Thank you for being a valued part of the CNET community. As of December 1, 2020, the forums are in read-only format. In early 2021, CNET Forums will no longer be available. We are grateful for the participation and advice you have provided to one another over the years.

Thanks,

CNET Support

General discussion

Win32

Oct 10, 2008 5:08AM PDT

Hey there. I have a new question.

A friend of mine recently had her computer techie die (all of you, exercise regularly) and so has now come to me for help.

She has a trojan on her computer, and I have figured out where it is located. I have installed software to get rid of the problem, but like her old anti-virus software, was deleted by the trojan, even when installed with wireless turned off.

Now, the virus I think I can manually delete, except it's located on win32, which, when on a Vista, I have no idea how to access. Can anyone give me any advice, either on how to kill the trojan or accessing the files on win32?

Discussion is locked

- Collapse -
Are you really SURE it is a trojan?
Oct 10, 2008 5:53AM PDT

How to Delete a System File in Windows Vista

Warning: Do not delete system files. Bad things will probably ensue.

If you need to delete or overwrite a system file in Windows Vista, you'll quickly notice that you cannot delete system files, even as administrator. This is because Windows Vista's system files are owned by the TrustedInstaller service by default, and Windows File Protection will keep them from being overwritten.

Thankfully, there's a way that you can get around this. You need to take ownership of the files, and then assign yourself rights to delete or modify the file. For this, we'll use the command line.

More: http://www.howtogeek.com/howto/windows-vista/how-to-delete-a-system-file-in-windows-vista/

- Collapse -
Very sure!
Oct 10, 2008 7:27AM PDT

Thanks a bunch! Hopefully that will help.

Yes, the trojan is deleting her desktop, slowing the computer down, making start-up nearly impossible and putting porn on her computer. The name, that I don't remember off the top of my head, includes xxx in the name.

Thanks again.