Virus help please? this one is nasty

[NewbieBuilder]

Hi folks

Got a virus
http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.studd.html

not quite sure how i got it, however i cant get rid of it

Norton cant qurantine it and it cant delete it. Ive tried to manually delete it but says things like currently in use etc etc close any other programs and try again and all that.

So im stumped i dont know how to get rid of it theres no removal tool from norton and im at the end of my tether.

Im not even sure how it got on there. So please someone tell me how to get rid of it as i dont have a clue

its currently residing in Windows/win32 folder and windows temp folder
thnx

[doctorgonzo]

What version of Windows are you running?

[NewbieBuilder]

Win XP
fully updated

[doctorgonzo]

Boot into Safe Mode (hold F8 during the boot process and select Safe Mode). You should be able to delete the files from there.

[NewbieBuilder]

well basically tried that and got this

on teh file in teh system32 folder

Cannot delete Dust acces is denied.
Make sure the disk is not full or write protectedand that the files is not currently in use.

For the dust in Windows/temp

Cannot delete dust its being used by another program, close any programs that might be using the file and try again.

Suxs

[doctorgonzo]

Right click on the file, select properties and make sure it isn't set to "read-only"

If that doesn't work, see if it is running by hitting ctrl+shift+esc and looking at the lists of processes. If it is running, end it.

[NewbieBuilder]

IIITTTSSSS CCCCLLLLEEEEAAAAANNNNNN

manged to delete them in safe, was running so had to stop it

checekd the windows files again and was clean :)

ill run another system scan tonight to make sure.

Only concern is that when i restarted windows was looking for the files and made a pop up that it couldnt find it, quite possibly becuase i have system restore turned off.

Thnx muchly BTW :))

[doctorgonzo]

That popup came up because it is looking to run it at startup. Go to start...run, and then type "msconfig". Go to the startup tab and look for anything that references that file. Uncheck it, and hopefully you won't get that error anymore.