Printable View
I have run into a problem, not a virus.......but a file that will not delete despite all my efforts.
I have tried delete on boot (in safe mode) also have tried to fill the file with code so as to delete it. But to no avail. The file shows no time of creation nor is it even recognized by windows or my hard drive. ><
Rename it, move it to desktop, reboot, remove from desktop ..........
Well ive tried renaming it but still says the file does not exist and returns to the original name?
Did you try terminating explorer then go to Mew Task in the task manager, browse to the folder where the file is and try deleting it. That works for me when i get an error that says the file is being used even though it's not.
yes i tried somthing similar to that but it's a very trickey file due to it's lack of exsistance on the harddrive... Ive also tried a program that lists all zero byte file's windows apperently has a bad habit of making them, and it is suppose to delete all zero byte files or just the few that are specified. (Xcopy)
1) try to run "chkdsk C: /F" or "chkdsk C: /F /R"
-reboot pc
2) go directly in safe console mode
3) push "ctrl+shift+esc" to run task manager and use it to run AV for scan of HD
or navigate to file that you want delete and then right click on file name and delete it
Have you tried to delete it using a command prompt?
There maybe some characters in the filename that explorer doesn't like.
I do this -
1) fire up DOS (start-->run-->type "cmd")
2) change to the directory of the file ("cd c:\hdfshj")
3) hit ctrl-alt-delete
4)change to the process tab and end explorer.exe
5) go back to your dos window and type "del fileiwannadelete.exe"
6) back in the windows task manager (brought up during ctrl-alt-delete), go file -->new task -->and type "c:\WINDOWS\explorer.exe" (or browse to it) and then hit ok and you should be working again.
Well the tricky party is the files seem not to have an extension so no windows does not recognize them.....some sort of phantom file....
I was about to say the same thing as i2c, but would have done it in Safe Mode. Have you googled the name of the file to make sure it does do anything?
also when i use cmd method to try and delete i either get a permissions error or can't access specified file?
yes googled to no end yet this file seems to be either malicious or may have been created by microsofts wonderful goback software....my theory on the matter may be that at one time or another system restore may have created a phantom (already been deleted file) which does not "exsist" on the the harddrive when using system restore. You know the files that remain on your harddrive unless you use a secure shredder. Finding the reason i can't delete it again
is even more puzzeling if my theory is correct.
May be this will help you
http://www.majorgeeks.com/download4709.html]Pocket KillBox[/URL]
Quote:
Pocket KillBox is a program that can be used to get rid of files that stubbornly refuse to allow you to delete them.
i tried that same thing yet there was still, bug like things on my drives, so i salvaged what i could and got a new computer.. was that a waste of money?
Im not sure what this would do prehaps its dangerous and you would like to try it on a test directory
del somefilename.*
have you tried renaming it??
i2c
Use a Linux Live-CD, Mount your hard drive and delete it while the file is not in use.Quote:
Originally posted here by puff989
I have run into a problem, not a virus.......but a file that will not delete despite all my efforts.
I have tried delete on boot (in safe mode) also have tried to fill the file with code so as to delete it. But to no avail. The file shows no time of creation nor is it even recognized by windows or my hard drive. ><
Perhaps you should try using a LiveCD O/S, such as Knoppix. That would get around any Windows-related issues. However, I agree with warriorfan808 that you should find out if this file is in fact a virus. I recently ran across a file that appeared to be a virus, but after some research found an obscure reference to it that showed it was a normal part of the O/S.
Well the reason i found it not to be be apart of my system files is it has a rather obscure name one of them being "Cautious" and i've tried knoppix os a rather wonderfull and ingenius alternative to windows mounted the drive mount /dev/hda1 /mnt/hda1 -o rw
and the problem still persists this is no ordinary file. Im thinking about just backing up all my important stuff and formating the sob.
you really need to find out whats using this file or what files its interacting with. systernals has a free program called filemon
you can have the program highlight the file you want to watch and filter other things out allowing you to watch it better. you might find out its a ligit file and ease your mind or you can find the program thats accessing it and kill it once and for allQuote:
FileMon monitors and displays file system activity on a system in real-time. Its advanced capabilities make it a powerful tool for exploring the way Windows works, seeing how applications use the files and DLLs, or tracking down problems in system or application file configurations.
Google the term "Windows Undeletable File trick" or something of that nature. I forget the
exact term. I'd search for you, but I'm on a text browser...and Gentoo's only half-installed..
so I have issues here. But I used to mess with my friends all the time. You create a file with
a character that Windows won't recognize by holding Alt, and pressing the ASCII code of the
character you want to insert. Windows will see it, but won't be able to do anything else. Maybe
Knoppix is having a similar issue. But you should be able to rename it from DOS, then delete it.
But you can't delete it until it's renamed.
A_T
Most likely the filename in the directory is corrupted in some wierd way.
Norton utilities will allow you to Hex edit the directory, but you have to know
what you are doing. Well, at least this worked in FAT32, and I assume they
also support NTFS. Otherwise, ignore it, or if possible, delete the folder that contains
this file (if it is in a folder).
:cool:
no the dir is the desktop and hex editing would did no good due to the fact the file has no value. Emm tried deleting the desktop folder the files still remain. Im thinking a fresh install is my only option.
Hi,
I know this is a bit late but what operating system are you using? Win2000 or XP?
I would say that you have an "orphan file reference" in the Registry. The file doesn't exist (so you can't delete it) but the reference does, and it appears in your desktop.
The solution is to delete the Registry entry. I would suggest that you do a search and see if you can find it, then report back. Please do not do anything to it until we have had a look, and check out the procedure for backing up the Registry first :eek:
:)
Double post to get the link to work :)
http://www.hoverdesk.net/freeware.htm
It is free for private use, and is in BETA!!!!!!!!!!......................I would suggest that you use it to see if it detects your "phantom"
Be careful!!!
:)
I was having the same problem someday so i create this program...it will delete the file!!!!!!!!!!!
Was also wondering, the filename, is it a long string of random characters? Also, is it located within your user profile, under local settings either under the temp folder or temporary internet files? (this assuming you are using windows). I ran into a similar problem when manually cleaning out those folders from a roomate who had entirely too much time on his hands. Wound up getting a few files like that in there. It has no file ending. Can't be deleted. When you right click on it, there are virtually no options to chose from. Sounds stupid, but the way I got rid of them was similar to an earlier post, but instead I dragged and dropped the file into an empty folder on the desktop. I was then able to delete the folder with the undeleteable file within it. *shrugs*
Guys, from what Puff~ seems to be saying, he has tried most of those possibilities.
I suspect that the real problem is that the file does not exist other than as an entry in the Registry?
:)
The problem is the windows!!!!!!the program i upload will run before windows load!it will just load the files the program needs!!!!You can only delete the file using that program.it uses activeX in registry to start up!!!
Hmmm seems your right it was in the registry, funny how we can exhaust all known resources and the sob is right in front of you. It's like my teacher once said, "Once you get it you'll be kicking yourself". Oh well sorry for racking everyones brains, but it's nice to know that there are people out there willing to help.
"orphan file reference" hmmm!...damme your good nihil!