How do I delete this corrupt file?

Question

Long story short I got a virus on my computer that turned all my external hard drive folders into shortcuts.
I went into folder options and selected "show hidden folders" which shows all my folders that got turned into short cuts as well as the virus. I deleted the virus there - but also need to delete it off my computer or it will keep doing the same thing.

now i go into task manager, find the process and open file location, there the bugger is. But when I try to delete it (have tried running it as administrator) it says "cannot be deleted as file open in ..." (the ... is the same name as the file im trying to delete.. so its running in itself?? Cannot find the file in safe mode and its rather important I get rid of the bugger!! Any help would be GREATLY appriciated.

Answer 1

I think you may be infected with toeuw.exe.



Try this:



Firstly, boot your computer to the Safe Mode menu screen. You do this by repeatedly pressing F8 as soon as you boot up. Once there, use the arrow keys to highlight Safe Mode with Networking. Continue to boot from there, by pressing Enter. You will now see some drivers being loaded. There will be a pause at some point. This usually lasts for no more than 30 seconds.



If that’s successful, open your browser, copy and paste this link into the address bar and press Enter. It's a direct download for RKill. Save it to your desktop, then run it. When it's running, your desktop icons will vanish for a few seconds. When the notepad report is displayed, just close it. You may now delete RKill if you wish:



http://download.bleepingcomputer.com/grinler/rkill.exe



RKill SHOULD HAVE STOPPED THE INFECTION FROM RUNNING, BUT IT WON'T HAVE REMOVED IT.



Now open your browser and download TDSSKiller.exe from Kaspersky Lab. It's tiny, and takes just a minute to run. It hunts down and kills a specific family of rootkits.



http://support.kaspersky.com/faq/?qid=208280684



Now open your browser and copy and paste this link into the address bar, and press Enter. It's a direct download for the free version of Malwarebytes' Anti-Malware (MBAM). Install it, get updates and run a full scan (still in Safe Mode):



http://www.myantispyware.com/mbam



If the problem still exists, download and run the free Kaspersky Virus Removal Tool:



http://www.kaspersky.com/antivirus-removal-tool?form=1



You should now delete TDSSKiller.exe and the Kaspersky Virus Removal Tool, as updated versions are often made available. Malwarebytes' Anti-Malware can be easily uninstalled, should you wish to do so, but it may prove to be beneficial in the future.



After this, try rebooting normally. If that's successful, I recommend you run another full scan with MBAM. It will detect malware that wasn't running in Safe Mode.



Hope this helps.

Answer 2

2

Answer 3

howdy there! Dont format your pen rigidity, flash rigidity, USB stick, memory stick. particularly, left click drag the object which you dont choose into the recycle bin. attempt that. If it keeps on comming back, then that is an enduring document that the Pen rigidity desires to "vehicle start up" or some thing. Does your living house windows coach all hidden information? To view 'different' information on your pen rigidity, open my workstation -> press: alt + t and then press o, then shift + tab then exact arrow, then tab x thrice. circulate right down to hidden information and folders. tick 'coach hidden information and folders and unpick conceal extensions for commonly used document kinds. Then click 'ok' All of this desires to be completed, once you're viewing the pen drives contents. in spite of each thing it extremely is finished, verify if there are any information that relate to that particular document it extremely is corrupted. What anti virus are you using btw?

Answer 4

If you want to delete a file, the best way is to use linux. Download any linux OS and write it to disc. Insert the disc and reboot the computer. Navigate to the file and delete. Because windows is dead, no file can defend itself. Be very careful, you can delete ANYTHING.

The deleted file will still exist on the computer, but it will not be running from its system32 folder, and will be harmless.

When you reboot, i would run malwarebytes, this should remove the registry entries

Here is a very popular linux ,http://www.ubuntu.com/download/help/try-ubuntu-before-you-install

Your pc will need to be set to boot from CD as first boot option, if this is not the case, post the name and model of your pc

Answer 5

Can you locate this file at all? If you can, you can download a utility called "unlocker"...this program will allow you to access and delete the file. http://www.filehippo.com/download_unlocker/



Did you run a full virus scan and your A/V didn't find and delete it? You should also scan for that file.

Answer 6

Did you also end task on the process? If it's still running it won't let you delete it. Also, try deleting it from Safe Mode.

Answer 7

Long story short, install Fedora