backdoor.prorat

[Guest]

Hi, the other day i had the backdoor.prorat virus/trojan on my pc. Its now disabled my norton antivirus and firewall. I cant delete the files named wininv.dll and winkey.dll from the system32 folder. Ive deleted the registry entries that symantec recommended and turned off system restore etc, but cant delete these files as i get the error message: "Cannot delete (winkey/wininv): Access is denied. Make sure the disk is not full or write-protected and that the file is not currently in use." Any suggestions please?
PS. Im running Windows Xp Pro with all the latest Windows service packs and patches from Windows Update.
Many thanks.
Michael, UK

 

[MowGreen [MVP]]

Download Sysclean from Trendmicro :

http://www.trendmicro.com/ftp/products/tsc/sysclean.com

" Note that for the Trend Micro Sysclean Package to be effective,
you must download and place the latest pattern file in the same
folder as the Trend Micro Sysclean Package. "

Download the pattern file from :

http://www.trendmicro.com/download/pattern.asp

Read the Readme :
http://www.trendmicro.com/ftp/products/tsc/readme.txt

Boot to Safe Mode and run it from there.


MowGreen [MVP]
*-343-* Never Forgotten

 

[homer]

You might need to take ownership of the files. Before doing that go to one
of the top antivirus manufactureres and search their web site for the bewst
way to get rid of the virus. Assuming you need to take ownership of the
files open Windows help and support on the start menu and type "take
ownership" as the search parameter. You will find the nesessary info. If
this doesn't work repost or if someone has specific info about this virus
I'm sure they will post.

H

Hi, the other day i had the backdoor.prorat virus/trojan on my pc. Its now

disabled my norton antivirus and firewall. I cant delete the files named
wininv.dll and winkey.dll from the system32 folder. Ive deleted the registry
entries that symantec recommended and turned off system restore etc, but
cant delete these files as i get the error message: "Cannot delete
(winkey/wininv): Access is denied. Make sure the disk is not full or
write-protected and that the file is not currently in use." Any suggestions
please?

PS. Im running Windows Xp Pro with all the latest Windows service packs

and patches from Windows Update.