Deleting files in use

My first post... Hello to all!

Now my problem... First off, I did search this forum before posting. Also checked Symantec for help....big zero :(

I noticed 3 days or so ago that I had a couple files I could not delete ....message said they were in use. Tried shutting down any and all applications but the bare minimum....no effect. Virus scans showed my PC was clean. And I am religious about updating definitions. So while browsing the web yesterday, I get a virus alert. It labeled the cause as 'URL-Directory-Transversal' and said that it originated on my network. Now although I am config'd for networks (LAN-gaming and such), I'm not on an active full-time network. I ran regedit to look for anything suspicious, tho I might as well have been looking for mouse feathers in a haystack. Also ran services.msc to see if anything running might resemble any other virus/trojan I found while browsing symantec. The only other thing of note that I found was that both files (which are .exe files), in properties>program>advanced (Windows PIF Settings) showed 'Autoexec filename: %SystemRoot%\SYSTEM32\AUTOEXEC.NT' and 'Config filename: %SystemRoot%\SYSTEM32\CONFIG.NT'. I have no idea if that means anything.

I dl'd the files on Kazaa (it's ok to laugh...I'm a shmuck). They were old MS-DOS games, or so I thought. However, they did not give any virus alert upon download completion. But then again, they didn't work either...hence my trying to delete them :rolleyes:

So, when everyone is done having a good bellylaugh, does anyone have an idea how I can fix this and avoid rebuilding my system? Gah...having an unclean system gives me that scotchtape-stuck-to-a-cat's-paw reflexive twitch

- NF

Did u try starting in safe mode and deleting the files that way?


hjack

Use that! It'll deleted them for sure! :)

Wow! Thanks for the quick response!

Tried starting in diagnostic mode (this is the same as safe mode correct?) but still could not delete the files. SDK, if I use that and it works, do you have any idea if it will also remove whatever is giving my 'puter the flu?

- NF

Sorry but I'm French Canadian and not quite sure what you mean by giving your puter the flu? :)

LOL sorry....what I meant was will removing the files also remove what was causing my security alert. The answer is no. I successfully removed the files with copylock (thank you SDK), but then to check, I navigated to the webpage that originally gave me the security alert and it came up just like before. And of all places it was on homdepot.com :rollseyes:

- NF

Crazy Frenchies...;-) I think he means he busted his PC. Also, nice program, may need to use it some time.

MB

Sounds like you have a case of spyware... Check out one of the various tutorials on removing it and you should be clean and clear, no more flu for you or your puter!

Quote:

---

Originally posted here by NoFaTe
I navigated to the webpage that originally gave me the security alert and it came up just like before.

---

Let me get this straigt..

A website popup convinced you that there was a security alert ??

Did they also advice you to buy their security software ??

Micro, you're not french ? :)

</intermission>

Blame Canada
South Park Parents

Times have changed,
Our kids are getting worse
They won't obey their parents,
They just want to fart and curse. Should we blame the government, or blame society, or should we blame the images on tv No!
Blame Canada! Blame Canada

With all their beady little eyes,
their flapping heads so full of lies
Blame Canada!
Blame Canada!
We need to form a full assault, it's Canada's fault! Don't blame me, for my son Stan, He saw the darn cartoon, and now he's off to
join the klan!> And my boy eric once, had my picture on his shelf, but now when I see him, he tells me to **** myself>

Well, Blame Canada!

It seems that everything's gone wrong since
Canada came along
Blame Canada!
Blame Canada! They're not even a real country anyway. My son could of been a doctor or a lawer, it's a true, Instead he burned up like a piggie on a barbecue> Should we blame the matches? Should we blame the fire, or the doctor who allowed him to expire. Heck no!
Blame Canada!
Blame Canada!
With all their hockey hubaloo and that bitch Anne Murray too. Blame Canada!
Shame on Canada!

The smut we must stop
The trash we must smash
Laughter and fun
must all be undone
We must blame them and cause a fuss
Before someone thinks of blaming us!

<intermisson>

Silly canadians

:)

hjack

Edit: When I noticed the language, i tried editing it and makking it hidden but it did not work.

I'm from Quebec so I don't mind you blaming Canada as long that you don't blame Quebec! :)

well im kinda late but better late then not at all...i was just gonna thank SDK for that small utility, looks great, i tried it out on a school paper rofl, works just fine! :D

thanks again and remind me for some APs sometime (cant today, iv given out couple of them already)

To the_Jinx: I guess I wasn't so clear abut that...the popup alert was from my internet security software. Navigating to the webpage caused my software to block communications and alert me to the URL-Directory-Traversal attack.

I grabbed Xoftspy spyware remover and sure enough, there were several spythings on my PC, the worst of which was W32/Spybot. It did remove them all but I'm still getting the attack alert when I navigate to the test page. And my virus scans still show that I'm clean.

- NF

Here are a few things to solve your prolem.
Safe Mode won't always help delete some files, I had one like this the other day.

-Spybot: Search & Destroy has a very nice 'tool' if you turn on the advanced settings/mode. You can add files to be deleted on the next restart. This tool is also very nice to have for registry cleaning, it gets things others wont.

-MS-DOS is something you should be familir with hopefully. Always keep it around, has many uses and sometimes more handy than windows. This will also have more seniority when deleting files from your hard drive.

-In case you don't have spy/adware protection, at least get Ad-Aware SE.


I hope you find some of this usefull, good luck.

Safemode my friend :)
The magical way to delete everything unneeded...

Just F8 right after POST :)

But first scan your computer with either or both Ad-Aware or SpyBot Search & Destroy, THEN go into safemode.

Yo. Dudes. This thread is a bit old and it's likely that he's solved the problem already. I'm gonna close it for now but just a heads up for the future.