Computing.Net > Forums > Security and Virus > Cannot delete this file in Registry

Cannot delete this file in Registry

Reply to Message Icon

Original Message
Name: tinylion
Date: April 10, 2007 at 13:04:57 Pacific
Subject: Cannot delete this file in Registry
OS: Windows XP Pro
CPU/Ram: 512 MB
Model/Manufacturer: Dell
Comment:

C:\WINDOWS\system32\hidtil.dll

This is a new one on me.
I have run Hijack this a number of times, deleted this file from safe mode, and it still appears. It seems to be a winantiviruspro pop up trojan gen that keeps appearing for no reason. There are no other files that appear out of the ordinary, I have researched everyone. this one seems to have noting for a background even.



Report Offensive Message For Removal

Response Number 1
Name: jabuck
Date: April 10, 2007 at 14:16:05 Pacific
Subject: Cannot delete this file in Registry
Reply: (edit)

Please download VundoFix.exe to your C:\.
Double-click VundoFix.exe to run it.
Click the Scan for Vundo button.
Once it's done scanning, click the Remove Vundo button.
You will receive a prompt asking if you want to remove the files, click YES
Once you click yes, your desktop will go blank as it starts removing Vundo.
When completed, it will prompt that it will shutdown your computer, click OK.
Turn your computer back on.
Note: It is possible that VundoFix encountered a file it could not remove.
In this case, VundoFix will run on reboot, simply follow the above instructions starting from "Click the Scan for Vundo button." when VundoFix appears at reboot.

Post the log located at C:Vundofix.txt.


Please post a Hijack This log so that the files associated with the virus/spyware/hijacker can be identified.

Please download HJTsetup.exe from this link http://www.thespykiller.co.uk/files/HJTsetup.exe to your desktop.
Doubleclick on the HJTsetup.exe icon on your desktop.
By default it will install to C:\Program Files\Hijack This.
Continue to click "next" in the setup dialogue boxes until you get to the "Select Addition Tasks" dialogue.
Put a check by "Create a desktop icon" then click "Next" again.
Continue to follow the rest of the prompts from there.
At the final dialogue box click "Finish" and it will launch Hijack This. At this point exit Hijack This. Rename hijackthis.exe as that sometime helps locate the baddies. Go to start> search> files and folders> type in the top space "hijackthis.exe" without the quotes> click search> when it is found in the right pane (looks like a pile of dynamite)>right click on it> click rename> rename it "show.exe" without the quotes> click a blank space on the screen.

Run Hijack This. Click on the "Do a system scan and save a logfile" button. It will scan and the log should open in notepad.
Click on "Edit > Select All" then click on "Edit > Copy" to copy the entire contents of the log and post it in this thread.

Do not fix anything yet unless you know what you are doing. This is a powerful tool that can crash the computer if used improperly.


Report Offensive Follow Up For Removal







Use following form to reply to current message:

   Name: From My Computing.Net Settings
 E-Mail: From My Computing.Net Settings

Subject: Cannot delete this file in Registry

Comments:

 


  Homepage URL (*): 
Homepage Title (*): 
         Image URL: 
 
Data Recovery Software