Opening stubborn files -- spyware/virus issues - Microsoft Windows

This is a discussion on Opening stubborn files -- spyware/virus issues - Microsoft Windows ; I'm having some virus/spyware issues, and I'm basically trying to delete the .dll files that the viruses hide under while certain central programs are running, such as explorer.exe and winlogon.exe. I got around the first (explorer.exe) by rebooting in safe ...

+ Reply to Thread
Results 1 to 2 of 2

Thread: Opening stubborn files -- spyware/virus issues

  1. Opening stubborn files -- spyware/virus issues

    I'm having some virus/spyware issues, and I'm basically trying to
    delete the .dll files that the viruses hide under while certain
    central programs are running, such as explorer.exe and winlogon.exe.
    I got around the first (explorer.exe) by rebooting in safe mode and
    deleting the .dll files considered viruses by virtue of the program
    not running. I couldn't do this with winlogon.exe -- the program
    necessarily runs, it seems, even in safe mode.

    The particular bastards themselves are both found in C:\WINDOWS
    \system32:

    awvtq.dll
    gebaawu.dll

    Now, there are some programs (such as file unlocker) that can force
    the .dll files to be unlocked (the whole problem, obviously, is that
    when I try to delete the .dll files while the .exe files associated
    with them are still running -- in this case winlogon.exe -- I'm told
    the file is being used by another person or program), but I'm wary in
    using them, mostly because I haven't used them before, there are no in-
    depth neurotic-people tutorials regarding how to specifically use a
    program such as file unlocker, and I'm incredibly sensitive to the
    possibility of screwing up my system. Nobody likes reinstalling
    windows. So my question is:

    How can I delete the abovementioned .dll files while they are
    associated with winlogon.exe without terminating winlogon.exe?

    As a note, I've also tried hijackthis.exe; no luck.

    I really appreciate help on this.


  2. Re: Opening stubborn files -- spyware/virus issues

    if it's a FAT32 drive, boot off a win98 floppy & delete the files.
    if it's an NTFS -- get a bootable CD (there'sa few out there, bartpe is my fav,
    thre are several unix based ones that can access ntfs) and delete the files.

    Note: That there may be another program that's being launched that'll re-create
    those dll's (or differently named dll's) It's important to clean the system.



    On 16 May 2007 17:36:25 -0700, sweet_euphoria_morning@hotmail.com wrote:

    >I'm having some virus/spyware issues, and I'm basically trying to
    >delete the .dll files that the viruses hide under while certain
    >central programs are running, such as explorer.exe and winlogon.exe.
    >I got around the first (explorer.exe) by rebooting in safe mode and
    >deleting the .dll files considered viruses by virtue of the program
    >not running. I couldn't do this with winlogon.exe -- the program
    >necessarily runs, it seems, even in safe mode.
    >
    >The particular bastards themselves are both found in C:\WINDOWS
    >\system32:
    >
    >awvtq.dll
    >gebaawu.dll
    >
    >Now, there are some programs (such as file unlocker) that can force
    >the .dll files to be unlocked (the whole problem, obviously, is that
    >when I try to delete the .dll files while the .exe files associated
    >with them are still running -- in this case winlogon.exe -- I'm told
    >the file is being used by another person or program), but I'm wary in
    >using them, mostly because I haven't used them before, there are no in-
    >depth neurotic-people tutorials regarding how to specifically use a
    >program such as file unlocker, and I'm incredibly sensitive to the
    >possibility of screwing up my system. Nobody likes reinstalling
    >windows. So my question is:
    >
    >How can I delete the abovementioned .dll files while they are
    >associated with winlogon.exe without terminating winlogon.exe?
    >
    >As a note, I've also tried hijackthis.exe; no luck.
    >
    >I really appreciate help on this.



+ Reply to Thread