After you move into
C:\Users\David\AppData\Roaming\, enter
dir which will list the files in that folder.
It must exist because it's in the folder when you tried to delete it using search, before...
You can also try in Task Manager: File > New Task > Enter
C:\Users\David\AppData\Roaming\ and click OK, which will bring up that folder in Windows Explorer. Attempt to delete the file.
If no luck, just untick it from AutoRuns, click the save button, close it and restart your computer; see if the virus continues. Run
Anti-Malware to double-check.
quote:
Originally posted by CookieRevised
All in all, using the CMD prompt isn't the best way to tackly this (unless you're fluent in DOS).
Fair enough, was just a method which worked fine for me recently to delete a file which was "being used by another process", so thought I'd give give it a try here. Unlocker does the same thing, like you mentioned.