virus help?

[+3kk!]

Ok, so a email virus is detected on my com. the worm doesnt let me delete it saying that i dont have acess....any help?

ya anyone know how to open the registry?

[I'm Charming]

Restart your computer..

At the first boot screen press F8

Select safe mode..

Scan in Safe Mode and then delete.

Select to save your changes.

Reason for this...

The reason you can't delete the virus is because its a active process.

Safe Mode only loads the drivers needed to boot windows OS...

Therefor the virus process won't be running and you can take it out.

[supra_speed]

and if you really need to open registry.

Go to run > regedit

[JohnXDoe]

I had a worm recently and thought I deleted it with my AV. But when I checked my registry it was still there. If you don't want to do the regedit thing or are confused by it, google Hijack This and download it from a reputable site. Run a scan and save the log file. Then with the program still open go here http://www.hijackthis.de/ and paste the scan results from the log file in the box. Then click the "Analyze" button. Everything in your registry will come up with a description of exactly what the entries are and a recommendation of what to do. This found the last remnants of my worm when nothing else did and I was able to delete the two entries through Hijack This. Just remember to keep it open while you scan. Both scans, (Hijack This and the analyzer) take a matter of seconds.

This may be a first or last step when used with your AV, but it's worth doing regardless of your method of deletion.

[bradc1988]

Yeah I have a virus on my computer that has stuffed around with my AVI files. It says something about Win32 is invalid or something. Unfortunately I don't have the net on that computer at the moment so I can't figure out what the problem is.

[Ephemeral]

The reason it probably didn't let you delete it, is somehow it made it's way into the WINDOWS and SYSTEM32 folders. From booting the OS regularly, it won't let you change or delete anything out of there. But, if you run in safe mode, it will.

[Light Fantastic]

http://www.bleepingcomputer.com/files/spyware/KillBox.zip

There are some things you can't delete in safe mode.