1.

Solve : Cannot delete Suspicious files?

Answer»

Can anyone help me??  I have a virus on my computer called W32.Qdialer.W.  It causes a text box to be on my computer at all times that cannot be closed (and is always on top).  I have tried Norton, F-prot and other virus scanners.  They all find them, but say they cannot delete them.  I have also turned off my System Resore and ran the scan in DOS, but this will not delete the files either.  Any advice??  This is making me crazy!Cary Hendricks....do your scanners tell you where it is ?
You should also be able to click on the intruder once its identified by say Norton ...and there should be a link to how to remove it ....are you seeing that ?
Let us know

dl65  Hi.  The scanners tell me it is in on my C drive in the Program files.  But I cannot delete it.  Norton did not give me a link to tell me how to delete it.  I am using F-prot now and it says it cannot delete the file.  Is there another anti-virus tool that will work better?Cary Hendricks.... "The scanners tell me it is in on my C drive in the Program files."
Can you see it in the program files ?

Try rebooting into the Safe mode and when you find the file or file FOLDER ...see if you can ...open the folder ...then delete the entries manually one at a time and then delete the folder .  

Is your Norton AV upto date as far as the subscription ( expiry date ) and latest updates ?

Which Operating system are you using ?

Let us know

dl65  There might be a patch available for it.
Also, try to run a scan in Safe Mode.
It may be slow, but it's worth it.I am not at my home computer right now to give you all the details.  I will check it out tonight and let you know.  I am on MicroSoft XP operation system.  I have tried to go into Explorer and delete the files.  They go away at first but then come back.  I will post more tonight.  Thanks so much for your help, I am at my wits' END!!  :-/Also, try to cool down... It may be hard, but bashing up the PC won't help!

Aso let your PC cool down. The CPU may be overheated and you should switch it off.

Deleting it after that becomes faster and easier.Try locating the process in the Task Manager. If you can find it, then terminate it immediately.
Then, go to MSCONFIG in the  Start/Run menu on the Windows task bar. Go to the startup items and services to see if you can locate the file (or if using Windows98 or older, look in AUTOEXEC.BAT).
Restart it and check for the process again using Task Manager.Cary Hendricks.....Ok , it has probably PUT an entry ( maybe more in the REGISTRY )....So use the registry search function to find it and then delete it .......
Here's how to use the search feature in registry..

click start /run ......when the run box opens ........type regedit .....and then hit enter ......when the registry editor opens ...click on edit up top .......then select find....when the find what box appears ....type in what your looking for and hit  find next .......let it run .....you can expect either .......registry to open at wherever its made the entry ....( in which case you can delete it ) .....be sure you back up your registry before deleting just in case ........or you will see the message "Finished searching through the registry" that means nothing  was found.  If however something was found ....and you delete it .........go back and repeat your search again.......there may be more than one entry and this will find then ...and again ,delete as before ......and search again until you see the "Finished searching the registry message .....then you know you got them all.

Once again .......remember to backup your registry before you delete anything .........
I repeat this because the registry intimidates people , particularly if you aren't used to working in there .

One more thing you should try ...before you go into the registry......D/L and install and run ......
M/S Antispyware Beta  ......get it at .......  http://www.microsoft.com/athome/security/spyware/software/default.mspx

It has a pretty decent registry scanner and it may well clean it out for you ...

Let us know how you make out
dl65  OK.  I ran the MS Antispyware Beta and it deleted some suspicious files.  The textbox went away temporarly, but now is back.  I deleted the file from the registry, but that didn't help.  Maybe that is not where it is??  I don't know!  What else can I do??  Thank you so much for your help!Two to try spysweeper from webroot.com... cws shreeder from intermute.com



Discussion

No Comment Found