How to delete a file that just won't delete?

[Lyn]

Hi,
My PC has been infected with "Internet Optimizer" adware. This was detected
by NIS 2004 when I ran a Full Scan. NIS 2004 was unable to remove
completely this abomination, but advised the names of the two files it could
not delete.

I was able to download their removal tool (FxNetOpt.exe) and ran it -- it
reported that Internet Optimizer was not found on my PC. I re-ran the full
scan and it again reported the same two files (a compressed DLL file within
a .cab file and the program "optimize.exe"). I have located the latter file
via Win Explorer but when I try to delete it, I get the message "Access is
denied" -- even though I am logged on as the "Owner".

So my question is: how can I get round the "access is denied" in order to
delete this file? I have had another occasion to delete an unused file but
couldn't because of the same status.

I know that I will have to do a lot more to get rid of this adware, but
until I can delete these "untouchable" files it seems to be a lost cause.

Any help appreciated. Also any alternative (and more effective) removal
tool other than the Symantec one.

Thanks in advance. Apologies if this is the wrong NG for this problem.

 

[jameshanley39]

next step is to try deleting from safe mode. then, if that fails, try
deleting from the recovery console

for deleting spyware n adware, try
MS anti spyware, adaware, spybot search and destroy, a demo of webroot
spysweeper. Hijackthis. Run these from safe mode so that the
spyware/adware hopefully isn't resident and won't reinsert itself when
you restart.

 

[jameshanley39]

try alt.privacy.spyware too

 

[Rick \Nutcase\ Rogers]

Hi,

You probably can't delete it because it's still active. Do it in Safe mode.

How to start in Safe mode:
http://www.rickrogers.org/fixes.htm#Safe mode

Other utilities to help you clean the system:

Adaware www.lavasoft.de
Spybot www.safer-networking.org

This one can help you avoid these programs from being installed in the first
place:
Spyware Blaster: www.javacoolsoftware.com/spywareblaster.html

--
Best of Luck,

Rick Rogers, aka "Nutcase" - Microsoft MVP

Associate Expert - WindowsXP Expert Zone

Windows help - www.rickrogers.org

 

[Lyn]

Thanks James, Rick. Plenty to work with here.

 

[george]

The other day I had occasion to run into optimizer.exe on a system using AVG
free edition virus scanner.
It tripped on the file and deleted it nicely without complaining. (Explorer
wouldn't)

hth

george

 

[Lyn]

Thanks George, I will look into that one too!

 

[Jim Byrd]

Hi Lyn - Sometimes tools will find files which they are unable to delete
because they are in use. A program called Copylock, here,
http://noeld.com/programs.asp?cat=misc#CopyLock can aid in the process of
"replacing, moving, renaming or deleting one or many files which are
currently in use (e.g. system files like comctl32.dll, or virus/trojan
files.)" Another is Killbox, here:
http://www.downloads.subratam.org/KillBox.zip
A third which is a bit different but often useful is Delete Invalid File,
here: http://www.purgeie.com/delinv.htm which handles invalid/UNC
file/folder name deleting, rather than the in use problem


--
Please respond in the same thread.
Regards, Jim Byrd, MS-MVP



In

 

[Lyn]

Thanks Jim. I have downloaded these and will look into them.

 

[Jim Byrd]

YW, Lyn

--
Please respond in the same thread.
Regards, Jim Byrd, MS-MVP



In

 

[Lyn]

For information, I downloaded the MS AntiSpyware Beta program and ran it.
It found a whole lot more infections that Norton had and was able to get rid
of them all (including the locked files). However it took four full scans
to finish off one of them (like an insect that just won't die when you hit
it!).

 

[Jim Byrd]

Thanks for the feedback, Lyn.

--
Please respond in the same thread.
Regards, Jim Byrd, MS-MVP



In

 

[Jim Byrd]

Hi, Lyn - If you were that infected, you might want to consider some of the
provisions I outline here: http://defendingyourmachine.blogspot.com/

--
Please respond in the same thread.
Regards, Jim Byrd, MS-MVP



In