Cannot delete Netsky.Q infected files
Saturday, July 17, 2004 at 11:41 am Windows Me Annoyances Discussion Forum
Posted by cjon
(4 messages posted)
I have a machine running WinME. It is a Gateway, with their version of Adaptec's
GoBack on it (as well as the native system restore). It contains a directory called
_restore, with a subdirectory _restore\temp. That directory contains over 65,000
files named "A#######.CPY" where the #'s represent digits. All are infected with
the Netsky.Q virus. Both the directory and it's subdirectories are marked "hidden"
by Windows explorer. I seem unable to remove thhe hidden attribute. I have tried
to change the attributes of both the directories and the files from Windows Explorer,
and from a DOS window with the ATTRIB command. All attempts have failed.
Any attempt to delete (or otherwise change) the files or directories result in an
"access denied the source file may be in use" message.
I have disabled both GoBack & System Restore. (System Restore was already disabled,
actually.)
I have tried to clean the files with AVG, Panda activescan, Vcleaner (grisoft), and
fxnetsky (symantec) in both the normal and safe modes. (except Panda online not in
safe mode)
I have tried to delete the files in both normal and safe mode with Windows explorer.
I have opened a DOS window and tried to delete the files or deltree the directories.
I have tried to boot to DOS from a floppy. With a W98 floppy, there is no C: drive
found, but fdisk reports a non-DOS partition on the HDD. With a WinME startup disk,
it reports that the C: drive is missing and suggests that a virus may be responsible.
Various programs that found the viruses suggested that they would mark them for removal
and remove them upon re-boot. All failed.
Any suggestion about making the files accessable and removing them will be appreciated.
CJon
|
Responses to this message:
|
|
All messages in this thread [show all]
 | Cannot delete Netsky.Q infected files (cjon: Sat, Jul 17, 2004, 11:41 am) |
| |
| |
| |
Return to the Windows Me Discussion Forum
|
|