Cant delete

Hi i was fixing a friends pc today, he managed to get a ton of trojans, dont ask how......lol

anyway nod32 said there is a trojan in operating memory and can not be deleted, it started out being Trojan downloader Agent BF and then

C:\callpall.chm>>.CHM>>/htm2chm_explorer-exploit/codebasedtrojan
C:\callpall.chm>>.CHM>>/1.htm_explorer-exploit/codebasedtrojan

i can quarantine but not delete these but there is also an active one.
nod32 also picked up multiple infiltraitions in Recycler.

his system as i tested it : win xp pro sp1 [not fully patched, unable to access winupdate]
nod32 2.12.2 trial
adaware se
spybot 1.3

i also tried to scan in safe mode but had same problem.
how can u delete somrthing from operating memory?

thanks.

 

Since chm files are actually archives, look up the particular file through a file manager or Windows Explorer and delete them manually.

 

ok i will get him to try that thank you

 

oh and by the way symantec online scan gave his system a clean bill of health,
nod32 found 11 trojans.

 

As Nod32 Quarantined the files in question, can you send the files found in the quarantine folder C> Program Files> Nod32> infected as an attachment to samples@nod32.com

If you do not hear from Eset within 3 days (allows for weekends), please advise us here...

Let us know how you go…

Cheers

 

Blackspear,
Sweetie had written that NOD detected 11 trojans which were not picked up by NAV. Therefore, it's not necessary to send them to Eset for analysis.

 

Sorry about that, must have read it wrong

Cheers