Re: Suspect File

flamer die.spam@xxxxxxxxxxx wrote:

Hi I downloaded a file from download.com the other day, as it was
completing avast! says its infected and i chose to delete the virus.
the file (called setup.exe) still remained in my download directory, i
couldnt delete because it said it its in use, well i have rebooted,
rebooted in safe mode and still can;t delete it, its not a startup
item, its not referenced anywhere in the regsitry, i have run a boot
time virus scan, full spyware scan with spysweeper, still same message
when i try and delete it, its reporting its size now as 0kb, can't
think of what else to do. i am running a firewall and have carefully
watched outgoing and incoming connections and can't see anything unsual
there so i think its possibly just a file system error..

I have also tried to remove it from dos, however when i choose dos from
the boot menu it just loads xp and gives me a dos prompt (not exactly
the same thing) and because its on a drive partition i can't access it
(can only get c:)

is there a way to get into full dos before xp loads??

First of all, if you are talking about Safe Mode Command Prompt, you can
easily navigate to a different partition or drive. Just type the drive
letter and enter.

Or see - Undeletable Files:
http://aumha.org/a/stubborn.php
http://www.petri.co.il/delete_undeletable_files.htm
http://www.dougknox.com/xp/tips/xp_undeletable_file.htm - Pocket KillBox
http://www.bleepingcomputer.com/files/killbox.php

Malke
--
MS-MVP Windows Shell/User
Elephant Boy Computers
www.elephantboycomputers.com
"Don't Panic"
.

Relevant Pages

  • Re: What virus would delete windows files
    ... I was able to restore from a backup using dos. ... I also plan to check for spyware after virus scanning. ... supports nt versions of windows i'm going to suggest it's predecessor, ... The other day when I lost all the files in the root dir., ...
    (alt.comp.anti-virus)
  • Re: Gamma Function
    ... the destructive Windows critter-makers who are ... Windows runs DOS programs ... DOS isn't a multi-tasking operating system. ... The virus itself is but a code fragment that attaches ...
    (sci.physics.relativity)
  • Re: Is this some sort of virus?
    ... If the virus is too new for your definitions, mail scan will let it through; ... because NAV kept interfering with F-Prot for DOS. ... Prot for DOS as part of its AV Policy. ... real-world virus infected email, it made it to the Inbox. ...
    (microsoft.public.security.virus)
  • Re: virus trouble... need assistance
    ... > I recently was infected with a computer virus. ... > A DOS window popped up two or three times and then Norton shutdown. ... > Windows Update site and the page shows no conent. ... F-prot has a DOS AV utility. ...
    (comp.security.misc)
  • Re: beat the new worm from support@microsoft
    ... Sgopus describes a suitable method of stopping the ... cause so much damage to the ICT world,) virus authors now set the virus ... So, boot into DOS... ... You should still delete the reg key now that the virus is not there ...
    (microsoft.public.security)