PDA

View Full Version : can't remove files


turion
March 4th, 2007, 04:43 PM
Hi,

I found 2 files which i couldn't delete from the folder C:\..Local Settings\Temporary Internet Files.
The names of these files are: "DCv+EBvavtdVh5XR6YJ42qXpmBc=" , "ujpmT+6y6drHz4zEBMn+H5hZJRk="

if i look at the properties of these files i found the following info
Cache name: CAU1U329.bin
Cache name: CAWTWVQN.bin

After i deleted these 2 bin files, the above files still remain in my temporary internet files folder. Anybody know how to remove the files? Is my system infected perhaps?

In dos i can only find 1 hidden dir and 1 hidden file, only windows explorer displays these 2 files.

pugmug
March 4th, 2007, 05:16 PM
Try this, http://www.softwarepatch.com/software/moveonboot.html

turion
March 7th, 2007, 08:15 AM
Didn't work either, the tool couldn't find any files but could only select the temporary internet files folder. After reboot those 2 files are still displayed in windows explorer. In dos you don't see these 2 files, which is weird.

SpikeyB
March 7th, 2007, 09:44 AM
If the files do exist, you should be able to remove them using a Bart disc or UBCD4W: http://www.ubcd4win.com/

Niels
March 9th, 2007, 01:18 PM
Did you also tried in safe mode? I suppose but if you didn't tried that you can try it now. Be sure that your browser is closed. Or you can try a shredder : http://www.handybits.com/download.asp?product=shredder Boot into safe mode and use the shredder to delete this files.

turion
March 11th, 2007, 10:55 AM
Can't delete these files in safe mode either. Even with the shredder tool, because like the move on boot tool suggested by pugmug i can't see the files in the temporary internet files directory with these tools. ::)

EASTER.2010
March 12th, 2007, 12:47 AM
Try File Assassin (http://www.malwarebytes.org/fileassassin.php)

If that doesn't scram a pesty file, even in safe mode, then you got something of a hardened code attachment locking that puppy.

turion
March 12th, 2007, 12:03 PM
This is what it looks like after i drag the first file to the file assassin.
Notice the file name displayed in win explorer and in file assassin, as you can see it removes CAU1U329.bin but file with the weird name "DCv ..." is still displaying in win explorer after refresh. Any ideas why this is happening or how to get rid of it?