Can't delete severe threat

[Guest]

WD detected a severe threat (which is quarantined) and advises that it me
removed immediately but I cannot delete the files. Here is the error message
from WD when I try to "remove all":

Error encountered:
Code 0x80508017. Some actions couldn't be applied to potentially harmful
items. The items might be stored in a read-only location. Delete the files or
folders that contains the items or, for information on removing read-only
permissions from files and folders, see Help and Support.

I've tried manually deleting the files and I've to change the file
properties, but am unable to do either.


Here’s the original message from WD:

Category:
Trojan Downloader

Description:
This program is dangerous and downloads other programs.

Advice:
Remove this software immediately.

Resources:
file:
C:\Documents and Settings\All Users\Application Data\Symantec\Norton
AntiVirus\Quarantine\58693DD4.zip->(CryptFF)->Installer.class

file:
C:\Documents and Settings\All Users\Application Data\Symantec\Norton
AntiVirus\Quarantine\325E51A1.zip->(CryptFF)->Installer.class

file:
C:\Documents and Settings\All Users\Application Data\Symantec\Norton
AntiVirus\Quarantine\3520361D.zip->(CryptFF)->Installer.class

file:
C:\Documents and Settings\All Users\Application Data\Symantec\Norton
AntiVirus\Quarantine\014A1FB9.zip->(CryptFF)->Installer.class

file:
C:\Documents and Settings\All Users\Application Data\Symantec\Norton
AntiVirus\Quarantine\03D44DD9.zip->(CryptFF)->Installer.class

file:
C:\Documents and Settings\All Users\Application Data\Symantec\Norton
AntiVirus\Quarantine\6C0106DE.zip->(CryptFF)->Installer.class

containerfile:
C:\Documents and Settings\All Users\Application Data\Symantec\Norton
AntiVirus\Quarantine\6C0106DE.zip

containerfile:
C:\Documents and Settings\All Users\Application Data\Symantec\Norton
AntiVirus\Quarantine\58693DD4.zip

containerfile:
C:\Documents and Settings\All Users\Application Data\Symantec\Norton
AntiVirus\Quarantine\3520361D.zip

containerfile:
C:\Documents and Settings\All Users\Application Data\Symantec\Norton
AntiVirus\Quarantine\325E51A1.zip

containerfile:
C:\Documents and Settings\All Users\Application Data\Symantec\Norton
AntiVirus\Quarantine\03D44DD9.zip

containerfile:
C:\Documents and Settings\All Users\Application Data\Symantec\Norton
AntiVirus\Quarantine\014A1FB9.zip

View more information about this item online

 

[Guest]

Clete,

The files you mention all seem to be located in:
....Symantec\Norton AntiVirus\Quarantine\...

Ergo, I assume they were quarantined by Norton!
Ergo, I would tell Norton to empty, delete, purge, what ever, them from its
quarantine.

By the way I believe that by default WD does not delete ZIP files as they
may contain good files as well as bad files. I think this is why WD is not
able to delete them itself.

?
Tim
Geek w/o Portfolio

WD detected a severe threat (which is quarantined) and advises that it me
removed immediately but I cannot delete the files. Here is the error message
from WD when I try to "remove all":

Error encountered:
Code 0x80508017. Some actions couldn't be applied to potentially harmful
items. The items might be stored in a read-only location. Delete the files or
folders that contains the items or, for information on removing read-only
permissions from files and folders, see Help and Support.

I've tried manually deleting the files and I've to change the file
properties, but am unable to do either.


Here’s the original message from WD:

Category:
Trojan Downloader

Description:
This program is dangerous and downloads other programs.

Advice:
Remove this software immediately.

Resources:
file:
C:\Documents and Settings\All Users\Application Data\Symantec\Norton
AntiVirus\Quarantine\58693DD4.zip->(CryptFF)->Installer.class

....

 

[Guest]

Looks like WD is complaining about the stuff that has already been
quarantined by Norton. So why don't you go into Norton anti-virus and just
clean out the quarantine file. Another way around the problem would be to
tell Windows Defender (WD) not to scan files in an archive (e.g., zip, rar,
etc). You can do that by clicking Tools and Options and uncheck the box to
scan archived files.

 

[Guest]

H4ello Clete,

Those files are in quarentine by Norton.


If you really want to keep the ZIP file around but do not want to see this
error you can disable scanning inside archives.

Clear the checkbox for "Scan inside archives" in the Options section under
the Tools menu.

Generally, threats inside archives, while good to know about, are not
"active", meaning they can't do anything bad to your system while inside the
archive.


Whatever you do, (installing and updateting or unistalling) always as a
administratºr.


Have you tried these operations running in safe mºde?

In safe mode, some of the protective services which these programs use to
ensure that they aren't removed, are not running, so they are easier to
remºve.

Getting into Windows Safe Mode.
http://www.computerhope.com/issues/chsafe.htm


Also in safe mode. Do full deep scans with Windows Defender. Ditto with the
ªntivirus.


Reboot


Go to Ewido and safery.line and run the scan.
http://www.ewido.net/en

Scan your computer now online
http://safety.live.com/site/en-US/default.htm
Look for the broom Clean up, also Tune Up..


For the benefit of the community reading this post, please rate the pºst.

I hope this post is helpful.

Let us know how it works ºut.

Еиçеl
--

 

[Guest]

BTW, you could also exclude the Norton Quarantine File from being scanned by
Windows Defender. That might be the easiest approach. Look under Options.

 

[Guest]

Tom,

Thanks. I used Norton to delete the files and it worked.

Clete

 

[Guest]

Thanks. I went thru Norton as you suggested and it worked.

Clete

 

[Guest]

Engel,

Thanks for your suggestion. Two earlier posts suggested cleaning the files
out with Norton. I tried that and it worked. I then re-ran a WD scan and it
came up clean.

I appreciate everyone's help.

Clete

 

[Guest]

Hi Clete,

Thanks for the feedback, Clete... Thank you for updating the thread.

Have a Good New Year 2007
--