how do i stop a running process?

I have just now done a scan on my computer and found over 9,000
Win32.Delf.Trogan.a's. I cannot delete these to save my life. When I try
to delete them it says I can't because the folder is in use. I have used
several programs including ad-aware but none will remove them. Help!!

Richard
Thu Dec 23 20:46:29 CST 2004

Have you tried starting in Safe Mode to remove these unwanted guests?

--
Richard G. Harper [MVP Shell/User] rgharper@gmail.com
* PLEASE post all messages and replies in the newsgroups
* for the benefit of all. Private mail is usually not replied to.
* My website, such as it is ... http://rgharper.mvps.org/
* HELP us help YOU ... http://www.dts-l.org/goodpost.htm


<jwin27520@earthlink.net> wrote in message
news:uVdpKKW6EHA.1296@TK2MSFTNGP10.phx.gbl...
>I have just now done a scan on my computer and found over 9,000
> Win32.Delf.Trogan.a's. I cannot delete these to save my life. When I try
> to delete them it says I can't because the folder is in use. I have used
> several programs including ad-aware but none will remove them. Help!!
>
>

cquirke
Fri Dec 24 08:15:39 CST 2004

On Thu, 23 Dec 2004 21:48:52 -0500, <jwin27520@earthlink.net> wrote:

>I have just now done a scan on my computer and found over 9,000
>Win32.Delf.Trogan.a's. I cannot delete these to save my life. When I try
>to delete them it says I can't because the folder is in use. I have used
>several programs including ad-aware but none will remove them. Help!!

Not surprising really; you are tackling an active malware while it's
running. That's like trying to take off on a runway to intercept a
bomber that's already bombing said runway. Guess who wins?

If an app is running as an app, it will appear as such in Ctl+Alt+Del
list and you could end the task there. If the app runs as a service,
or driver, then you'd need a 3rd-party task manager to "see" and
terminate it. This is in contrast with XP's Ctl+Alt+Del manager.

But if it's a traditional malware (i.e. something traditional av
deigns to detect and clean) then rather do a formal cleanup, from a
DOS mode diskette boot and using an up-to-date DOS-based av, e.g.

www.f-prot.com F-Prot for DOS; free, updatable

www.nod32.com NOD32 for DOS; free evaluation (no updates?)

www.sophos.com Sophos for DOS; free evaluation (no updates?)

If it's commercial malware, i.e. something trad av ignores that you'd
use Spybot or AdAware for, then try these tools from "safe" mode.

Generally, malware that's aggressive enough to defeat (or
counter-attack) Safe Mode should be on traditional av's radar, because
it's gone beyond "don't call our legitimate product 'malware' or we'll
sue you" plausible denial. Then again, some av sware vendors are
pretty gutless and may still claim "not our problem".

The other thing to do is, once you detect what is present, research
these malware for warnings about how (not) to clean them - before you
try to fix them via av, or by hand.



>---------- ----- ---- --- -- - - - -
Proverbs Unscrolled #31
"Mary and me on the beach.JPG .pif"
>---------- ----- ---- --- -- - - - -

Jack
Fri Dec 24 23:02:41 CST 2004

Updated signatures for:
trojan (win32.delf.trojan.a)

SE1R3 12.08.2004 Reference Number: SE1R3 12.08.2004

http://www.lavasoft.de/news/product/def_file/august04.shtml
-----

Install the latest Ad-aware SE 1.05, update to the latest signature files,
and run one, or more, scans to eliminate this pest.
9000 occurances may take several reboots to complete! Do so, even if it
seems unnecessary!

P.S. Note your misspelling of the more usual "trojan", vs. your "trogan".
P.P.S.. Get (and use) a spellchecker!
--
Jack E. Martinelli 2002-05 MS MVP for Shell/User / DTS
Help us help you: http://www.dts-L.org/goodpost.htm

http://www.microsoft.com/athome/security/protect/default.aspx
Your cooperation is very appreciated.
------
<jwin27520@earthlink.net> wrote in message
news:uVdpKKW6EHA.1296@TK2MSFTNGP10.phx.gbl...
> I have just now done a scan on my computer and found over 9,000
> Win32.Delf.Trogan.a's. I cannot delete these to save my life. When I try
> to delete them it says I can't because the folder is in use. I have used
> several programs including ad-aware but none will remove them. Help!!
>