Help getting rid of trojan

[mrzed]

I think I might have caught some variant of the Autorooter trojan.

There is a folder added to my D: that I cannot access or delete, no matter how I am logged in to the computer.

It is d:\b\ it contains spunist.exe and two subfolders: download and update. I have tried booting to recovery console to remove, but I get access denied messages even there.

Any ideas?

 

[easternerd]

is it service pack uninstall directory ? just curious.
try changing the permissions..
or mebbe the files in that directory are being used
by the active OS...try changing to another OS and deleting.. it will work..
but make sure its not needed..

 

[mrzed]

I would have thought that booting from the recovery console would mean the directory would not be in use. I don't think it's the service pack unistall. Reason being, it didn't install to the same drive as the windows installation.

I'll try booting to a DOS disk and deleting.

 

[JackMDS]

Could be that the Directory, and the Files are +RSH.

Log to Safe Mode change the attributes and delete.

 

[djdrastic]

Take Ownership of the Directory in safe mode

 

[djdrastic]

Take Ownership of the Directory in safe mode

 

[ForsakenMaster]

Originally posted by: mrzed
I think I might have caught some variant of the Autorooter trojan.

There is a folder added to my D: that I cannot access or delete, no matter how I am logged in to the computer.

It is d:\b\ it contains spunist.exe and two subfolders: download and update. I have tried booting to recovery console to remove, but I get access denied messages even there.

Any ideas?

Most trojans must be shut down in the active process list before you can delete them.