Discussion Locked

Can not delete a file . 4 vh-crew

0 helpful
5 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
I think a hacker got into our Windows 2000 system. There is a folder inside one of our websites called ". 4 wg crew" and another called "tagged" in our _vti_log folder. I have managed to remove everything in the site ecept for these folders. I keep getting "cannot read from source file or disk" errors. I am logged in as adminsistrator. I can not boot in safemode. Each time I try, the computer re-boots into normal mode. Can anyone help me? Please Thanks

5 replies

by joseph moore

Did you try taking ownership of the folders? Right-click -> Properties -> Security -> Advanced -> Owner. Select your Admin account and OK.

If that does not work, go to Services and stop all NetDDE services if they are running. Then try to delete the folders.

As for the Safe Mode problem, I seem to remember reading about a Registry hack that would disable a Safe Mode boot option, so the machine would not boot into Safe. Unfortunately, I can't remember what that is. Maybe someone else will remember.

by cbach1997

VH Crew was a new virus a year or two ago if I remember right, it got some press too. This is probably why you can't get rid of it and why you're having Windows problems. You may want to see if Symantec or McAfee or TrendMicro or whoever else has a repair kit for such a "payload". Otherwise, unfortunately, you probably have to re-do your OS. Sorry, man. Viruses suck. Good luck,

This discussion is closed to new replies.