Hacktool virus Keylogger

[Guest]

I have run my Norton Anti-virus and I am getting the message below...

The file C:\WINDOWS\system32\explorer2.dll is a Hack tool threat.

I try to delete this file and the machine tells me ...

"Cannot delete explorer2: accessis denied. Make sure the disk is not full or
currently in use..."

What is a desperate noob like me to do???

I appreciate any advice you folks can offer.

P W Britt

 

[DGuess]

I have run my Norton Anti-virus and I am getting the message below...

The file C:\WINDOWS\system32\explorer2.dll is a Hack tool threat.

I try to delete this file and the machine tells me ...

"Cannot delete explorer2: accessis denied. Make sure the disk is not full
or
currently in use..."

What is a desperate noob like me to do???

I appreciate any advice you folks can offer.

P W Britt

CTRL ALT Delete to bring up Task Manager, then click on the Process tab.
Kill that process. If it comes back, there's something else spawning it.

What I usually do for a client is to kill all "user" processes (not System
or anything else just the ones with the user's name and also not Explorer as
you might as well restart the computer and start all over again), check the
Startup menu and move everything from it to the Desktop till I can go thru
it and see if it's supposed to be there then I'll run regedit head to the
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run subkey,
export it, then start seeing whats in there and remove any uglies there.
Also check the other Run subkeys (RunOnce, etc) and the
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run subkey.

Then run Adaware, Spybot and your AV software. After that, reboot and run
them again.

 

[DGuess]

One other spot, check the Windows\Downloaded Program Files folder for the
butt uglies there as well and don't forget to clear the TIF and Temp
folders. All of them.