i have a trojan, ive found the files, i try to delete and it said"file source in use access denied" pleasehelp

Question

i have a stupid trojan, i scanned with symantec, it showed me 46 bad files, i delete most of them but there is still about 20 c:\_RESTORE\TEMP files, i click delete and it says access denied file source in use can somebody tell me how to surpase this or how to get this trojan off my comp, please, doont say spybot, it didnt do it, or avast or AVG, they didnt work. my computer is a windows ME 98, Please help??!

also
i have these pics of shoes and chapstick and random junk in my system temp folder, it says it was created a year ago, but i no it wasnt because i just got the trojan friday, is this just a internet file sent to me? i am asking this because friday my mom used that computer to type in here credit card for xbox live, and a few hours later i used sendspace.con and got it, am i safe?

i am already in safe mode

Answer 1

The restore folder is for when you want to restore. So disable restpre and put it back

Right Click on My Computer, go to Properties > system Restore tab, click on System Restore in all hard drives. then press Ok.

Go back later to enable System Restore

Answer 2

If you have that file open in a program, then you cannot delete it. An example is having an mp3 playing in media player. It won't let you delete it while it is playing. The problem might be that you closed the program or it crashed, but part of it is still in memory. You will have to press CTRL-Shift-ESC to bring up the Task Manager. Find the program that was accessing the file, highlight it, and click End Process. Wait about 5 seconds and then try to delete it.

Answer 3

Try deleting the files from a DOS command prompt.

DEL C:/directory path/filename.ext /F

DEL is the delete command, the switch /F will force deletion of readonly files.

You can use the DIR command to list the current directory contents.

To change directories use the CD command


THe switch /? added to the end of a command like

DIR /?

will display help for that command


Check that the offending program is not starting upon reboot. Empty out your STARTUP folder in your START menu. Check the following registry location for programs which are starting up upon restart.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

Also you can run MSCONFIG from the run command. This will let you configure windows for a selective startup and provide you an easy way to check that the Autoexec.bat and config.sys files are not starting up the trojan.


Edit: MS no longer supports Win98 and Win ME so the method of infection will most likely still be available to the trojan. I would also disconnect teh machine from teh internet while you are deleting files

Answer 4

DONT USE SYSTEM RESTORE unless you ahe backed up your Clean files you want to save onto an external hardrive once you use System Resore everything is cleared ( not rly dpendin on how bad the virus you got is) but you will not ahve any files that you had befiore you wiped it, I would go to go to the same place you went to to System restore, BUT instead of clearing it all click the restore to previous date button and click before this happened. As for those pictures of random crap, Your computer saves small images of everyting you view on the internet into Temp folders. So maybe a year ago you were just on google and that showed up and it was saved. If you do not want this, go to your internet options and change the temp folders store space to "1" and it will still save but so small it cant save much on it

Answer 5

If you boot in safe mode, you should be able to do it.

To go into safe mode, restart your computer and press F8 while it boots. It'll either go directly to safe mode, or to a boot list where you can select it.

Safe mode boots with minimal programs running in the background. The reason you can't delete those files is because they're currently running. So from here, find your way to that folder and you should be able to delete the files. Hope that helps.

Answer 6

Restore to before you got the virus. If that doesn't work then try deleting it in safe mode (press F8 at the start-up screen (not the log in, before the windows loading screen)). If THAT doesn't work then you are going to have to go into Command Prompt in safe mode (F8 at start-up again). And find it and delete it that way. IF THAT doesn't work... Use a linux rescue disk. I'd reccomend Knoppix. And mount your windows drive with ntfs-3g and delete it that way. Good luck.

Answer 7

I had this happen to me and I ended up having to use a program called SuperAntiSpyware, (they have a free download @ superantispyware.com)it's the only thing I found that would take it off. Not sure if you have the same Trojan, but it's worth a shot.

Answer 8

Reboot your computer and go into safe mode, you can delete the Trojan files as long as you know the path to it, which you do.

Answer 9

Try to boot by pressing the "F8" key before the Windows logo appear and select "Safe Mode"
From there, transfer your file to another partition or pendrive (remember to scan it after you've formattted your computer)

It is better now to format your computer and save all your files into another partition as your Registry has been corrupted.
Removing the trojen won't help as your system is now half corrupted.

After you've formatted your computer, install all drives and softwares, remember to scan your backup partition and then transfer back all the files

Answer 10

i was going to say maybe she wasnt in the mood. then realized you were talking computers... id say, since you have a trojan, you are definetly safe...