Help! I can't remove "winnel32.exe"!

Ptau9 · Sep 14, 2004, 10:20 PM

There's a *.exe program named "winnel32.exe" and it won't go away!

I have two anti-virus software programs, and about 5 ad/spyware removal programs and they won't detect/delete it! It was in the file path "C:\WINDOWS\system32", so I tried to delete it manually. When I tried to delete it, it said "Cannot delete winnel32: Access is denied. Make sure the disk is not full or write-protected and the file is not currently in use.". I checked the task manager's running processes and it wasn't on the list.

Then I moved it to the desktop to see if it would let me delete it, but that wouldn't work either. Now it's sitting there creating another "winnel32.exe" program in my "system32" folder!

This part is wierd: it lets me delete the new one in the "system32" folder, but after ten seconds it comes back right before my eyes!

My recycle bin started becoming full of "winnel32.exe" programs.

I deleted them all, but that didn't make a difference! I really need help with this and if you need to know, the operating system is "Windows XP: Proffesional".

TwistedMetal · Sep 14, 2004, 10:28 PM

First off go to Task Manager...

How much CPU and Mem. Usage is it using?

Did you run msconfig and look for it in Services and Startup?

Ptau9 · Sep 14, 2004, 10:57 PM

I tried all of that...it says the program isn't running. (?) I also went to msconfig and deleted the startup entry (it calls itself "system 29"), and it comes back!

Shinjikun · Sep 14, 2004, 10:58 PM

Quote:

Originally Posted by Ptau9

There's a *.exe program named "winnel32.exe" and it won't go away!

I have two anti-virus software programs, and about 5 ad/spyware removal programs and they won't detect/delete it! It was in the file path "C:\WINDOWS\system32", so I tried to delete it manually. When I tried to delete it, it said "Cannot delete winnel32: Access is denied. Make sure the disk is not full or write-protected and the file is not currently in use.". I checked the task manager's running processes and it wasn't on the list.

Then I moved it to the desktop to see if it would let me delete it, but that wouldn't work either. Now it's sitting there creating another "winnel32.exe" program in my "system32" folder!

This part is wierd: it lets me delete the new one in the "system32" folder, but after ten seconds it comes back right before my eyes!

My recycle bin started becoming full of "winnel32.exe" programs.

I deleted them all, but that didn't make a difference! I really need help with this and if you need to know, the operating system is "Windows XP: Proffesional".

Try booting into safe mode and deleting it from there. It should work; make sure it has no system or hidden file flags on it (right click, properties). Search the registry as well for entries with that file name and remove them (system restore back up first).

If for whatever reason it still doesn't delete in Windows you should try command prompt only or deleting it off of a bootdisk but you should still try to find the source or else it'll keep coming back. Search for the other instances of that file too (copies elsewhere on the HD) and delete them as well. Computers; what fun.

Ptau9 · Sep 14, 2004, 11:03 PM

Thanks, I'll try doing the safe mode stuff. Hope it works, this is one of the most pesky viruses I've run into...

Ptau9 · Sep 15, 2004, 12:12 AM

It worked! Thanks! The file is completly gone!

Shinjikun · Sep 15, 2004, 03:52 PM

Quote:

Originally Posted by Ptau9

It worked! Thanks! The file is completly gone!

Good stuff! Congrats.

Sep 14, 2004, 10:20 PM	#1
Ptau9 DriverHeaven Newbie Join Date: Sep 2004 Posts: 5 Rep Power: 0	Help! I can't remove "winnel32.exe"! There's a *.exe program named "winnel32.exe" and it won't go away! I have two anti-virus software programs, and about 5 ad/spyware removal programs and they won't detect/delete it! It was in the file path "C:\WINDOWS\system32", so I tried to delete it manually. When I tried to delete it, it said "Cannot delete winnel32: Access is denied. Make sure the disk is not full or write-protected and the file is not currently in use.". I checked the task manager's running processes and it wasn't on the list. Then I moved it to the desktop to see if it would let me delete it, but that wouldn't work either. Now it's sitting there creating another "winnel32.exe" program in my "system32" folder! This part is wierd: it lets me delete the new one in the "system32" folder, but after ten seconds it comes back right before my eyes! My recycle bin started becoming full of "winnel32.exe" programs. I deleted them all, but that didn't make a difference! I really need help with this and if you need to know, the operating system is "Windows XP: Proffesional".

Sep 14, 2004, 10:28 PM	#2
TwistedMetal MC John-117 Join Date: Jul 2003 Location: Phoenix, Arizona Posts: 728 Rep Power: 0	First off go to Task Manager... How much CPU and Mem. Usage is it using? Did you run msconfig and look for it in Services and Startup? __________________ [color=red][/color]

Sep 14, 2004, 10:57 PM	Thread Starter #3
Ptau9 DriverHeaven Newbie Join Date: Sep 2004 Posts: 5 Rep Power: 0	I tried all of that...it says the program isn't running. (?) I also went to msconfig and deleted the startup entry (it calls itself "system 29"), and it comes back!

Sep 14, 2004, 11:03 PM	Thread Starter #5
Ptau9 DriverHeaven Newbie Join Date: Sep 2004 Posts: 5 Rep Power: 0	Thanks, I'll try doing the safe mode stuff. Hope it works, this is one of the most pesky viruses I've run into...

Sep 15, 2004, 12:12 AM	Thread Starter #6
Ptau9 DriverHeaven Newbie Join Date: Sep 2004 Posts: 5 Rep Power: 0	It worked! Thanks! The file is completly gone!