Inadvertantly got some junk (apparently non-destructive) sitting on my HDD taking up lots of space. I know where most if not all of it lives but can't delete it. I got most of it via cmd line del /f command but after a few weeks it's all back. Have used 5 dif utils and none even scratch the files. I tried renaming the Dirs in dos and that only made a dupe (yup, that's right) of the garbage using the new names. I've clean-booted, booted safe, booted to the cmd prompt and nothing works. ANY help would be appreciated. running XP pro/ SP1
Tek-Tips is the largest IT community on the Internet today!
Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!
-
Congratulations strongm on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!
can;t delete unwanted files...no way, no how!
- Thread starter TI51
- Start date
- Thread starter
- #3
1. Check the file properties. Turn off any System, Read Only or Hidden properties. Delete.
2. Right click MY Computer. Turn off System Restore in the System Restore pane. Run updated anti-virus. Turn on System Restore.
__________________________________________
Try forum1391 for lively discussions
2. Right click MY Computer. Turn off System Restore in the System Restore pane. Run updated anti-virus. Turn on System Restore.
__________________________________________
Try forum1391 for lively discussions
Try either Pocket Killbox:
or
Delete Doctor:
Tired of waiting for an answer? Try asking better questions. See: faq222-2244
or
Delete Doctor:
Tired of waiting for an answer? Try asking better questions. See: faq222-2244
- Thread starter
- #6
Thank you all for your advice. However, nothing works.
When I boot from floppy, I can't change directories to get to the path where the folders live.
This is a large group of empty folders, with and without names or attributes. some folders have long sub dir structure, again with names, no names, etc. they consume 4-5 GB of disk space.
when I loaded the 2 suggested file killers they each either could not delete or could not find the folder(s) I listed. Both have an option of scheduling deletion on next reboot. Both failed to touch the files on reboot. (I even tried a removal/shredder util that would be blasted off the screen whenever I dragged one of these folders into the command line!) This crap is wrapped with iron and intelligent. thing is: it lives in the Inetpub folder and subs but, I don't know where else so I may get to empty and delete this dir structure only to find that a reg entry calls it back again.
When I boot from floppy, I can't change directories to get to the path where the folders live.
This is a large group of empty folders, with and without names or attributes. some folders have long sub dir structure, again with names, no names, etc. they consume 4-5 GB of disk space.
when I loaded the 2 suggested file killers they each either could not delete or could not find the folder(s) I listed. Both have an option of scheduling deletion on next reboot. Both failed to touch the files on reboot. (I even tried a removal/shredder util that would be blasted off the screen whenever I dragged one of these folders into the command line!) This crap is wrapped with iron and intelligent. thing is: it lives in the Inetpub folder and subs but, I don't know where else so I may get to empty and delete this dir structure only to find that a reg entry calls it back again.
- Thread starter
- #9
thanks again for the latest suggestions.
eyec: this command set/syntax doesn't do what is necessary. it never enables navigation to the c: drive. it does list the path as c: following entering the command then typing PATH but, still cant navigate or point to c:.
Dimandja: I'm running XP Pro/ SP1. again, nearly all the files/folders have no names as such there's no way to open a file or read it's properties because it doesn't exist.
eyec: this command set/syntax doesn't do what is necessary. it never enables navigation to the c: drive. it does list the path as c: following entering the command then typing PATH but, still cant navigate or point to c:.
Dimandja: I'm running XP Pro/ SP1. again, nearly all the files/folders have no names as such there's no way to open a file or read it's properties because it doesn't exist.
- Thread starter
- #12
Dimandja:
there is a filder on a partition of my HD named 'killed'
it is 5.47GB in size and has 1 subFolder: 'ftproot'. it contains 402 files and 898 folders. The attribute for this is Read Only. I've tried removind that attrib but it seems to open a dialog showing progress but doesn't really do anything. The beginning underlying folder naming structure is something like: c:\killed\ftproot\. %d .aux 3.92\.%d .lpt1 2.01\.%d...\HeReS......(so on with random names)
the first subfolder of ftproot has no name, is 0 bytes but lists 5 more subfolders all with names like those above and having varied sizes.
the next has no name and is 698MB in size. it has 6 sub folders as described above.
next is 1.42GB in size and has 4 sub folders
It goes on from there. I could take half a day to list the files and subs. just about all files can't be opened, many have no names or unrecognizable names.
What do u think?
there is a filder on a partition of my HD named 'killed'
it is 5.47GB in size and has 1 subFolder: 'ftproot'. it contains 402 files and 898 folders. The attribute for this is Read Only. I've tried removind that attrib but it seems to open a dialog showing progress but doesn't really do anything. The beginning underlying folder naming structure is something like: c:\killed\ftproot\. %d .aux 3.92\.%d .lpt1 2.01\.%d...\HeReS......(so on with random names)
the first subfolder of ftproot has no name, is 0 bytes but lists 5 more subfolders all with names like those above and having varied sizes.
the next has no name and is 698MB in size. it has 6 sub folders as described above.
next is 1.42GB in size and has 4 sub folders
It goes on from there. I could take half a day to list the files and subs. just about all files can't be opened, many have no names or unrecognizable names.
