win32/nonyr.B trojan

[Iznogood]

I have an alert for this trojan, but nod 32 couldn't remove it : it said something like " the file is lock"...What can i do ? the alert message kept coming on but then the error window " file locked" was appearing !!
Coul someone tell me what to do ??
THanks...

PS: excuse my english, i'm french.

[Habiru]

Go here http://www.sysinternals.com/ntw2k/freeware/procexp.shtml

Download this file, find the process that is being used by the trojan and shut it down. Then NOD32 can delete the file or using process explorer, you can find where the process originates from and do it yourself.

[kjempen]

If the method Habiru mentioned does not work, and the trojan keeps "re-starting", try starting up your Windows in Safe Mode by pressing F8 after the boot-up. Because you are working in Safe Mode only the critical processes/drivers are loaded, meaning the trojan should not be active. I also suggest you get a program called HijackThis (http://www.spychecker.com/program/hijackthis.html) and use it to clean out the start-up entries that are left after the trojan.