Virus removal help

[Matt]

my nortans antivirus keeps popping up with a r1mya.dll, i went to the folder to try to delete it and it says access denied....is there anyway to get rid of this? its popped up 3 times since ive been typing this message...helpppp

[EDGE]

reboot in safe mode and delete it. If that doesn't work, run your virus removal and quaretine.

[Steve]

where is the folder tril, name etc

[atholon]

You could try getting stinger...
http://www.vil.nai.com/vil/stinger

[Matt]

Originally posted by Steve
where is the folder tril, name etc

C:/Windows/system32/r1mya.dll

and edge it says "Action Taken: Unable to repair this file"

[Matt]

ok i just ran a virus scan of my system32 folder, it said it was unable to quarantine the file, then it also said its unable to delete the file.....someone explain to me why im paying for nortons antivirus if it doesnt work?


ill try to reboot in safe mode

[atholon]

Norton is a POS.

[Hellfighter]

if the file is still in use it can't do a thing with it, Alt Delete Ctri get "task manger" on desktop lookup the file name and try to right click-on the name of it select "end-Processes" then try to delete it then after it no longer listed on the screen. can't say it will work or not and all so disable system restore or it will get loaded back in after you remove it. then do a scan in safe-mod. avast! works not like Norton sorry to me norton is cheap and they only do virus that are on their hot list top 10 and they update every wed-days.


what is it name of the virus guy?

try this ok:

If you know that your computer has been infected by a known virus/worm (such as MyDoom, Netsky, Beagle etc.) try using our "FREE avast! Virus Cleaner."

Removing the infection
The worms often schedule themselves to be run automatically when you start your operating system; some of them even register themselves to be run when any other application is started. Removing such a worm is not as simple as deleting it - when you just delete the worm file, your operating system might not be able to start your applications (such as Explorer) any more.

So, in order to properly remove the worm from your computer, it is often necessary to make additional fixes in your system registry, delete the links from your Startup Folder etc. Here the avast! Virus Cleaner comes - it will find and remove selected worms from your computer, as well as fix the registry and startup items to make sure your system will work correctly after the disinfection.

Many worms - when activated - create additional working files on your hard disk. Even though these files alone are harmless, they are useless and they should not be there. When avast! Virus Cleaner detects and removes a known worm from your computer, its working/temporary files are removed as well. The same applies for worm-specific registry entries etc.

direct dl: URL: http://download6.avast.com//files/eng/aswclnr.exe

Avast is free for home users and they update 3-7x a week and they have free support for thier software programs.

all it takes is signup and get a key-code in the e-mail you would have to resign-up every 18mo but its really good on top of that it do bootscan too.

[.DareDevil.]

Because Norton Antivirus isnt the best one to use!!!!!!

My dad and others have told me how bad Norton screwed up there computer!!!!!!!

No offense but Pc Cillin is what i use and its good and my dad uses Blackice or something which is good at some point!!!!!!!

[Matt]

btw the virus is still on my computer..and chief that scan didnt even find the virus

[staffy bull]

had similar prob a while back with .dll
kept tryin to access the net and renaming itself.
only thing that touched it was pest patrol in safe mode.

[Steve]

maybe its not a virus :/
what does norton say it is exactly, w32......?

try manually deleting the file in safe mode

[Hellfighter]

Originally posted by Trilogy
btw the virus is still on my computer..and chief that scan didnt even find the virus

next time you see the message about the dll having a virus to it, write down the full info like the "Virus name" we really need to know it without it we are totally blind to what to do.
===========================================
me i have a milware (beware) virus Trojan-horse going on my end of it. Win32:admil [ADW] & Win32:admil-B [ADW] dang thing keep getting back into my system

what ever is milware is i hate the crap my self.

attachment is list of viruses my 2 anti-virus programs found mainly Avast!

[Matt]

Originally posted by Steve
maybe its not a virus :/
what does norton say it is exactly, w32......?

try manually deleting the file in safe mode

nortan says its a downloader virus

and ive tried to manually delete in safe mode but it tells me access denied because its currently running, so i checked in my processes and figured out which program it is (i think) but there was 2 of them running, so when i ended one process and tried to end the other the other one started running again, then windows popped up with this screen telling me its going to restart my computer in 30 seconds....im stumped

[Hellfighter]

win32: downloader ??? [Trj] virus will i have to say there are many name virus that make out to be a downloader we really need to know the full name of it, you see or the full message in details that you see on your screen virus warning.

i'll see what i can dig up but thats not much to go by downloader means the type of virus it is not that name of the virus.

remove it was a crappy program

Trilogy check your ICQ guy ok

[.DareDevil.]

Just from reading over stuff have you tried using Ad Aware or Spybot or some other good spyware sweeper program some delete trojans off ypour computer that they have deleted some off mine but i would try using something like that!!!!!Also you might try doing a virus search on Nortons Sitew on this virus you named and see if theres a Solution for it!!!!!!!Usually they have things like that to help!!!!!!Also i know some people were talking in some forums about the loader.exe from Adobe Photoshop and so being infected so if you use them programs try searching and seeing if loader.exe is infected if so clean it!!!!!!!Theres also a Virus that goes by ClearSearch something delete it if you see it!!!!!Therefore if one of your proograms which normally work is acting up or not working right check its properties to see where its Target is at it may of found a way to get a virus in it for the Target Clear Search something!!!!!!

[Hellfighter]

one more thing after you get it remove (viruse) disable system restore then bootup again (to desktop) this time around enable it. if you using system restore. it don't undo viruses (remove them) at all it will stay in.

by removing the virus always disable system then reboot the system when you get to desktop enable it, only way to empty out system restore fold of items it copy in it.

[Hellfighter]

Originally posted by Trilogy
nortan says its a downloader virus

and ive tried to manually delete in safe mode but it tells me access denied because its currently running, so i checked in my processes and figured out which program it is (i think) but there was 2 of them running, so when i ended one process and tried to end the other the other one started running again, then windows popped up with this screen telling me its going to restart my computer in 30 seconds....im stumped

in safemod use: [taskmanger]

close everything down or end process

everything but exployer.exe what ever is run [under user name] "in processes tab" only leave exployer.exe be running. then go delete that dang file.

if it running it will never be remove or delete it lock so you need to close it down what every other processes that don't need to be running. then you can delete the file.

disable system restore, so it copy of the file be remove too. get to desktop then (After you restart system) then enable it.

[staffy bull]

only thing that touched it was pest patrol in safe mode.

[Matt]

Originally posted by Chief ADFP
in safemod use: [taskmanger]

close everything down or end process

everything but exployer.exe what ever is run [under user name] "in processes tab" only leave exployer.exe be running. then go delete that dang file.

if it running it will never be remove or delete it lock so you need to close it down what every other processes that don't need to be running. then you can delete the file.

disable system restore, so it copy of the file be remove too. get to desktop then (After you restart system) then enable it.

i tried that chief, but the program just started itself back up again before i could delete the file