What do u think?
Ok. It appears that those file names include unprintable special characters. Since you cannot see them, you cannot accurately reproduce them in a delete command.
So, what you need to do is use wild characters in your delete command.
Example syntax:
del *visible char*
To delete this folder: .%d...
You should try: del *d*
__________________________________________
Try forum1391 for lively discussions
So, what you need to do is use wild characters in your delete command.
Example syntax:
del *visible char*
To delete this folder: .%d...
You should try: del *d*
__________________________________________
Try forum1391 for lively discussions
- Thread starter
- #15
yes...have tried all wild card options...*.*, and c*.*, etc. doesn't work. evenn drying to delete the folder named 'com1' with [del com1] returns an error tht it coesn't exist; using [del com1*.*] results in a line break that appears to have accepted the command but the dir is still there.
- Thread starter
- #16
yes..thanks for the cautionary msg. here's how smart this infestationn is. when I type del *.* from the top of a dir tree the standard reply is 'are u sure Y/N?' I type 'y' and enter. Instead of executing the command this is returned: 'del c:\*.* Y/N?' , which would, of course wipe the partition. so they've figured out a protection scheme that could have u wipe your HDD while trying to remove their files/folders. Nasty stuff.
have you tried a wipefile utility to get rid of these files?
you might want to try apm wipefile it provides more that just the wipefile function.
i have personnaly not used it, so you are on your own with it.
good luck.
you might want to try apm wipefile it provides more that just the wipefile function.
i have personnaly not used it, so you are on your own with it.
good luck.
Yes, quite nasty indeed. By the way the '.' is standing in for an unprintable character -- you should not try to wildcard it, as it may also represent your whole disk in DOS parlance.
Also, a seemingly together word like 'com1' most likely contains embedded control characters. So, trying to wildcard a long word may not work.
To compound the frustration, some "visible" characters may only be renditions of a sequence of unprintable characters.
Your best bet is to work from the top. For example, if the bad folder root is not already there, could you try to move it (drag and drop) to under another well known folder? Then delete that known folder and everything under it.
I'll see if there is a way to reveal or rename those pesky folders.
__________________________________________
Try forum1391 for lively discussions
Also, a seemingly together word like 'com1' most likely contains embedded control characters. So, trying to wildcard a long word may not work.
To compound the frustration, some "visible" characters may only be renditions of a sequence of unprintable characters.
Your best bet is to work from the top. For example, if the bad folder root is not already there, could you try to move it (drag and drop) to under another well known folder? Then delete that known folder and everything under it.
I'll see if there is a way to reveal or rename those pesky folders.
__________________________________________
Try forum1391 for lively discussions
- Thread starter
- #19
eyec: the Wipefile util was able to remove some of the files but not all. It is approximately what I was able to do via DOS commands the first time I found the intruder. Bad news is it will grow and spread again.
Dimandja: Thanks for checking on this for me. As mentioned above, this file wiper worked to a point although it took most of the night to get to this point....very slow. BTW: I ran the util with Win in SAFE mode.
Dimandja: Thanks for checking on this for me. As mentioned above, this file wiper worked to a point although it took most of the night to get to this point....very slow. BTW: I ran the util with Win in SAFE mode.
Maybe you were hacked and a virus is utilizing the MS Internet Information Services (IIS).
Try this:
1) Stop and set the IIS service to manual.
2) Download the latest virus definitions/run complete scan.
3) Download a free malicious software removal tool. Some are better than others -- I use adaware, however it was enhanced/customized by my company, but the free one is still good. Also, I hear that Spybot and MSs new tool works very well too (links below).
4) Use windows update to download/install all critical updates.
Restart Computer -- then try del dir. No luck, try this:
Search Google for "POSIX utilities and microsoft" The POSIX utility, available in MS Resource Kit should remove the directories. Also, to see long file names in dos use dir command with the /x switch.
PS. In addition to scanning tools, to help safeguard against malicious attacks you might want to consider a workstaion firewall (link below).
Spybot Search & Destroy:
------------------------
MS Removal Tool:
---------------
Lavasoft Firewall:
-----------------
Try this:
1) Stop and set the IIS service to manual.
2) Download the latest virus definitions/run complete scan.
3) Download a free malicious software removal tool. Some are better than others -- I use adaware, however it was enhanced/customized by my company, but the free one is still good. Also, I hear that Spybot and MSs new tool works very well too (links below).
4) Use windows update to download/install all critical updates.
Restart Computer -- then try del dir. No luck, try this:
Search Google for "POSIX utilities and microsoft" The POSIX utility, available in MS Resource Kit should remove the directories. Also, to see long file names in dos use dir command with the /x switch.
PS. In addition to scanning tools, to help safeguard against malicious attacks you might want to consider a workstaion firewall (link below).
Spybot Search & Destroy:
------------------------
MS Removal Tool:
---------------
Lavasoft Firewall:
-----------------
- Status
Similar threads
- Locked
- Solved
- Locked
- Question
- Question