One one of my clients got a very nasty virus called Win32.runouce (Avast Name) a variation of the W32/Chir. What this virus does is creates big amount of tmz****.tmp files that infected with a trojan file pp.exe. Also modifies registry keys and infect other executables files.
Even after you have the system cleaned by your anti virus and/or manually this virus leave lots of .eml files. These .eml files are generally email files but in this case are left overs from this virus.
The whole point here is that even after the system is supposedly cleaned you still cannot delete these files within Windows 7 operating system. If you search for these files the results might come out hundreds or thousands of them. You can select them but Windows Explorer will not give you the option to delete!
The Solution:
- Go to http://www.hirensbootcd.org and download the latest Hiren's BootCD.
- Get a pen drive and follow instructions on this page http://www.hirensbootcd.org/usb-booting.html to get your pen drive bootable with it.
- Boot from your Hiren's bootable USB and choose Mini Windows XP
- One inside Mini Windows go to start menu and choose Search.
- Search for "*.eml" without comas. Once it finds all of it in your system you can now select all of them and finally DELETE!
Post a Comment