I have a similar problem:
I work a lot from my home PC for a university and has sophos loaded in it.
The regular daily scan on Monday revealed that I have a Troj/spyaks-B
infected in c:\windows\system32\wbeconm.dll and it cannot delete the file. I
went in via command prompt and deleted the infected file but the home page
still set to a security centre page. Yesterday I followed the sophos
instruction and downloaded a SAV32CLI fix onto a CD-R and try to run it on
command prompt via F8 re-start. I am running Window XP 2002 home service
pack 2, and it will not let me get onto safe mode with command prompt at
restart, so I cannot run the fix on my PC.






"benjammin" wrote:

> I tried using your method - in command prompt, i typed sfc.exe, then tried
> scannow, but it said 'error code is 0x000006ba (The RPC server is
> unavailable) and same sort of thing with other scans - what does this mean?
>
> "Eric" wrote:
>
> > Try booting in safe mode/command prompt. The file shouldn't be open then.
> >
> > "benjammin" wrote:
> >
> > > I have a Trojan download in C:\windows\system32\browsela.dll, and can't
> > > delete it.
> > >
> > > Same applies to w32.looksky.A@mm in local settings somewhere.
> > >
> > > How can I get rid of these things if my antivirusdoesn't?