undeletable file!

Discussion in 'malware problems & news' started by jaydev, Jul 10, 2004.

Thread Status:
Not open for further replies.
  1. jaydev

    jaydev Registered Member

    Joined:
    Jul 10, 2004
    Posts:
    7
    Not sure where to post this as i dont know what it is, i suspect some virus or worm!I recently dloaded an avi file from a p2p(soulseek).It wouldnt play but it wont delete,just says 'CANNOT DELETE,USED BY ANOTHER PERSON/PROGRAM,CLOSE ANY PROGRAM &TRY AGAIN' !it just slows everything down.even to open a folder takes a lot longer than it should and i have to reboot.I have norton antivirused the file,i have used spybot-seek and destroy and also Hijack this....but i cant find anything!
    i can supply a HijackThis LOGFILE if anyone could help me or point me in the right direction...all help will be appreciated as this is DOING MY HEAD IN!
    thanks a lot people
     
  2. snowbound

    snowbound Retired Moderator

    Joined:
    Feb 18, 2003
    Posts:
    8,723
    Location:
    The Big Smoke
  3. jaydev

    jaydev Registered Member

    Joined:
    Jul 10, 2004
    Posts:
    7
    sorry i forgot to mention that it wouldnt delete in safe mode either!i will take your advice and post in the hijack room..thanks a lot :)
     
  4. Jooske

    Jooske Registered Member

    Joined:
    Feb 12, 2002
    Posts:
    9,713
    Location:
    Netherlands, EU near the sea
  5. jaydev

    jaydev Registered Member

    Joined:
    Jul 10, 2004
    Posts:
    7
    tried dellater but i couldnt get it to work properly,FILE NOT FOUND...how do i delete it from the command line??
     
  6. Jooske

    Jooske Registered Member

    Joined:
    Feb 12, 2002
    Posts:
    9,713
    Location:
    Netherlands, EU near the sea
    Put DelLater in the root, C:, for easy path access.
    All you have to do is get a command prompt at C:\ > and type in dellater.exe<space>Driveletter\Folderpath\fullfilenamewithextension, and hit Enter, to get the popup confirmation.
    Then reboot.


    Now i hope the file is not hidden in DOS?

    I jsut see an experienced user comment telling it could be better to move dellater to windows\system32 for XP to recognise it. Strange, but worth a try.
     
  7. snowbound

    snowbound Retired Moderator

    Joined:
    Feb 18, 2003
    Posts:
    8,723
    Location:
    The Big Smoke
    Last edited: Jul 10, 2004
  8. JacK

    JacK Registered Member

    Joined:
    Jun 20, 2002
    Posts:
    737
    Location:
    Belgium -Li?ge
    Hello,

    Run REGEDIT : go to HKLM\SOFTWARE\Classes\CLSID\{87D62D94-71B3-4b9a-9489-5FE6850DC73E}\InProcServer32 and delete it

    Known bug ;)

    Reboot and now you will be able to delete your file ;)

    Regards,
     
  9. jaydev

    jaydev Registered Member

    Joined:
    Jul 10, 2004
    Posts:
    7
    joosk, i tried the dellater but it just pops up cant find the file,also from system32 like you suggested...here is the command line i typed from c:\

    dellater.exe f:\soul seek\farenheit 911 michael moore.avi.avi

    nothing wrong with it freom what i can see :(


    oops , here is my hijackthis.log also
     

    Attached Files:

  10. snowbound

    snowbound Retired Moderator

    Joined:
    Feb 18, 2003
    Posts:
    8,723
    Location:
    The Big Smoke
    U need to post it in the hijack cleaning forum, in your other thread.

    It will get the attention it needs over there.
    :)


    snowbound
     
  11. Jooske

    Jooske Registered Member

    Joined:
    Feb 12, 2002
    Posts:
    9,713
    Location:
    Netherlands, EU near the sea
    First follow Snowbound's and Jack's advices, and make sure all files are visible.
    Think Snowbound wouls like you to paste that HJT log in your next posting (visible online) in the HJT forum.

    Let's come back on the dellater thing later when Snowbound/Jack saved your life first!


    Sorry Snowbound for posting at the same time :cool:
     
    Last edited: Jul 10, 2004
  12. Hyperion

    Hyperion Registered Member

    Joined:
    Sep 29, 2003
    Posts:
    302
  13. TonyKlein

    TonyKlein Security Expert

    Joined:
    Feb 9, 2002
    Posts:
    4,350
    Location:
    The Netherlands
    From Can't delete or move avi and video files

    Also, some folks have reported succes following this advice:

    From Unable to Delete AVI Files in Windows XP?:

    Click Start>Run, type REGEDIT and click Ok. Then make your way to this InProcServer32 key:
    HKEY_LOCAL_MACHINE >SOFTWARE >Classes > CLSID > {87D62D94-71B3-4b9a-9489-5FE6850DC73E}> InProcServer32

    Right click the InProcServer32 key and choose Delete. And that's all there is to it. This will prevent Windows from loading shmedia.dll when you work with video files and thus you should no longer have problems deleting or moving any video files. Also if you have a video file you can't delete now, deleting this key will allow you to do so. If not, log out and log in again to delete the file.

    Good luck,
     
  14. jaydev

    jaydev Registered Member

    Joined:
    Jul 10, 2004
    Posts:
    7
    thanks Jack, you are a star , now the avi has been deleted.Thanks for your time replying :)
     
  15. jaydev

    jaydev Registered Member

    Joined:
    Jul 10, 2004
    Posts:
    7
    thanks for the in depth explanation tony,i understand how and why now...thannks for your time , appreciated :)
     
  16. Jooske

    Jooske Registered Member

    Joined:
    Feb 12, 2002
    Posts:
    9,713
    Location:
    Netherlands, EU near the sea
    Congratulations! sounds good.
    And keep the other files handy --for possible other occasions of other file types etc.
     
Loading...
Thread Status:
Not open for further replies.