win32/nonyr.B trojan

Discussion in 'NOD32 version 2 Forum' started by Iznogood, Jun 15, 2004.

Thread Status:
Not open for further replies.
  1. Iznogood

    Iznogood Guest

    I have an alert for this trojan, but nod 32 couldn't remove it : it said something like " the file is lock"...What can i do ? the alert message kept coming on but then the error window " file locked" was appearing !!
    Coul someone tell me what to do ??
    THanks...

    PS: excuse my english, i'm french.
     
  2. Habiru

    Habiru Registered Member

    Joined:
    May 4, 2004
    Posts:
    43
    Location:
    Fredericton
    Go here http://www.sysinternals.com/ntw2k/freeware/procexp.shtml

    Download this file, find the process that is being used by the trojan and shut it down. Then NOD32 can delete the file or using process explorer, you can find where the process originates from and do it yourself.
     
  3. kjempen

    kjempen Registered Member

    Joined:
    May 6, 2004
    Posts:
    379
    If the method Habiru mentioned does not work, and the trojan keeps "re-starting", try starting up your Windows in Safe Mode by pressing F8 after the boot-up. Because you are working in Safe Mode only the critical processes/drivers are loaded, meaning the trojan should not be active. I also suggest you get a program called HijackThis and use it to clean out the start-up entries that are left after the trojan.
     
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.