evil trojan file

[cueballqt1223]

somehow i ended up with one of those stubborn trojan files
this one alerts my computer every time i enter internet explorer or
most other programs
a popup comes up saying i have a trojan file then another after that
saying i cant access it

ive tried rebooting in safe mode and deleting
-"access to this file denied"
ive tried just deleting it
-"cannot delete this file. being used by another program"
dos mode
-"access to this file denied"
ive downloaded locator programs
-my computer restarted and i had to restore it because apparently the
wrong file was deleted even though thats the one i wanted out

how do i got rid of this file?
its driving me nuts
and im afraid im going to lose everything on my computer

 

[DL]

You start by detailing the apparent trojan file name
PS If you have sys restore on, and delete it, should you use restore it will
probably be back
In the mean time try here, or post to an MS virus group.
http://www.claymania.com/removal-trojan-adware.html

 

[cueballqt1223]

the file name is
mfcock.dll


ill try turning off restore and deleting but not sure if ive done it
before

 

[cueballqt1223]

the file name is
mfcock.dll


ill try turning off restore and deleting but not sure if ive done it
before

unable to delete file
being used by another program

 

[DL]

File not listed in google, you followed the link I posted?

 

[Guest]

Hello,
The following links have utilities that are free and may be of some use'
http://www.emsisoft.com/en/software/download/
http://ccollomb.free.fr/unlocker/
Unlocker is free, try first, if no help then try A2, this one requries a
online register in order to work.
take care.
beamish.

 

[Patrick Keenan]

the file name is
mfcock.dll


ill try turning off restore and deleting but not sure if ive done it
before

Since you know what the file name is, you should also know where it is.
Often these files are stored either in a temporary file folder or in one of
teh Windows folders, either Windows or the \system32 folder.

Restart the sytem in Safe Mode and you should be able to remove the file.

To start the system in Safe Mode, either press F8 at startup or got to
start, run, type msconfig and press enter. On the Boot.ini tab, select
"/safeboot". Restart the system - it will come up in Safe Mode. Use the
Administrator account to locate the file and delete it. When you're done,
rerun msconfig and remove the /safeboot setting.

You may need to turn on, in Explorer, viewing hidden and system files:
Open Explorer, and use Tools, Folder Options, View, Show Hidden Files and
Folders and de-select Hide Protected Operating System Files.


Once the file is removed and the system is restarted in regular mode, you
might be presented with an error message from whatever was loading the
trojan (you also might not). You should be able to locate this fairly
easily with msconfig, and disable it or manually remove it.

There may be a copy of the file in a (now infected) restore point, which is
why you turn System Restore off then on again *after* removing the file.
But when you do that, make sure that you create a new restore point.

HTH
-pk

 

[cueballqt1223]

i tried patrick keenan's attempt
-failed...still cant find the other program using this file

now attempting dl's link