Can't Delete ORANS.SYS

[501]

Has anyone else encountered this file. It is connected with the hacktool.rootkit virus. The file is located in C:\WINNT\SYSTEM32\ You cannot delete it. Norton detects it but when tring to delete, says access denied. The O/S is 2000PRo.

Thanks.

 

[Enkrypted]

Have you tried to delete this in Safe Mode?



Enkrypted
A+

 

[501]

Yes.

 

[carrr]

Hit it with this. I've yet to have it fail...worst case scenario, you have to set it to delete on reboot:

http://www.bleepingcomputer.com/files/killbox.php

Tired of waiting for an answer? Try asking better questions. See: faq222-2244

 

[BionicJohn]

Security Task Manager will shift it, but BE VERY CAREFUL.

http://www.neuber.com/taskmanager/index.html

LIVERPOOL FC - 5 times Champions of Europe. 1977, 1978, 1981, 1984, 2005.
Iechyd da! John
Glannau Mersi, Lloegr.