Sign in to follow this  
Followers 0
buzz44

OMFG I NED HELP FAST!

15 posts in this topic

omfg.... i was testing my own program on my comp .... and it copies itself to c:\windows\ sytstem32\krnl387.exe ... and rights stuff to registry to boot on startup .. well now ... ITS ALL GONE HORRIBLY WRONG ... and i cant delete it ... it says it is in use ... i boot up in safe mode ... check task manager ... theres is like 5 processes running .. eg .. svchost.exe .. csrss.exe etc.... i try delete and it STILL says it is in use.... i think i remember when i first started posting .. seeing a script that tells you what program another program is in use by ... i was hopeing to find this script so that i could use it on my program and FIND WHAT THE HELL IS STOPPING ME FROM DELETING IT .... if anyone knows PLEASE post .. cause i dont want to get another harddrive with an os on it and boot this one up as a slave just to delete ... plz if anyone knows i would REALLY appreciate it ..

thx


[u]Old Projects:[/u]A3MORGB2Hex[u]Old Functions:[/u]_TimeAdd/_TimeSub_AddComma_BubbleSort _RippleSort "He who does not understand your silence will probably not understand your words." - Elbert Hubbard.

Share this post


Link to post
Share on other sites



ok what you need to do is calm down

1 what does this script do to your computer? nothing.. then just leave it

2 try creating a script to end you script 0.o

3 system restore is your using windows xp...

4 if it doesnt work your screwed!!!!

Share this post


Link to post
Share on other sites

#3 ·  Posted (edited)

Just use recovery console, and see if you can delete it. Or a BartPE disk may do the job as well.

Edit: Task Manager should kill it anyway. Then delete it.

Edited by MHz

Share this post


Link to post
Share on other sites

#4 ·  Posted (edited)

omg i just stuffed my post u p

wat is recovery console and it doesnt appear in task manager .... the program isnt runnig but it sez it is in use my another program

i tried system restore and it failed

Edited by burrup

[u]Old Projects:[/u]A3MORGB2Hex[u]Old Functions:[/u]_TimeAdd/_TimeSub_AddComma_BubbleSort _RippleSort "He who does not understand your silence will probably not understand your words." - Elbert Hubbard.

Share this post


Link to post
Share on other sites

yes very ironic ..NOT.... this doesnt do anything malicious ... all i want is help ..


[u]Old Projects:[/u]A3MORGB2Hex[u]Old Functions:[/u]_TimeAdd/_TimeSub_AddComma_BubbleSort _RippleSort "He who does not understand your silence will probably not understand your words." - Elbert Hubbard.

Share this post


Link to post
Share on other sites

Not malicious? Apparently it has a life of its own if it's gone astray and making the author all freaked out. That's pretty darn malicious if you ask me.

Share this post


Link to post
Share on other sites

explorer is probably using it. If so, just open a command window, shutdown explorer, then delete the file.

Share this post


Link to post
Share on other sites

when you checked out the taskmanager did you go to processes in the top tabs

go look there

Share this post


Link to post
Share on other sites

Hi,

I had a similar problem once with a file which I couldn't delete because it was used by some strange process. I managed to figure out which one it was with the help of Process Explorer (http://www.sysinternals.com/ntw2k/freeware/procexp.shtml). That way I could kill the process and delete the file. Just like you I tried really everyhting else before that with no luck.

Hope this helps

Alex

Share this post


Link to post
Share on other sites

#13 ·  Posted (edited)

I GOT IT YAY >!!!!

i made a script

ProcessClose("explorer.exe")
Sleep(5000)
FileDelete ("C:\WINDOWS\system32\krnl387.exe")

ran it .. and its gone ... anyone have any ideas y it is in use by explorer.exe?

edit : thanks everyone for the people that DID help .. and ty for that link .. i am dloading it as we speak

Edited by burrup

[u]Old Projects:[/u]A3MORGB2Hex[u]Old Functions:[/u]_TimeAdd/_TimeSub_AddComma_BubbleSort _RippleSort "He who does not understand your silence will probably not understand your words." - Elbert Hubbard.

Share this post


Link to post
Share on other sites

i don't know check your script

Share this post


Link to post
Share on other sites

all the script does is copy itself to system 32 .. write reg entry to boot on startup and delete the original file .


[u]Old Projects:[/u]A3MORGB2Hex[u]Old Functions:[/u]_TimeAdd/_TimeSub_AddComma_BubbleSort _RippleSort "He who does not understand your silence will probably not understand your words." - Elbert Hubbard.

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!


Register a new account

Sign in

Already have an account? Sign in here.


Sign In Now
Sign in to follow this  
Followers 0