VIRUS galore...

Hey anybody a little more tech savvy than me...please help a bro out! I got an alert from Norton that I have a virus...

The file is called inetrus.dll I can see the file but every time I try to delete it, it says I don't have sufficient privliges...but I'm the master user accoun....HELP please!

Just go to that location and delete it manually.

are you sure it isn't a pop-up disguised and renamed "norton antivirus"? google the file name, it is most likely an important system file.

you can also set norton to ignore files, in the event that it is an error.

I'm pretty sure inetrus.dll isn't a system file.

Make a backup from the file, like inetrus.dll.bak, then boot to safe mode and remove the file. Then go back to the normal windows and do virus scan.

Quote:

Originally posted by Ascaris

I'm pretty sure inetrus.dll isn't a system file.

Make a backup from the file, like inetrus.dll.bak, then boot to safe mode and remove the file. Then go back to the normal windows and do virus scan.

word


do that

try this its a free anti virus called avast it took out several virus problems that norton 2006 let in

Quote:

Originally posted by Ascaris

I'm pretty sure inetrus.dll isn't a system file.

Make a backup from the file, like inetrus.dll.bak, then boot to safe mode and remove the file. Then go back to the normal windows and do virus scan.

It is definitely not a pop-up...I'm not that retarded, and I can't manually delete it. I did a virus scan and it still shows up...and I can't do anything to the file

Ok I rebooted in SAFE mode and tried to remove it with Norton, PC-Cillin, and manually. It say that the file is in use by another program and prevents me from deleting it. Does anybody know of a program that will just override any WinXP command and destroy this bastard?

Boot your computer with Windows XP installer CD. Let it do the regular stuff, before the option table. There is an option where you can fix your computer. It starts CMD console from the CD, and you can browse your computer locally. Use command "del" to remove file. del c:\windows\system32\file.dll

Or boot some live linux distribution (Suse Live, knoppix etc) and remove the file with it.

orr just find out when u got the virus and do system restore

System restore is off...so that's not going to work...I'll try it from the boot cd

Still no freakin sucess..thanks for all the help. Anybody else?

this might be a long shot, but you could install a handy little utility called Who Lock Me?. this lets you detect which process is using a particular file, then stop the process, so u can delete the file.

u can download it from: http://www.dr-hoiby.com/WhoLockMe/

its freeware

once installed just right click on the file, and select the 'who lock me?' option.

Quote:

Originally posted by SuperPirate

Still no freakin sucess..thanks for all the help. Anybody else?

I'm sure one of my options will help you. It just needs some time and patience.

I did try booting from disk and that didn't work...tried safe mode removal...no luck. I figured out which process is locking it up it's winlogon.exe but I can't kill that process.

If Norton detected it and couldn't repair it then it most likely has it quarantined. So however often you do a virus scan it is going to be detected. Open up Norton and click on Help and Support in the right hand corner of the Norton box and then Symantec Security Response in the drop down menu.And take it from there. E-mail them if you have to. (There's somethin' about that screen cap doesn't look right. Can't put my finger on it, just a gut feeling that it's not Norton. Also when you Google inetrus.dll they ask do you mean inetres.dll.) Hope you get it sorted. Let us know how you get on.

I used to have Norton, the cap looks fine to me.






But in any event, when I run into a roadblock like that, fuck it, I just reformat.

Yes it is definitely Norton, I ran a scan directly on the file. It is not quarantined either. I googled inetrus too and got the same results. It isn't listed anywhere other than on the symantec site as a downloader. I get that it isn't a huge threat, but the fact that I can't get rid of the damn thing is pissing me off. F-Secure.com recommended changing the file name and extension type...but I can't do that either because it is tied into a system process and locked out

Google " downloader removal tool" and see if there's anything in that plethora of results that could help you. Again I wish you the best. Somethin' like that would have me tearing my hair out too.

Cool program..but I can't use it. I know what program is using it. It is tied to winglogon.exe. I have no idea what that does but if you kill it, it crashes the system