Can't delete infected file

  • Thread starter Thread starter Joe Mildenberger
  • Start date Start date
J

Joe Mildenberger

My anti-virus software has flagged a file as "infected", but
says it cannot delete it. The infected file is
C:\WINDOWS\System32\FF.EXE , and the virus is BackDoor.Rirc.A

1. Is this file completely foreign, or does it actually have
a legitimate function in Windows?

2. I am unable to delete it manually. Is there any way to get
around this? (It is not set to "read only"...)

Thanks,
Joe
 
if you are using XP you may need to turn off system restore in control
panel/system.

then it might do the trick
 
Joe said:
My anti-virus software has flagged a file as "infected", but
says it cannot delete it. The infected file is
C:\WINDOWS\System32\FF.EXE , and the virus is BackDoor.Rirc.A

1. Is this file completely foreign, or does it actually have
a legitimate function in Windows?

2. I am unable to delete it manually. Is there any way to get
around this? (It is not set to "read only"...)
Click to expand...

the file is probably in use (ie. running) and therefore locked by the
OS... try restarting in safe-mode...
 
Joe,

FF.EXE is a legacy from earlier DOS versions (I think 6.0 backwards) and is
File Find. It shouldn't be in XP unless you upgraded from say Win98. This
does not mean the file isn't infected.
 
DaveB,

FYI: Your suggestion would not work. The folder for System Restore is
"System Volume Information" and that is not the location the OP stated where
the file is located. Therefore, clearing the contents of the folder would
not have any effect.
 
My anti-virus software has flagged a file as "infected", but
says it cannot delete it. The infected file is
C:\WINDOWS\System32\FF.EXE , and the virus is BackDoor.Rirc.A

1. Is this file completely foreign, or does it actually have
a legitimate function in Windows?

2. I am unable to delete it manually. Is there any way to get
around this? (It is not set to "read only"...)

Thanks,
Joe
Click to expand...

You can try a nice free utility called move-on-boot from
http://www.gibinsoft.net/gipoutils/

It can remove a locked file on next reboot.
Jari
 
Sir_George said:
Joe,

FF.EXE is a legacy from earlier DOS versions (I think 6.0 backwards) and is
File Find.
Click to expand...

??? in dos one used dir /s [filename.ext] to find files... there was no
"File Find"...
 
Joe Mildenberger said:
My anti-virus software has flagged a file as "infected", but
says it cannot delete it. The infected file is
C:\WINDOWS\System32\FF.EXE , and the virus is BackDoor.Rirc.A

1. Is this file completely foreign, or does it actually have
a legitimate function in Windows?

2. I am unable to delete it manually. Is there any way to get
around this? (It is not set to "read only"...)

Thanks,
Joe
Click to expand...
Keep trying.

-*MORT*-
 
Joe,

FF.EXE is a legacy from earlier DOS versions (I think 6.0 backwards) and is
File Find.
Click to expand...

??? in dos one used dir /s [filename.ext] to find files... there was no
"File Find"...[/QUOTE]

Maybe he had a freeware called "Fast File Finder" on his old DOS
machine, and misunderstood it to be a part of the OS, although it
wasn't.

I had that thing, too, but rarely needed it, as in those times, the
files were few, compared to today; and I mostly knew where I had stored
mine :)


Gabriele Neukam

(e-mail address removed)
 
Back
Top