delete file isolated by NAV 2001 in C:\windows\system32

[djsoll]

Hello. I am new to this forum, so please bear with me.

My daughter's computer has Windows xp Home edition. Its a Sony Vaio laptop.

I did a full system scan for her with NAV 2001 and it came up with a "Trojan" virus in File "aupdate.exe" in the windows\system32 folder.

It would not delete it or quarantine the file.
It said it was "isolated" but I would like to delete it

I tried Safe mode and I tried the Command Prompt. I was told "access denied".

Any suggestions would be appreciated!!!

Thanks

Debbie

 

[linney]

What is the name of this Trojan? Maybe there is a specific Removal Tool.

You could try deleting it via the Recovery Console and away from the Windows environment, as it sounds like it has been locked by Norton.

HOW TO: Install and Use the Recovery Console for Windows XP (Q307654)

http://support.microsoft.com/support/kb/articles/q307/6/54.asp

 

[bcastner]

I strongly suggest you update Norton AV as well if your Live Update license has expired.

But for your specific problem this link will fix it:

http://forums.techguy.org/t129074/s4f69ad1fbaab3824ff4d2c23ea891325.html

You will find an incredible number of posts about this particular trojan. It is extremely difficult to kill. Fortunately the updates for SpyBot Search and Destroy are aware of this little beast and will remove it, but please read the entire discussion as some manual steps may be needed to be completely succesful.

SpyBot (freeware) :

http://security.kolla.de/index.php?lang=en&page=download

 

[MichealC4]

I too would highly recommend updating your NAV as this may be a false positive. That is, the antivirus software finds the signature of what it thinks is a virus in a completely safe program.

I am Comptia A+ Certified

 

[bcastner]

TechieMichael,

This is not a false positive.

This is one of those genuine p.i.a kind of things.

Read the discussion I linked above.

Best.

 

[MichealC4]

bcastner:

Ah, my mistake

I am Comptia A+ Certified