if it's a FAT32 drive, boot off a win98 floppy & delete the files.
if it's an NTFS -- get a bootable CD (there'sa few out there, bartpe is my fav,
thre are several unix based ones that can access ntfs) and delete the files.

Note: That there may be another program that's being launched that'll re-create
those dll's (or differently named dll's) It's important to clean the system.



On 16 May 2007 17:36:25 -0700, sweet_euphoria_morning@hotmail.com wrote:

>I'm having some virus/spyware issues, and I'm basically trying to
>delete the .dll files that the viruses hide under while certain
>central programs are running, such as explorer.exe and winlogon.exe.
>I got around the first (explorer.exe) by rebooting in safe mode and
>deleting the .dll files considered viruses by virtue of the program
>not running. I couldn't do this with winlogon.exe -- the program
>necessarily runs, it seems, even in safe mode.
>
>The particular bastards themselves are both found in C:\WINDOWS
>\system32:
>
>awvtq.dll
>gebaawu.dll
>
>Now, there are some programs (such as file unlocker) that can force
>the .dll files to be unlocked (the whole problem, obviously, is that
>when I try to delete the .dll files while the .exe files associated
>with them are still running -- in this case winlogon.exe -- I'm told
>the file is being used by another person or program), but I'm wary in
>using them, mostly because I haven't used them before, there are no in-
>depth neurotic-people tutorials regarding how to specifically use a
>program such as file unlocker, and I'm incredibly sensitive to the
>possibility of screwing up my system. Nobody likes reinstalling
>windows. So my question is:
>
>How can I delete the abovementioned .dll files while they are
>associated with winlogon.exe without terminating winlogon.exe?
>
>As a note, I've also tried hijackthis.exe; no luck.
>
>I really appreciate help on this.