Killing Zombies (not a joke)

[bobland]

I have 2 zombie processes that refuse to die. First I tried end process in task manager. Didn't go away. Then I tried taskkill with PID and IM. Neither worked. Then I downloaded pskill. That didn't work either. I know I can shoot them in the head using the Big Red Switch (showing my age).

In another version of this thread, it was recommended that I use sandboxie, which I will download shortly. However, I would like to find out if it is possible, at all, to kill real zombies in Windows.

Thanks,
Burt

 

[GEWB]

What are those processes named?

Regards,
GEWB

 

[marcoscassiano]

Have you tried searching their names in 'regedit'?

 

[Lordbob75]

Sounds more like a virus.

~Lordbob

 

[Borg 386]

You could investigate using these tools:

Process Explorer

Ever wondered which program has a particular file or directory open? Now you can find out. Process Explorer shows you information about which handles and DLLs processes have opened or loaded.

TCPView for Windows

TCPView is a Windows program that will show you detailed listings of all TCP and UDP endpoints on your system, including the local and remote addresses and state of TCP connections. On Windows Server 2008, Vista, and XP, TCPView also reports the name of the process that owns the endpoint. TCPView provides a more informative and conveniently presented subset of the Netstat program that ships with Windows. The TCPView download includes Tcpvcon, a command-line version with the same functionality.

Also, you could try this tool:

http://security.symantec.com/nbrt/npe.asp?lcid=1033

Because the Norton Power Eraser uses aggressive methods to detect these threats, there is a risk that it can select some legitimate programs for removal. You should use this tool very carefully, and only after you have exhausted other options.

 

[war59312]

Get file name and path. Boot into safe mode and delete.

Still refuse to delete check permissions, give yourself full access if required.

Still refuse to delete, run Unlocker @ Download Unlocker 1.9.0 - FileHippo.com on the POS. Will delete when you reboot.

Might try running unlocker first btw, very good at killing the process first and then deleting the file for you.