can not create folder called scripts anymore

[Guest]

Hello,

Since two days I realised on my windows 2000 server that every folder called
"scripts" is disappeared and when I try to create a file or folder called
"scripts", doesn't matter in which directory, I get the following error
message:

Cannot rename New Folder: A file with the name you specified already exists.
Specify a different filename.

I did a search in the registry for "scripts", I killed every unknown
process, I disabled every unimportant service, I searched for alternate NTFS
Streams, hidden files, Viruses and Trojans... no success..

I still can not create a file or folder called "scripts". I can create
"skripts, "script" e.g. but no "scripts".

I am really grateful for any suggestions.
-
tani

 

[Pegasus \(MVP\)]

Hello,

Since two days I realised on my windows 2000 server that every folder
called
"scripts" is disappeared and when I try to create a file or folder called
"scripts", doesn't matter in which directory, I get the following error
message:

Cannot rename New Folder: A file with the name you specified already
exists.
Specify a different filename.

I did a search in the registry for "scripts", I killed every unknown
process, I disabled every unimportant service, I searched for alternate
NTFS
Streams, hidden files, Viruses and Trojans... no success..

I still can not create a file or folder called "scripts". I can create
"skripts, "script" e.g. but no "scripts".

I am really grateful for any suggestions.
-
tani

There are several ways to create a new folder. You should
report which method you used.

You should also try the same thing while in Safe Mode.

 

[Guest]

Thank you for your reply.

I tried to create a directory via windows Explorer ==> right click and mkdir.
Both doesn't work unfortunately.

It is a production server why I can't reboot it into save mode now. Which
difference does it make for the folder/file creation. Are there other ways to
create a directory I could try?

Thanks

 

[Pegasus \(MVP\)]

You can start a Command Prompt, then use this command:

md "c:\script"{Enter}
or even better
md "c:\Friday\Script"{Enter}

The advantage of Safe Mode is that it only loads the
programs that are part of your basic Windows configuration.
If you have some malicious code on your machine then
it probably will not load in Safe Mode.

 

[Guest]

Thank you for your quick answer.

I tried to create a folder with the md command but I got the same result as
with mkdir. I don't get any error messages but the folder is not there if you
check with either windows explorer or dos command "dir".

I also tried to create the folder after rebooting into safe
mode.Unfortunately I got the same results.

 

[Pegasus \(MVP\)]

I can think of two reasons why this might happen:

a) There is a problem with your file system. If so then you should
still be able to create a "scripts" folder on some networked drive.

b) There is a problem with Windows. If so then you should be
able to create a "scripts" folder while working on a different
machine like so:
net use Q: \\ProblemServer\TestShare
md Q:\Test\Scripts

You must, of course, start by creating the TestShare.

You should also determine if "scripts" has turned into a reserved
word. You can do it like so from a Command Prompt:

md \\.\c:\scripts and
md \\.\c:\LPT1

If you type the commands correctly then you will get at least
a folder called "c:\LPT1", and perhaps also "c:\scripts".

 

[Guest]

I tried to create a folder called scripts on a mapped share on another system
==> that works.
I tried to create on \\problembox\c$ a folder called scripts ==> I get the
same error.

scripts is not listed as a reserved word:

I got the LPT1 folder but no script folder...

I have no idea...

Why does two different disks, with different partitions have the same NTFS
issue?

 

[Pegasus \(MVP\)]

Sorry, I have run out of ideas. Use folder names other than
scripts, and check the Event Viewer.

 

[Guest]

Thanks, anyways..

I will try and put a new HDD into the box over the weekend and see what
happens.

 

[Pegasus \(MVP\)]

Try an external USB disk now!

Thanks, anyways..

I will try and put a new HDD into the box over the weekend and see what
happens.

 

[Guest]

Unfortunately it didn't work either.

But I found something very interesting when I ran sysinternals
rootkitrevealer. There are already scripts folder everywhere..but they are
"hidden from windows API".

I can access them when I map c$ from another box.
Something in windows itself seems to hide and block everything called
"scripts".
Do you have any ideas how to set up something that works even in "saved
mode" and prevents the creation of objects with a certain name?

 

[Pegasus \(MVP\)]

While I'm aware that you have checked your PC for
viruses, I'm now getting very, very suspicios. One
reason is that Windows just does not do this type of
thing. If it did then I would have heard about it in my
many years of working with this OS. Another reason
is that the problem appears to have started suddenly,
about two weeks ago. A third reason is that I asked you
to create a new folder with a subfolder "Scripts" inside.
The new folder could not possibly have had a scripts
folder to start with, hence there is an agent on your
machine that is sensitive to the word "Scripts".

If this machine was mine then I would do this:
- Boot it with a Bart PE boot CD and creata a scripts
folder, then boot normally and see how Windows
treats this folder.
- Alternatively, temporarily install the disk in some
other WinXP PC as a slave disk, then create a
scripts folder there.
- Perform an on-line scan via www.trendmicro.com.
Look for the words "house call".
- Use System Restore to return the machine to a date
well before the problem became apparent. This
action is reversible.

Some time ago I read about a class of viruses that
establish themselves deep inside the operating system
so that they cannot be detected by most virus scanners.
Perhaps you have one of those. Do you have a fire wall?
Is it always active?