little help here, found the spyware but can't delete it

Lithium381

Lifer
May 12, 2001
12,452
2
0
my girlfriend got a message online "you have a virus, click here to clean it" bla bla bla and clicked it..... DOH so it turns out it loads itself from "C:\programfiles\webmediaviewer" as qttask.exe sneaky bastard...... anyway, i can't delete the folder!?!?!!? it says access denied, wtf? it's a known problem at KAPlabs.... they say to just delete it, but why is the folder read only?
 

MadAmos

Senior member
Sep 13, 2006
818
0
76
I would download update and run both superantispyware and malwarebytes and see what they show, if you have one infection you often have more. Most malware does it's best to hide in your system and it is very important that you get it all or you will continually be reinfected potentially exposing any personal information that is on the compromised system or on any network it is on. I would strongly recommend posting a hijackthis log at one of the sites that has experts to review it like virtualdr, dslreports or another that you like there are quite a few reputable ones. Once you are clean You should consider using a limited user account and a good antivirus either free or paid as a backup there is some great information on this from mechbgon at the beginning of this forum.
 

BW86

Lifer
Jul 20, 2004
13,114
30
91
get Superantispyware + Spybot update both of them.
boot into safe mode and run both of them.