Need help deleting explorer32....

Discussion in 'Windows Desktop Systems' started by Codasmd, Jun 22, 2002.

  1. Codasmd

    Codasmd Old School XPeriencer

    Messages:
    495
    Location:
    Los Angeles, CA.
    It appears to be a trojan horse that I picked up on Kazaa.

    It is in this location: C:\WINDOWS\system32 and I cant delete it.

    When I reboot, I see a quick flash of a dos window and then tiny firewall asks me if its ok to allow "explorer32" access to so and so at someplace.

    When i try to delete it says that it "can't be deleted because it is currently in use".

    A small bit of info on it can be found here.
     
  2. Iceman

    Iceman Moderator

    Messages:
    2,695
    boot up in safe mode and try to delete it from there,

    to boot up in safe mode: press F8 right after the bios screen appears, might have to push it more than once.

    hope this helps, good luck :D
     
  3. Lonman

    Lonman Bleh!

    Messages:
    2,642
    Open the task manager... end it... delete it.
     
  4. Codasmd

    Codasmd Old School XPeriencer

    Messages:
    495
    Location:
    Los Angeles, CA.
    Thanks guys. I got that little fugger in safe mode.
    I tried the taskmanger way too, but it wasn't really running so I couldn't really get to it that way.

    I also found an explorer32.pf file in C:\Windows\Prefetch in case someone else runs into this problem.

    Now on searching I can find nothing related to explorer32, no ms-dos window during boot, and the tinyfirewall does not seem to be annoyed by it.

    Thx
     
  5. sharpton

    sharpton Guest

    Remember

    Trojans can use a different name each time they execute, you may still be infected.

    Sharpton Out