Tom's Guide | Tom's Hardware | Tom's Games
![]() |
![]() |
![]() |
Norton keeps detecting it and is only able to quarantine it after i kill the process. Problem is it keeps comming back. The directory it resides in C:\Program Files\Common Files\{9C63B134-0AF0-1033-0827-040308050001}\ can only be deleted in safe mode since it says it is currently in use by an application. I have deleted it in safe mode and removed all registry entries pertaining to it but it continues to come back. Can anyone help me get rid of this thing for good.

Turn off your system restore (Right click my Computer/properties/system restore tab/turn off system restore) and boot to safe mode and try to delete it
Or you can Download ATF Cleaner & Super Anti-Spyware then boot to safe mode and run the ATF Cleaner then the Super AntiSpyware With your System restore off
" If at first you don't succeed, Please Post Back "

If the Above post doesnt work for you , you could try either UNLOCKER or MOVE-ON-BOOT
" If at first you don't succeed, Please Post Back "

The issue is not that I can't delete the files/folder (I have done so 3 times in Safe mode with system restore turned off) but that after reboot they are back yet again. I can't determine why once they are deleted they come back. My assumption is that there is another virus which I have been sofar unable to locate that is replacing the deleted files on reboot. Is there any utility out there to track files/directories being created on startup and the applications which created them?

Download PREVX1 TRIAL And reboot to safe mode and run a scan of your system , If this program dosnt delete the problem , post back with the name of the virus
" If at first you don't succeed, Please Post Back "

If the above Prevx program doesnt get rid of it
Click Start, and then click Run.
Type regeditThen click OK.
Navigate to each of the keys:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
In the right pane, delete the any value that refers to the file detected
" If at first you don't succeed, Please Post Back "

![]() |
![]() |
![]() |

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.
| Ads by Google |