Argh! help me remove sccfg.sys (Folder Lock?)

Andariel · 06-11-07, 21:29

my Kaspersky Internet Security identified an object on drive C called sccfg.sys, and quarantined it. it wont let me disinfect or delete it. i look there and dont see that file. so i searched google and people say it’s a rootkit and that they believe it’s related to Folder Lock which i installed a few days ago. i uninstalled it yesterday yet the object remains. i installed AVG Anti-Rootkit yet it didnt find it. i dont know if it’s dangerous or not but i want it gone so Kaspersky doesnt detect it everytime i scan. so can someone help me delete this?

spikejones · 06-11-07, 22:20

if you can locate the file on the drive you might be able to remove it from a command prompt.

Code:

attrib -r "drive/path/sccfg.sys"
del "drive/path/sccfg.sys"

if you do not know where it is located, try:

Code:

cd \
dir /s /a sccfg.sys

Note the location, and plug it in to the first two commands.
Each line of course is a different command (press enter)

Andariel · 07-11-07, 05:18

its ok i found the file, somehow, and deleted it. rescanned my system and it says its clean.

EscondeR · 07-11-07, 06:19

Andariel, in case of future issues of that kind don't mess with attributes, better use Unlocker to kill unwanted files and folders

Andariel · 07-11-07, 06:23

thanks so much EscondeR thats great.

06-11-07, 21:29	#1
Andariel Archaeologist Join Date: Dec 2004 Location: FEMA Region I Posts: 2,250	Argh! help me remove sccfg.sys (Folder Lock?) my Kaspersky Internet Security identified an object on drive C called sccfg.sys, and quarantined it. it wont let me disinfect or delete it. i look there and dont see that file. so i searched google and people say it’s a rootkit and that they believe it’s related to Folder Lock which i installed a few days ago. i uninstalled it yesterday yet the object remains. i installed AVG Anti-Rootkit yet it didnt find it. i dont know if it’s dangerous or not but i want it gone so Kaspersky doesnt detect it everytime i scan. so can someone help me delete this?

06-11-07, 22:20	#2
spikejones Relic Hunter Join Date: Sep 2007 Location: Perfect World Posts: 9,295	if you can locate the file on the drive you might be able to remove it from a command prompt. Code: attrib -r "drive/path/sccfg.sys" del "drive/path/sccfg.sys" if you do not know where it is located, try: Code: cd \ dir /s /a sccfg.sys Note the location, and plug it in to the first two commands. Each line of course is a different command (press enter) __________________ Is it still illegal to perform an autopsy on a living person? Last edited by spikejones; 06-11-07 at 22:23.

07-11-07, 06:19	#4
EscondeR Moderator Join Date: Jan 2005 Location: Russia Posts: 28,788	Andariel, in case of future issues of that kind don't mess with attributes, better use Unlocker to kill unwanted files and folders __________________ The Truth Is Out There...

07-11-07, 05:18	#3
Andariel Archaeologist Join Date: Dec 2004 Location: FEMA Region I Posts: 2,250	its ok i found the file, somehow, and deleted it. rescanned my system and it says its clean.

07-11-07, 06:23	#5
Andariel Archaeologist Join Date: Dec 2004 Location: FEMA Region I Posts: 2,250	thanks so much EscondeR thats great.