Virus - resl.dll - help!

[old.user4556]

All,

Norton's AV has just picked up a Trojan on my PC (from fuck knows where; it called it a backdoor.trojan) in the form of RESL.DLL which lives in \windows\system32.

Googling for the dll has returned nothing. However, I seem to be totally unable to rid the PC of it. I've tried switching off system restore and booting into safe mode to delete it, but it won't let me. Safe mode with command prompt and manually doing "del resl.dll" has proved fruitless too.

There are no entries in the registry (in run or runonce) to this dll, and norton's antivirus can't even scan it in safe mode because it says i don't have privileges to do so. Additionally, when I view the file properties I can take ownership of the file in the 'security' tab to allow me to delete it.

How the fook do I go about removing the bastard?

Windows XP fully patched, Norton virus definitions up-to-date.

G

 

[Ardrias]

Rightclicking it doesnt tell you anything about what it does either I suppose?
Assuming you have NTFS on your Windows drive? If you had FAT32 you could have booted to DOS and killed it from there.

Surely there are utilities for killing files regardless of their attributes tho?

 

[Cask]

Can possibly use the winxp cd to boot into the repair mode command line. From there it might let you delete it. Don't blame me if your PC doesn't reboot afterwards tho

 

[phlash]

Seconded - use repair mode from your CD. You might have to change some file attributes (attrib command) to see/delete the file but it'll work. You may also find a few things that were loading the file complain (or don't run) when you boot normally.. which might give you a clue as to how it got there