Computing.Net > Forums > Security and Virus > Have a trojan that wont delete

Computing.Net: Over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to sign up now, it's free!

Have a trojan that wont delete

Reply to Message Icon

Original Message
Name: vettelover
Date: March 2, 2006 at 20:51:07 Pacific
Subject: Have a trojan that wont delete
OS: win xp sp2
CPU/Ram: pentium 4, 1.5 gig
Comment:

Hi,

A recently got infected with a download.trojan.The exact file name or place is C:\WINDOWS\system32\winccf32.dll.
I have triesd evrything that i know of: 1.Norton can not repair, quarantine, or delete the file. 2. Tried to delete in safe mode but that did not work either. 3. Safe mode, run, command, tried to delete with command promt but that did not work either. And of corse every 3 secs Norton reminds me im infected and this undeletable file is pissing me off.


Report Offensive Message For Removal


Response Number 1
Name: dvdxenon
Date: March 3, 2006 at 06:05:26 Pacific
Reply: (edit)

I am right in saying you can't delete it because its running?

If so try something like Unlocker and then delete it - http://www.google.co.uk/search?hl=en&q=unlocker+delete&btnG=Google+Search&meta=

See if the file is loading up at startup. If it is get it out of the startup list.

Try deleting its entries from the registry as well if you're comfortable with that.

Hope this helps.

dvdxenon


Report Offensive Follow Up For Removal

Response Number 2
Name: jabuck
Date: March 3, 2006 at 15:21:52 Pacific
Reply: (edit)

You can follow the directions further down this page titled "win*.tmp.exe Solution and Questions" which will fix it.

Or please post a Hijack This log so that the files associated with the virus/spyware/hijacker can be identified. You can download Hijack This at this link http://www.tomcoyote.org/hjt/ then place it into a folder of it's on, such as C:\HJT, so that back up copies can be made and not clutter your desktop or other folders and the backup copies of deleted items can be easily located if needed.

Once saved double click HijackThis.exe, and press "Scan". When the scan is finished, the "Scan" button will change into a "Save Log" button.
Press that, save the log, Ctrl-A to Select All, and copy its contents into the text editor at this forum.

Do not fix anything yet unless you know what you are doing. This is a powerful tool that can crash the computer if used improperly.


Report Offensive Follow Up For Removal







Post Locked

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.


Go to Security and Virus Forum Home








Do you have your own blog?

Yes
No
I did before
I will soon


View Results

Poll Finishes In 5 Days.
Discuss in The Lounge
Poll History




Data Recovery Software