ymneozgo.exe - how to delete it from my pc

---

Request for Question Clarification by livioflores-ga on 12 Feb 2005 21:10 PST

Which operative system are you using and which is the location of the file?
I guess that you cannot delete it because it is in use, is that right?

---

Clarification of Question by ramexpress-ga on 13 Feb 2005 06:23 PST

My 'Google Angel',
I am using XP SP2 and it is located in C:\WINDOWS\system32. And you
are absloutely right that I am ubable to delete the file as it is in
use.
There is also another file 'win3208481-1002807.exe' &
win32042807481-100.exe in C:\WINDOWS\. This one even if I delete it
'IT COMES BACK'.
To make story short, my father (in my office laptop) mistakenly
clicked on one of those popups in www.samachar.com and downloaded some
hijackers. So, now with all possible cleaning of everything I have
popups (10'n of them) in IE even if my PC is idle but, connected to
the internet. Hope to hear some positive things :-)

Please do the following:

First of all I suggest you to try with Adaware, one of the most
reputed antispywares; it is free. This program will help you to remove
from your computer the spyware and other types of pestwares:
http://lavasoft.element5.com/software/adaware/

To download it:
http://www.majorgeeks.com/download506.html/

Then install and run it and let it fix anything that it found; for a
guide of how to do that visit the following page:
"Ad-aware Tutorial":
http://www.fluteloop.com/Adaware6.htm


Other things that you must do are online virus and trojan scans:
"Trend Micro - Free online virus Scan":
http://housecall.trendmicro.com/

GFI - Free online Trojan scanner", an online tool dedicated to detect
trojans in your computer:
http://www.trojanscan.com/


If nothing of the above work, please try to stop and delete the files manually.
To stop these processes you must use the Task Manager, follow the
instructions on the following page (they work for Windows XP):
"HOW TO: Use Windows Task Manager in Windows 2000":
http://support.microsoft.com/kb/323527/en-us

Then try to delete them in the common way or you can try with the cmd
option as garyking said.

If this does not work you can use the following tool:
DrDelete:
Here you will find info related to this tool:
http://www.dslreports.com/forum/remark%252C7374516~root=sware~mode=flat
and
http://www.docsdownloads.com/Tier1/dr-delete.htm

Download it from:
http://www.dslreports.com/r0/download/386698~c40f6198204a9cc2ac6b5c403c1f697c/DrDelete.zip

Run DrDelete to schedule the files to be deleted after reboot.
Reboot your computer and cross your fingers.


If after that noyhing has worked download and run HijackThis:
http://tomcoyote.org/hjt/hjt199//HijackThis.exe

For detailed instructions see:
"HijackThis Tutorial":
http://www.bleepingcomputer.com/forums/index.php?showtutorial=42


Without fixing anything post a HJT log as an answer clarification and
I will be able to guide you with the next fixing procedure.


I hope that this helps you.
Feel free to request for clarifications if you think that you need
them or if you need more help to remove the pestswares from your
computer.
Regards.
livioflores-ga

Try using Process Explorer
(http://www.sysinternals.com/ntw2k/freeware/procexp.shtml) and do a
'find' for 'handle' ... enter the name of that file, and it will tell
you what process has it in use so you can kill it.

Or simply kill the explorer process. And then in the Task Manager, go
to Run -> 'cmd' and hit OK. This will open Command Prompt.

And then you type: cd \WINDOWS\system32\ in order to browse to that
folder. And then type del <filename> (replace <filename> with real
filename) in order to delete the file.

Poof, done! :) Either restart entire system or just re-run explorer.exe

go to http://www.knoppix.org/ and download knoppix 3.7. 
this is a free operating system that runs entirely from the cd and
wont touch your hard drive unless you tell it to.
it doesnt need to be installed and should be relatively trouble free.

download the iso and boot to cd rom then you should be able to delete
the file without windows stopping you (because it is not running at
all)

Becareful deleting files from the system32 folder

Cwraig

I've had luck with this strategy:

You can't delete a file in use, but often you can re-name it (to
ymneozgo.bak, or similar, so you can find it later).  Next time you
start the computer, the program shouldn't run, because Windows (or
whatever program) can't find it.

This may be more advantageous, as you can keep the file, in case
deleting causes problems.  Just change the name back to what it was
originally.

www.gentleparent.com

Hi,
   First check ymneozgo.exe is displayed in the task manager
(processes) try to kill the process if it won't work ... then Just
start your computer in safemode... while system is booting press F8
... you will go in the safemode and now check the exe in task manager
if it is not there then delete it from system32... you can do one
thing also..
  goto run type regedit. it will open the registry editor. nevigate as below..
hkey_local_machine=>Software=>microsoft=>windows=>current version=>Run
you will find the ymneozgo.exe in the right panel. If you find it
delete that key. You can do all these thing from normal mode
also....after this restart system and delete from system32

Hope it will solve your problem........
~Atul