Delete File

Delete File

Secure Home | Search | About

Microsoft Applications Security - Microsoft's general security discussions and announcements 

Bookmark this page:  YahooMyWeb Yahoo!  Google Google  Windows Live Favorites Windows Live  del.icio.us del.icio.us  digg digg  Add to Netscape Netscape
Subject Author Date
Delete File Bink 03-22-2005
---> Re: Delete File Karl Levinson, ...03-22-2005
    ---> Re: Delete File Karl Levinson, ...03-23-2005
      ---> Re: Delete File Stefan Kanthak03-23-2005
        ---> Re: Delete File Karl Levinson, ...03-26-2005
Posted by =?Utf-8?B?Qmluaw==?= on March 22, 2005, 9:41 pm
If you were  Registered and logged in, you could reply and use other advanced thread options


A spyware program deleted all the files in the VCom directory
except 5 files which have spyware attached
These 5 files I need to delete but can not find a way.

The VCom was for my Firewall and Virus detection

Posted by Byron Hynes on March 22, 2005, 9:48 pm
If you were  Registered and logged in, you could reply and use other advanced thread options


> A spyware program deleted all the files in the VCom directory
> except 5 files which have spyware attached
> These 5 files I need to delete but can not find a way.
> The VCom was for my Firewall and Virus detection
>

The best approach after any serious comprise is to completely reinstall the
OS after formatting the hard disk.

- Byron



Posted by =?Utf-8?B?Qmluaw==?= on April 14, 2005, 5:27 pm
If you were  Registered and logged in, you could reply and use other advanced thread options




"Byron Hynes" wrote:

> > A spyware program deleted all the files in the VCom directory
> > except 5 files which have spyware attached
> > These 5 files I need to delete but can not find a way.
> > The VCom was for my Firewall and Virus detection
> >
>
> The best approach after any serious comprise is to completely reinstall the
> OS after formatting the hard disk.
>
> - Byron
>
>
>

Posted by Karl Levinson, mvp on March 22, 2005, 9:55 pm
If you were  Registered and logged in, you could reply and use other advanced thread options


Why can't you delete them? What error message are you getting? What are
the names of the files?

It could be that the files are running or in use, Windows prevents those
files from being deleted until the files are no longer in use. A reboot, or
rebooting and pressing the F8 key before Windows starts to enter Safe Mode,
may close the files so they are no longer in use.

This could be a false alarm. If the vcom folder was the one that has your
firewall or antivirus installed, I suspect a false alarm. This can happen
because your firewall and antivirus log files and malware signature files
can contain fragments that identify adware, so they look like adware, and
anti-virus software often has a quarantine feature for quarantining viruses.
Also, your firewall may install an LSP shim into your TCP/IP stack, and some
anti-spyware software detects this as adware. It would be useful if you
could tell us what software is claiming this is adware, and what the exact
message and adware name you are receiving.

Also, if you are using the MS anti-spyware beta software, there is a
newsgroup specifically for that where you will get better answers faster.


> A spyware program deleted all the files in the VCom directory
> except 5 files which have spyware attached
> These 5 files I need to delete but can not find a way.
>
> The VCom was for my Firewall and Virus detection



Posted by =?Utf-8?B?Qmluaw==?= on March 22, 2005, 10:01 pm
If you were  Registered and logged in, you could reply and use other advanced thread options




"Karl Levinson, mvp" wrote:

> Why can't you delete them? What error message are you getting? What are
> the names of the files?

Message is Share violation

Names of files & directories are

Dialer.GMsoft folder:C:PROGRA~1VCom
Dialer.GMsoft folder:C:PROGRA~1VComPowerDesk
Dialer.GMsoft folder:C:PROGRA~1VComRecovery Commander
Dialer.GMsoft folder:C:PROGRA~1VComSystemSuite
====================
Dialer.GMsoft file:C:PROGRA~1VComPowerDeskPDShExt.dll
Dialer.GMsoft file:C:PROGRA~1VComRecovery CommanderRCHOOK.DLL
Dialer.GMsoft file:C:PROGRA~1VComSystemSuiteSSSensor.dll
Dialer.GMsoft file:C:PROGRA~1VComSystemSuiteMXCtxMnu.dll
Dialer.GMsoft file:C:PROGRA~1VComSystemSuiteRoboex32.dll


>
> It could be that the files are running or in use,Windows prevents those
> files from being deleted until the files are no longer in use. A reboot, or
> rebooting and pressing the F8 key before Windows starts to enter Safe Mode,
> may close the files so they are no longer in use.

Files are not in use

> This could be a false alarm. If the vcom folder was the one that has your
> firewall or antivirus installed, I suspect a false alarm. This can happen
> because your firewall and antivirus log files and malware signature files
> can contain fragments that identify adware, so they look like adware, and
> anti-virus software often has a quarantine feature for quarantining viruses.
> Also, your firewall may install an LSP shim into your TCP/IP stack, and some
> anti-spyware software detects this as adware. It would be useful if you
> could tell us what software is claiming this is adware, and what the exact
> message and adware name you are receiving.

SpyNuker claims there are SpyWare
>
> Also, if you are using the MS anti-spyware beta software, there is a
> newsgroup specifically for that where you will get better answers faster.
>
No I am using SpyWare NukerAee
>
> > A spyware program deleted all the files in the VCom directory
> > except 5 files which have spyware attached
> > These 5 files I need to delete but can not find a way.
> >
> > The VCom was for my Firewall and Virus detection
>
>
>

Similar ThreadsPosted
Auditing Whom delete an file or folder. June 15, 2005, 3:06 am
i cant delete this file or scan it with my anti-virus November 22, 2005, 3:16 pm
When I press delete, I mean DELETE!! January 9, 2006, 12:36 pm
How do I delete my old ca certs... February 19, 2008, 10:45 am
Re: Why can't I delete Freedom? April 18, 2005, 12:01 pm
Re: Is it safe to delete this from Registry? June 23, 2005, 5:53 pm
Re: Is it safe to delete this from Registry? June 23, 2005, 5:59 pm
What could delete tcpip.sys and srv.sys from my Win2003 ?! July 3, 2005, 10:23 am
Safe to delete index.dat? October 31, 2005, 2:46 am
Safe to delete .dmp files? December 12, 2005, 4:26 pm

The site map in XML format XML site map

Contact Us | Privacy Policy