post on Sept 18th at 6:18 "Infected files that are
archived, virus program wont remove" and it didn't work.
The 5 infected files are still present and my antivirus
wont delete them. I am not computer savvy and this very
frustrating. Any other suggestions?

Rachel


When I run my virus software (Anti Vir XP)it gives me 5

infected files that are archived and cannot be removed or
deleted. I can't do anything in Windows Explorer because
it shuts down and restarts immediately and my IE 6 shuts
down frequently. How do I get rid of something that is
archived when I can't stay in Windows Explorer or on the
Internet for very long?

Thanks

Start with Trend Micro's Sysclean. After downloading the
program and
signature file turn off system restore, boot into safe
mode and run it.
Then boot back into normal mode, turn system restore,
and do a
complete scan with your AV product.

Trend Micro Sysclean
http://www.trendmicro.com/download/dcs.asp

Trend Micro Signature File
http://www.trendmicro.com/download/pattern.asp

 

[Rock]

Hi Rock,

I went through the steps you gave me below in regards to
my post on Sept 18th at 6:18 "Infected files that are
archived, virus program wont remove" and it didn't work.
The 5 infected files are still present and my antivirus
wont delete them. I am not computer savvy and this very
frustrating. Any other suggestions?

Rachel


When I run my virus software (Anti Vir XP)it gives me 5



Start with Trend Micro's Sysclean. After downloading the
program and
signature file turn off system restore, boot into safe
mode and run it.
Then boot back into normal mode, turn system restore,
and do a
complete scan with your AV product.

Trend Micro Sysclean
http://www.trendmicro.com/download/dcs.asp

Trend Micro Signature File
http://www.trendmicro.com/download/pattern.asp

Where are these files and what are file names? You mean you downloaded
and ran Trend Micro's sysclean in safe mode, and you turned of system
restore? What were the results of the scan?

 

[noitisnotme]

I have a program that is called bc wipe that always works
for me. In most cases I can let it start on the file and
not even finish but after it gets past the part saying it
cannot delete until restart I let it run for a little
while ad stop it and restart the computer and it works.
It does put a folder on the c drive showing the info but
I always just go there and delete it.
You can download a free trial at.

http://www.jetico.com/download.htm

Had it for years I use it anytime a file or folder get
difficult.

 

[Rachel K]

-----Original Message-----


Where are these files and what are file names? You mean you downloaded
and ran Trend Micro's sysclean in safe mode, and you turned of system
restore? What were the results of the scan?
_____________________________________________________
The folder and file names are...

(1)Folder: C\Documents and Settings\kyker\Local
Settings\temp
File: conscorr...ini
Status: Free memory
Detected: TR/Dldr.Stubby.C

(2)Folder: C\Documents and Settings\kyker\..\THI10BA.tmp
File: multimpp.cap...prelnsmm.exe
Status: Free memory
Detected: TR/Hijack.mulltiPP

(3)Folder: C\Documents and Settings\kyker\..\THI163A.tmp
File: multimpp.cap...prelnsmm.exe
Status: Free memory
Detected: TR/Hijack.mulltiPP

(4)Folder: C\Documents and Settings\kyker\..\THI22EA.tmp
File: localNRd.cab...polall1I.exe
Status: Free memory
Detected: TR/Dldr.Krepper.3

(5)Folder: C\Documents and Settings\kyker\..\THI6CF0.tmp
File: multimpp.cap...prelnsmm.exe
Status: Free memory
Detected: TR/Hijack.MulltiPP

I did download TM's sysclean and I ran it in safemode
with system restore off. I rebooted in Normal mode,
turned system restore back on, and ran AntiVir XP. The
same 5 files showed up. The results from sysclean showed
that there were errors for some of the files it couldnt
get into (like yahoo or aol messenger), but it wasn't any
of my files above. When sysclean was running I noticed
if it couldnt clean something it deleted it. Maybe it
couldn't do either for these? It may be easier to email
any more suggestions because sometimes my IE shuts down
before I can get to this page.
My email is (e-mail address removed). I really appreciate your
help.
Rachel

 

[Rock]

you downloaded


turned of system


(1)Folder: C\Documents and Settings\kyker\Local
Settings\temp
File: conscorr...ini
Status: Free memory
Detected: TR/Dldr.Stubby.C

(2)Folder: C\Documents and Settings\kyker\..\THI10BA.tmp
File: multimpp.cap...prelnsmm.exe
Status: Free memory
Detected: TR/Hijack.mulltiPP

(3)Folder: C\Documents and Settings\kyker\..\THI163A.tmp
File: multimpp.cap...prelnsmm.exe
Status: Free memory
Detected: TR/Hijack.mulltiPP

(4)Folder: C\Documents and Settings\kyker\..\THI22EA.tmp
File: localNRd.cab...polall1I.exe
Status: Free memory
Detected: TR/Dldr.Krepper.3

(5)Folder: C\Documents and Settings\kyker\..\THI6CF0.tmp
File: multimpp.cap...prelnsmm.exe
Status: Free memory
Detected: TR/Hijack.MulltiPP

I did download TM's sysclean and I ran it in safemode
with system restore off. I rebooted in Normal mode,
turned system restore back on, and ran AntiVir XP. The
same 5 files showed up. The results from sysclean showed
that there were errors for some of the files it couldnt
get into (like yahoo or aol messenger), but it wasn't any
of my files above. When sysclean was running I noticed
if it couldnt clean something it deleted it. Maybe it
couldn't do either for these? It may be easier to email
any more suggestions because sometimes my IE shuts down
before I can get to this page.
My email is (e-mail address removed). I really appreciate your
help.
Rachel

Answered in the newer post.