Printable Version of Topic

Click here to view this topic in its original format

nForums.net _ Security _ Cannot delete

Posted by: Janie Nov 11 2005, 01:05 PM

C:\Windows\SMFuaWUA cannot be deleted.
The error message says

Cannot delete asappsrv.dll: Access is denied.
Make sure the disk is not full or write protected and that the file is not currently in use.

I believe this program may be the cause of some pop-up misseries.

I have tried to use the Unlocker program on it, but also get an error message on that.

Unlocker 1.7.3

Error debug priveleges
Check FAQ on http://ccollomb.free.fr/unlocker for more details.

It says I need to fix the debug priveleges. I have no idea what to put in them. My name is already there.

Any ideas?

Posted by: Messenger Nov 11 2005, 05:07 PM

Yes it is the cause of your popups, or at least some of them

A quick Google search on that file reveals this solution. (4th post down)
http://pcpitstop.invisionzone.com/index.php?showtopic=103021#

Posted by: Pikaporeon Nov 12 2005, 06:05 PM

I usually can get rid of them by simply logging in in Safe Mode under the 'true' administrator account...

Posted by: DutchKid Dec 7 2005, 01:17 AM

If you're not using NTFS you could just boot under dos and delete it! Otherwise you might want to try Knoppix (linux running of a CD) you could probably delete it under this OS coz it doesn't load any DLLs

Posted by: TWINE006 Dec 7 2005, 03:36 AM

As Pika said, SafeMode = God in these situations.

It's very likely that this is some form of adware/spyware/whateverware so, if you haven't already done something similar, I'd suggest running Spybot-S&D or Adaware (since I myself have had issues before where simply deleting crap files in safemode doesn't fix the problem).

Posted by: boxcrash Dec 13 2005, 01:49 PM

Another good one to run is Ewido, at ewido.net, run it in safe mode with networking.

You could load into safe mode with command prompt and delete it or rename it, and then delete it.

Like ren C:\Windows\SMFuaWUA junk and then del C:\Windows\junk.

Or if not you can run in recovery console, boot to OS cd, load it to menu choices(where it says enter to install or r to repair in the recovery console), hit r, hit 1 and then enter or enter whatever your admin pass is and then hit enter then you can remove and rename the file there in the recovery console.

Also in relation to that .dll, here is a site with what files are tied to that .dll.
h**p://www3.ca.com/securityadvisor/pest/pest.aspx?id=453096361

PacerD malware...............

Posted by: Boss429 Dec 13 2005, 03:41 PM

you can try Pockey killbox

CODE

http://www.downloads.subratam.org/KillBox.zip

Posted by: Janie Dec 13 2005, 08:06 PM

Got it. Thank you guys for all the help!! Muuuuah!