Access to file denied to administrator

[CRMcM]

File that was placed on server by hacker will not allow administrator to view, change, or delete permissions. Is there a method to change permissions and delete this file?

 

[fuunstatic]

you could try taking owner ship of it but I suspect this will not work

have you tried deleting it in dos

the only other option is to consult the antivirus sites as a file deposited by a hacker will be seen as a type of virus

"Work to live, don't live to work"

"The problem with troubleshooting is that sometimes it shoots back"

 

[jeppsenc]

I have had this happen before. As an administrator you should be able to take ownership of the file, and then change permissions as needed.

 

[CRMcM]

I,ve tried to take ownership, received access denied. Tried Cacls.exe same result. Have found ntfs bootdisk but only allows read or copy, not delete

 

[Bandit1200]

Have you used the attrib.exe file to check/change the attributes of the file after booting with the ntfs boot disk?

If not the attrib.exe file is abailable in \WINNT\system32 of any Win2k Pro machine. Copy to the boot disk. attrib /? for usage.

 

[CRMcM]

file attributes are hidden and archive, can display attributes but not change them. It also gets access denied.

 

[StellaIndigo]

What is the name of the file and it's path?

 

[agrappe]

Find the account the hacker used and use it to reset the ownership.

 

[CRMcM]

how?

 

[Seaspray0]

The hacker may have set the file up so it is considered part of the operating system. Even Administrators are not allowed to delete files that are in use by the system (which I suspect may be the problem). Try booting to safe mode (to stop loading of alot of system files) and attempt to take ownership of the file and delete it. If you can't take ownership of the file, you may need to take ownership higher up in the path (folder itself) and have that percolate down to the folders and sub folders). If you are still denied deleting for system reasons in safe mode, you may have to boot to the recovery console from the CD to stop loading of all system files on the hard drive.

 

[agrappe]

To find out which account owns it....

Right-click on file or folder
Click Properties
Select Security tab
Click Advanced
Click Owner