Can't delete \Program Files\Outlook Express directory

fclifton · Jul 16, 2006

I had a malware which created a C:\Program Files\Outlook Express directory. At first I could not run regedit or cmd either. Doing a web search I found some information at Symantec about the W32.Alcra.F worm. I followed the removal instructions and was able to run regedit, etc. The information indicated that the above mentioned directory was to be removed. When I tried to remove the directory I could not, as it wasn't empty. When I tried to delete the files I could not, if one got deleted it simply returned. I assumed that some process was still running that was recreating the files on the fly. By taking out of the registry various keys that had anything to do with Outlook Express (I am not using it, don't have it installed) I was able to delete the files. However, I still cannot delete the directory. When I try I get a message saying the file is in use. I am thinking there is still some malware that needs to be gotten excised. Any ideas?

Thanks,
Frank

EDIT: Deleted inline log

DavidGP · Jul 16, 2006

Hi and Welcome,

We will endevour to help you rid your PC of this infestation but to proceed please follow our standard cleaning procedures which are necessary for us to provide you support. Also there are steps included for installing, running, and posting HijackThis logs as attachments.

- Run ALL the steps in this Sticky thread READ & RUN ME FIRST Before Asking for Support

Make sure you check version numbers and get all updates.

- Very Important: Make sure you tell us the results from running the tutorial...was anything found? Were you unable to complete any of the scans?...Were you unable to download any of the tools?...Did you do the on-line scans as suggested? etc.

Click to expand...

After doing ALL of the above you still have a problem make sure you have booted to normal mode and run the steps in the below link to properly use HijackThis and attach a log:

Downloading, Installing, and Running HijackThis

When you return to make your next post, make sure you attach the following logs and that you have run these scans in the following order too (these scans are covered in steps 6 & 7 of the READ & RUN ME sticky)

Bitdefender

Panda Scan

HijackThis

You could also use one of these apps to delete the folder or file in use.. if it cannot be deleted in Safe Mode?

1. Pocket Killbox
2. MoveOnBoot this one, once you dragNdrop the file or browse for its location, deletes the file on reboot, so any applications that have locked the file are not running so cannot lock it before deletion.. my fav!
3. Unlocker

Log in or Sign up

Can't delete \Program Files\Outlook Express directory

fclifton Private E-2

DavidGP MajorGeeks Forum Administrator - Grand Pooh-Bah Staff Member