Solved

Notification of norton won't stop

Posted on 2008-10-02
7
1,196 Views
Last Modified: 2013-12-09
Hi Experts, my norton antivirus software gives me e notification of a virus found (trojan horse) and give that it can not be removed because access was denied. When I try to remove the file myself it gives me access denied also. How can I remove this file and stop norton from placing this notification window all the time when my pc is stared up? I can close this window it stays on the screen the whole time.
This is the message:
Scan type:  Realtime Protection Scan
Event:  Virus Found!
Virus name: Trojan Horse
File:  C:\WINDOWS\system32\__c001B4EA.dat
Location:  C:\WINDOWS\system32
Computer:  HOME-624840057D
User:  SYSTEM
Action taken:  Clean failed : Quarantine failed : Access denied
Date found: Thu Oct 02 12:36:12 2008
0
Comment
Question by:sharscho
7 Comments
 
LVL 8

Expert Comment

by:jtdebeer
Comment Utility
You will have to startup in safe mode and then delete the file.

There is obviously some process holding onto the file, when you startup in safe mode only a limited amount of services will start and you will be able to delete the file.

0
 

Author Comment

by:sharscho
Comment Utility
Thanks for the posting but I can't my windows opening in save mode, can you tell how I can accomplish this? I have windows xp sp2.
0
 
LVL 3

Expert Comment

by:rsquibb
Comment Utility
You can boot into safe mode by tapping the F8 button just before the windows XP loading screen appears.  It should then bring up a list of options and one of them is safe mode
0
Find Ransomware Secrets With All-Source Analysis

Ransomware has become a major concern for organizations; its prevalence has grown due to past successes achieved by threat actors. While each ransomware variant is different, we’ve seen some common tactics and trends used among the authors of the malware.

 

Author Comment

by:sharscho
Comment Utility
Thanks for the F8 tip. I did start win xp in save mode it still gives me access denied to delete this file eventhough I have full privs on it. What else can I do to remove this file?
0
 
LVL 23

Accepted Solution

by:
phototropic earned 350 total points
Comment Utility
Try using a third-party utility such as Unlocker:

http://ccollomb.free.fr/unlocker/

Good luck!!!

0
 

Author Comment

by:sharscho
Comment Utility
thanks alot. this helped to solve the problem!
0
 
LVL 23

Expert Comment

by:phototropic
Comment Utility
Cheers.  Glad to hear you got it sorted...
0

Featured Post

What Security Threats Are You Missing?

Enhance your security with threat intelligence from the web. Get trending threat insights on hackers, exploits, and suspicious IP addresses delivered to your inbox with our free Cyber Daily.

Join & Write a Comment

I use more than 1 computer in my office for various reasons. Multiple keyboards and mice take up more than just extra space, they make working a little more complicated. Using one mouse and keyboard for all of my computers makes life easier. This co…
Today, still in the boom of Apple, PC's and products, nearly 50% of the computer users use Windows as graphical operating systems. If you are among those users who love windows, but are grappling to keep the system's hard drive optimized, then you s…
Sending a Secure fax is easy with eFax Corporate (http://www.enterprise.efax.com). First, Just open a new email message.  In the To field, type your recipient's fax number @efaxsend.com. You can even send a secure international fax — just include t…
This video explains how to create simple products associated to Magento configurable product and offers fast way of their generation with Store Manager for Magento tool.

763 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

6 Experts available now in Live!

Get 1:1 Help Now