Reply
Old 05-19-2014, 02:06 AM   #1 (permalink)
 
Status: Junior Member
Posts: 1



Default ntuser.dat trojan can't be removed

I've tried several different antivirus programs, to no avail. I know a fair bit about computers but this has stumped me. If someone could talk me through it step by step, I would be grateful. My OS is Windows 7, and when I try to delete it, it says it can't be deleted because it's open in System.



Thanks
thechosenone_2003 is offline   Reply With Quote
Old 05-19-2014, 02:06 AM   #2 (permalink)
 
Status: Member
Posts: 93



Default ntuser.dat trojan can't be removed

do the malware removal with bleepingcomputer or majorgeeks ----you have more than we can help you with here tks for posting - this isn't going to be easy am a member of m/geeks
PallMall is offline   Reply With Quote
more..
Old 05-19-2014, 02:06 AM   #3 (permalink)
 
Status: Senior Member
Posts: 748



Default ntuser.dat trojan can't be removed

TL;DR: deleting ntuser.dat will DESTROY YOUR USER ACCOUNT PERMANENTLY. I highly discourage deleting it. There is no possible way it's a virus.

Ntuser.dat (aka NT (New Technology, aka windows XP+ I think) User (aka your computer account)) is the file that stores all your user-specific registry data, aka everything that goes in the HKCU (HKEY_CURRENT_USER) registry hive. Windows needs this to log in to your account and while you are logged on to your account. Deleting it will cause you not to be able to log on to your account anymore, and you will lose all data that software put into HKCU (like user-specific settings, etc).

The reason you are not able to delete it is because when you were logged on WINDOWS IS USING IT. As you may know, you can't delete a file that's in use. I would strongly discourage deleting it because, as I said, it will basically destroy your user account.

Also, there is no way it could be a virus. First of all, it's not executable (you can't double click to run it; it's not a program). It just stores info about your user account. If you have a virus that put its own data in there, then you should delete the virus executables themselves, not the data.

If you have a virus you shouldn't delete it yourself. Use antivirus software like Microsoft Security Essentials to scan for and remove them. Then use a registry cleaner to clean up data they left behind.

How did you even come up with the idea that ntuser.dat is a virus anyway? Please don't delete it for your own sake...

Hope this helps!
William is offline   Reply With Quote
Old 05-19-2014, 02:06 AM   #4 (permalink)
 
Status: Senior Member
Posts: 1,848



Default ntuser.dat trojan can't be removed

Try with the free scanner from http://malwarebytes.org. download and run it in safe mode with networking.
Fred is offline   Reply With Quote
Old 05-19-2014, 02:06 AM   #5 (permalink)
 
Status: Senior Member
Posts: 240



Default ntuser.dat trojan can't be removed

Ntuser.dat is what windows puts usually in your User folder, it's not a virus, it's your profile, delete it and you'll loose the profile you log in with, you'll then have to create a new profile and/or use a temporary profile.

If you believe it's a virus submit the file here:

Virus total
https://www.virustotal.com/

you can then make a judgement on the results.

if it is a virus, create a new user profile, copy all your files to the new profile, log into the new profile, delete your old one and that file.
Insane_mad_maniak is offline   Reply With Quote
Old 05-19-2014, 02:06 AM   #6 (permalink)
 
Status: Senior Member
Posts: 719



Default ntuser.dat trojan can't be removed

recellulate the antivirus
Money07 is offline   Reply With Quote
Old 05-19-2014, 02:06 AM   #7 (permalink)
 
Status: Senior Member
Posts: 796



Default ntuser.dat trojan can't be removed

ntuser.dat is a registry file...if yuo delete it i can cause some complications
Paul is offline   Reply With Quote

Reply

Bookmarks

Thread Tools
Display Modes


Similar Threads
Thread Thread Starter Forum Replies Last Post
Temp.exe Trojan.Agent quarantined and removed by Malwarebytes. Is it really gone? How much damage? Kyle Databases 4 12-31-2012 07:06 PM
How do you remove trojan.zeroaccess.B, trojan.gen.2 and trojan.gen? LazzzyKyle209 Computer Programming 0 07-18-2012 05:06 PM
I removed a trojan using MSE and now I can't view a certain website. It keeps coming up as 'Domain Expired'? applekissis Domain Names 1 03-22-2012 07:05 AM
Trojan Virus cannot be removed and Blue screen scasiureryday Computer Programming 3 08-24-2011 02:51 PM
I have had many different antivirus programs that said my PC was clean now Ahn lab removed a trojan Quicktm Shirapsynge Programming 2 06-17-2011 09:36 PM