General discussion

Locked

Unable to delete infected file

By computer_excel ·
I use Norton AntiVirus 2003 on my Pentium 4 1.6Ghz computer. It found 1 infected file, TTFLoader.exe by VBS.Sorry.C virus. Norton AntiVirus failed to deleted infected file from my hard disk. I could not delete it manually, because I could not find such file using Window Explorer with files being un-hidden. Search command failed to find infected file. I followed Symantec instruction in cleaning out the virus, yet it failed to delete infected file.

What I need to do to fix my problem?

By the way my computer is using Windows XP Professional, Service Pak 1.

This conversation is currently closed to new comments.

7 total posts (Page 1 of 1)  
Thread display: Collapse - | Expand +

All Comments

Collapse -

by netgeek In reply to Unable to delete infected ...

Go to www.sarc.com and do a search for VBS.Sorry.C.
Follow link the write up. This will give you instructions on how to remove the virus from your machine.

Collapse -

by computer_excel In reply to

I tried your suggestion and it did not solve my problem

Collapse -

by rawright In reply to Unable to delete infected ...

Norton frequently does this - reports an infected file, then informs you that it can't delete it. It should offer to delete it next time you reboot, as this message usually occurs when a file is open and in use. Did you clean out the Registry settings created by the virus? This is where the infection is executed at startup, and it may occur before NAV gets a chance to remove it.

The file extension is .vbs, btw, not .exe - that may have prevented you from finding it. It's just a text file containing vbscript that is executed by Windows Scripting Host. As a long shot, you might try spoofing the system by creating a new text file in the Windows/fonts/ folder and naming it ttfloader.vbs. If there's a file there by that name, but hidden for some reason, you should be asked if you want to overwrite the file. Go ahead and save the new blank file; since it's blank, it can't do any harm, and if NAV wants to delete it, it should have no trouble with it. Of course, if it is really working properly, it should no longer report that the file is infected. Good luck - chasing these things down can be a major headache!

Collapse -

by computer_excel In reply to

Poster rated this answer.

Collapse -

by Chris910 In reply to Unable to delete infected ...

Another possibility is that the file is being found inside an archive or system restore file.

Read the error report more closely if the file is inside the system restore archive: disable system restore--reboot--and re enable system restore. this will also remove any previous restore points.
if the file is located within an archive or zip file delete the archive containing the virus.

I do this pretty regularly and have gotten to where I delete the internet explorer Temporary internet files before I run a complete scan to eliminate false positives from temp files that where left over.

Collapse -

by computer_excel In reply to

Poster rated this answer.

Collapse -

by computer_excel In reply to Unable to delete infected ...

This question was closed by the author

Back to Windows Forum
7 total posts (Page 1 of 1)  

Related Discussions

Related Forums