Unable to delete infected file

Go to www.sarc.com and do a search for VBS.Sorry.C.
Follow link the write up. This will give you instructions on how to remove the virus from your machine.

Norton frequently does this - reports an infected file, then informs you that it can't delete it. It should offer to delete it next time you reboot, as this message usually occurs when a file is open and in use. Did you clean out the Registry settings created by the virus? This is where the infection is executed at startup, and it may occur before NAV gets a chance to remove it.

The file extension is .vbs, btw, not .exe - that may have prevented you from finding it. It's just a text file containing vbscript that is executed by Windows Scripting Host. As a long shot, you might try spoofing the system by creating a new text file in the Windows/fonts/ folder and naming it ttfloader.vbs. If there's a file there by that name, but hidden for some reason, you should be asked if you want to overwrite the file. Go ahead and save the new blank file; since it's blank, it can't do any harm, and if NAV wants to delete it, it should have no trouble with it. Of course, if it is really working properly, it should no longer report that the file is infected. Good luck - chasing these things down can be a major headache!

Another possibility is that the file is being found inside an archive or system restore file.

Read the error report more closely if the file is inside the system restore archive: disable system restore--reboot--and re enable system restore. this will also remove any previous restore points.
if the file is located within an archive or zip file delete the archive containing the virus.

I do this pretty regularly and have gotten to where I delete the internet explorer Temporary internet files before I run a complete scan to eliminate false positives from temp files that where left over.

This question was closed by the author