Re: Virus can't be removed!

Chuck

With a system that has suffered an infection by so many virus, that extensively, you would be better served to simply reformat the drive and reinstall everything from scratch. You will just never be absoulutely sure that everything has been cleaned.

--

Ronnie Vernon
Microsoft MVP
Windows Shell/User


"Chuck Davis" <newsgroup at anthemwebs dot com> wrote in message news:%23myRGbj9GHA.2316@xxxxxxxxxxxxxxxxxxxxxxx
Trying to remove viruses and other junk from a Club member's computer. I
have executed just about every virus, malware, adware removal program that I
can find.
The member bought the computer years ago, but never activated the Norton
products. Never updated Windows, never... oh! never mind!

To prevent access to the Internet by the malware programs, I downloaded and
installed the COMODO Firewall.
Ad-aware removed 51 malware programs.

Downloaded and installed AVG Anti-virus which found 65 viruses and healed
63, but cannot heal or quarantine this item.
Trendmicro's online scan gets to the file and aborts.

It is found at: c:\WINDOWS\SYSTEM32\hlpl.dll

I have attempted to simply delete it. The response is that "Access denied...
may be 'Read Only""
I start up in Safe Mode, same results. Then I attempted to turn off the Read
Only access to the SYSTEM32 folder, seemed to work for a few files, but the
stopped at that particular .dll file with the "Access denied..." message.
I have started in Safe Mode With Command Prompt. Still can't delete the
file!

At this point, I installed Service Pack 2 and the 65 critical updates since
SP2 was issued. Installed IE7. Ran Windows Live OneCare which found several
additional viruses, but couldn't resolve this issue.

All of this for a $20 donation that the member will donate to the club!

Any thoughts? How can I delete the .dll?



.

Relevant Pages

  • Re: no network connection and error: Faulting application , version 0.0.0.0, faulting module unknown
    ... Edwin vMierlo wrote: ... it is a target for virus and malware programs, so I would like to advice to ... All the computers are completely up to date with windows updates. ...
    (microsoft.public.win2000.general)
  • Re: no network connection and error: Faulting application , version 0.0.0.0, faulting module unknown
    ... it is a target for virus and malware programs, so I would like to advice to ... Faulting application, version 0.0.0.0, faulting module unknown, ... All the computers are completely up to date with windows updates. ...
    (microsoft.public.win2000.general)
  • Re: Boot up Failure -- STOP:c000135 {unable to locate Component}
    ... I had a similar error after removing several Virus' from a clients ... The Virus had substituted a dll file with what seemed to be ... which is the "Windows NT Base API Server DLL" however ... The bold portion is the corrected form. ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: DLL Cache problem
    ... It would help if you were to mention the DLL file name. ... It could be a virus ... or a spyware file that may not be "really" needed (I have seen both a virus ... > windows to run properly must be copied to the DLL Cache. ...
    (microsoft.public.windowsxp.general)
  • pbymsnd?
    ... my anti-virus detected a dll file known as pbymsnd.dll as ... a virus. ... it says windows is using ... the file and when i try to remove it from the reg edt, ...
    (microsoft.public.security.virus)