Can't delete a file in system32

[Desu]

I have vistax64, and I'm trying to delete a file called orbit.exe in windows > system32 > drivers, and my computer won't let me. orbit.exe seems like a malicious file, or if not, it's useless, so I want to delete it.

[MM]

Make sure you have Vista's User Account Control turned off. To turn it off, go to your Control Panel, switch to the Classic View, click on the User Accounts thing and you should see a "Turn User Account Control on or off". Go to that, and un-check the box. If that doesn't work, try this.

Right-click on your Windows (or system32 folder, but I think if you do it with Windows, it works will all sub-folders), click Properties then go to the Security tab. Click Advanced, then click the Owners tab. Under the Owners tab, click Edit, then check the box that says "Replace owner on subcontainers and objects".

[Reptorian]

Sent you an PM to help your issue.

As for TA, get your ass out of here unless you got something to contribute to the OP. Yes, he have been here when I entered this thread.

[Reptorian]

I personally have dealt with viruses, spyware, malware for 4-5 years before I even bother thinking of getting higher security since I thought I had no hope at all. But I have been doing some researches analyzing which program could help me on security area while training myself using forums for at least 2 years. One time, I had over 240 threats and my computer still haven't break down even though it weaker than the standard one. After the experience of messing with an powerful firewall and observing what program can supports my final needs, I finally know what to touch myself. All of these experience have actually help me save my computer from further damages and one of my friend recommends me using siteadvisor and noscript to further protect myself from damages just in case if I visit an risky site. In fact, all of these years of struggling helps me later. So I should know how to help the OP.

[vonunov]

What do you mean, it won't let you? That's a little vague.

Your options:

1) Start > All Programs > Accessories > Right-click Command Prompt > Run as Administrator

Run these commands (one line, one command, enter after each):

Code:

cd \windows\system32\drivers
del orbit.exe

2) If this doesn't work for whatever reason, keep the command prompt open as we may come back to it later, and download Root Repeal. In Root Repeal, go to Tools > Wipe, Copy and Delete. Click Select File and browse to C:\WINDOWS\system32\drivers\orbit.exe. Check "Wipe File" and click "Do Operation".

2a) If this fails, go to Settings > Options, and change Disk Access Level from Lowest Level to Special Level, then try again.

3) If this fails, return to the command prompt window. Run this command:

Code:

cacls orbit.exe /p Guest:N

This will change orbit.exe's file permissions to Guest:None (no other accounts or groups will have permissions to it), effectively isolating it. You may then want to reboot and try again to delete it using the above methods.

Before you do these things, try checking the file properties (right-click > Properties) of orbit.exe to see if a Publisher is listed, or if it's signed by any reputable company.

As I can't find anything positive about that file in drivers/, you may want to run a scan with MBAM to see if it picks anything up.

[Desu]

The reason I think it's malicious is because my firewall said it was downloading something from the internet. wtf? Somehow it didn't have to get permission from my firewall, but it had ports open. I raged.

Anyway, I was able to successfully delete it so thx.