Author Topic: brontok-bl worm that cannot be deleted  (Read 8199 times)

0 Members and 1 Guest are viewing this topic.

allande

  • Guest
brontok-bl worm that cannot be deleted
« on: July 02, 2008, 02:35:12 AM »
im using avast 4.8 home edition and it detected a worm on boot scan. this was the message

File C:\hiberfil.sys is infected by Win32:Brontok-BL [Wrm], Delete: Error 0xC0000043 {A file cannot be opened because the share access flags are incompatible.}

i tried to delete it but it wont work. what should i do?

Offline bob3160

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 48842
  • 64 Years of Happiness
    • bob3160 Protecting Yourself, Your Computer and, Your Identity
Re: brontok-bl worm that cannot be deleted
« Reply #1 on: July 02, 2008, 02:48:19 AM »
The file is located in your system restore file.
To disable system restore follow the directions outlined at the following website:
http://www.pchell.com/virus/systemrestore.shtml

Once you've done that, re-boot and the restart System Restore if you use it.
Free Security Seminar: https://bit.ly/bobg2023  -  Important: http://www.organdonor.gov/ -- My Web Site: http://bob3160.strikingly.com/ - Win 11 Pro v24H2 64bit, 32 Gig Ram, 1TB SSD, Avast Free 24.4.6112, How to Successfully Install Avast http://goo.gl/VLXdeRepair & Clean Install https://goo.gl/t7aJGq -- My Online Activity https://bit.ly/BobGInternet

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67183
Re: brontok-bl worm that cannot be deleted
« Reply #2 on: July 02, 2008, 04:45:54 AM »
Hmmm... isn't this the hibernation file? I think it could be deleted (maybe in Safe Mode).
The best things in life are free.

CharleyO

  • Guest
Re: brontok-bl worm that cannot be deleted
« Reply #3 on: July 04, 2008, 06:24:56 AM »
***

C:\hiberfil.sys ... yep, I think Tech is right.


***