Here we go again! - Page 2

**Thepunkinator** · 07-19-2005, 10:58 AM

I'll keep poking around Thunderbird's Inbox. I ran the code you gave me and the results are here:

----------------------
Volume in drive C has no label.
Volume Serial Number is 9C94-4550

Directory of C:\WINDOWS\system32

02/08/2005 10:37 AM 417,792 ??plorer.exe
1 File(s) 417,792 bytes

Directory of C:\Documents and Settings\Darrell Miley\Desktop
---------------------------

On a whim I used the full path and attribute settings to try and delete the file via the command prompt. I received an "access denied" message.

I still am unable to see the file in explorer even though I have triple checked that I have the show hidden filed on in that folder and everywhere else. Is there a way to change to attribute/access control on the file so I can delete it manually?

Thanks!

**Thepunkinator** · 07-19-2005, 11:08 AM

Update to my post above: I used the ATTRIB command to remove all attributes from the file. No errors on the command. I then went to delete the file again using the full path name and BINGO! Got it. I re-ran the code you gave above and sure enough the file is gone!!

I am going to clean my Thunderbird inbox further and then run a Panda scan again. I'll post the results when I have them. Thanks for the help gang!!!

**Thepunkinator** · 07-19-2005, 11:44 AM

Ok. I cleaned the Thunderbird Inbox very thouroughly. I then ran another Panda scan. IT'S CLEAN!!!

Nohting to post from the log because it didn't create one. May I make the large assumption that this means we've got it?

You guys are the best!!

**POADB** · 07-19-2005, 12:33 PM

Your log is clean.

Please clear your System Restore Points by doing the following:

To turn off System Restore,Click Start > right-click My Computer and then click Properties. Click the System Restore tab > Check "Turn off System Restore" or "Turn off System Restore on all drives". Click Apply. When turning off System Restore, the existing restore points will be deleted. Click Yes to do this. Click OK.

Reboot your System.

Now create a new Restore Point:

To turn on System Restore,Click Start. Right-click My Computer, and then click Properties. Click the System Restore tab. Uncheck "Turn off System Restore" or "Turn off System Restore on all drives." Click Apply, and then OK.

To help prevent future spyware installations/infections, please read the Anti-Spyware Tutorial http://www.greyknight17.com/spyware.htm#prevent and use the tools provided.

Are there any problems now? If not, you should be set to go.

**Thepunkinator** · 07-19-2005, 01:08 PM

No problems to report. I have created the new system restore points. Thank you guys! I'm heading over to the donation page now!

07-19-2005, 12:33 PM	#24 (permalink)
POADB Moderator, Microsoft Support Join Date: Jul 2004 Location: United Kingdom Posts: 6,482 OS: XP SP2	Your log is clean. Please clear your System Restore Points by doing the following: To turn off System Restore,Click Start > right-click My Computer and then click Properties. Click the System Restore tab > Check "Turn off System Restore" or "Turn off System Restore on all drives". Click Apply. When turning off System Restore, the existing restore points will be deleted. Click Yes to do this. Click OK. Reboot your System. Now create a new Restore Point: To turn on System Restore,Click Start. Right-click My Computer, and then click Properties. Click the System Restore tab. Uncheck "Turn off System Restore" or "Turn off System Restore on all drives." Click Apply, and then OK. To help prevent future spyware installations/infections, please read the Anti-Spyware Tutorial http://www.greyknight17.com/spyware.htm#prevent and use the tools provided. Are there any problems now? If not, you should be set to go. __________________

07-19-2005, 10:58 AM	#21 (permalink)
Thepunkinator I helped the forums. Join Date: May 2005 Posts: 18 OS: XP	I'll keep poking around Thunderbird's Inbox. I ran the code you gave me and the results are here: ---------------------- Volume in drive C has no label. Volume Serial Number is 9C94-4550 Directory of C:\WINDOWS\system32 02/08/2005 10:37 AM 417,792 ??plorer.exe 1 File(s) 417,792 bytes Directory of C:\Documents and Settings\Darrell Miley\Desktop --------------------------- On a whim I used the full path and attribute settings to try and delete the file via the command prompt. I received an "access denied" message. I still am unable to see the file in explorer even though I have triple checked that I have the show hidden filed on in that folder and everywhere else. Is there a way to change to attribute/access control on the file so I can delete it manually? Thanks!

07-19-2005, 11:08 AM	#22 (permalink)
Thepunkinator I helped the forums. Join Date: May 2005 Posts: 18 OS: XP	Update to my post above: I used the ATTRIB command to remove all attributes from the file. No errors on the command. I then went to delete the file again using the full path name and BINGO! Got it. I re-ran the code you gave above and sure enough the file is gone!! I am going to clean my Thunderbird inbox further and then run a Panda scan again. I'll post the results when I have them. Thanks for the help gang!!!

07-19-2005, 11:44 AM	#23 (permalink)
Thepunkinator I helped the forums. Join Date: May 2005 Posts: 18 OS: XP	Ok. I cleaned the Thunderbird Inbox very thouroughly. I then ran another Panda scan. IT'S CLEAN!!! Nohting to post from the log because it didn't create one. May I make the large assumption that this means we've got it? You guys are the best!!

07-19-2005, 01:08 PM	#25 (permalink)
Thepunkinator I helped the forums. Join Date: May 2005 Posts: 18 OS: XP	No problems to report. I have created the new system restore points. Thank you guys! I'm heading over to the donation page now!