Cannot delete file "runauto.."

[x-eyed-bear]

Sorry, I previously posted this in the wrong forum by mistake.

I have this folder in the root directory of my hard disks.

I have read all the response in this forum to a previous request on
advice on how to delete this folder. None of the advice works; much of
it is inapplicable.

I have followed every article of advice I can follow on the first 10
pages of a Google search on the string 'runauto..'. About 50% of the
entries refer to my own earlier request (6 weeks ago) and the
non-effective advices on how to remove the sub-folder. The other 50%
contain advice which is either not applicable or just plain does not work.

Question: has anyone, anywhere, at any time ever actually been able to
remove this sub-folder? Failing that, has anyone, anywhere at any time
heard of somebody who claims to have removed this sub-folder, and whose
claim has been validated?

Please be assured that running all the suggested anti-virus and
anti-spy-ware packages, that all the Google articles advise, results in
the same status report on my computer: no virus or spy-ware is found.
And file 088826.exe does not exist.

 

[Buffalo]

Sorry, I previously posted this in the wrong forum by mistake.

I have this folder in the root directory of my hard disks.

I have read all the response in this forum to a previous request on
advice on how to delete this folder. None of the advice works; much of
it is inapplicable.

I have followed every article of advice I can follow on the first 10
pages of a Google search on the string 'runauto..'. About 50% of the
entries refer to my own earlier request (6 weeks ago) and the
non-effective advices on how to remove the sub-folder. The other 50%
contain advice which is either not applicable or just plain does not
work.

Question: has anyone, anywhere, at any time ever actually been able to
remove this sub-folder? Failing that, has anyone, anywhere at any time
heard of somebody who claims to have removed this sub-folder, and
whose claim has been validated?

Please be assured that running all the suggested anti-virus and
anti-spy-ware packages, that all the Google articles advise, results
in the same status report on my computer: no virus or spy-ware is
found.
And file 088826.exe does not exist.

Have you tried the free version of SuperAntiSpyware ?
What OS are you using?
Did you clear out your Restore point, if you have such on your OS?
Did you try to remove your problem in SafeMode?
You give very little info.
SuperAntiSpyware seems to get things done when others fail.

 

[Larry Sabo]

I have this folder in the root directory of my hard disks.

I have read all the response in this forum to a previous request on
advice on how to delete this folder. None of the advice works; much of
it is inapplicable.

Question: has anyone, anywhere, at any time ever actually been able to
remove this sub-folder?

If you can prepare a BartPE CD using http://www.ubcd4win.com/
(assuming you use XP) you could use it to delete the files and
folders. Failing that, remove the hard drive and connect it as a slave
on a second computer (with proper regard to drive jumper settings) and
delete them using the second computer, then scan the drive for malware
while it's there and then replace it in your sick computer. An
alternative to mounting the drive as a slave on another system, you
could install it in an external drive case that can than be connected
via USB port to the second computer. That saves having to open up the
second computer.

Now that I think of it, the simplest way is to boot from your OS CD
and use the command console to delete the files and folders. Even
easier is to find a tech who knows how to do these things and have
him/her do it for you.

Good luck!

Larry

 

[Mumia W.]

Sorry, I previously posted this in the wrong forum by mistake.

I have this folder in the root directory of my hard disks.

I have read all the response in this forum to a previous request on
advice on how to delete this folder. None of the advice works; much of
it is inapplicable.

I have followed every article of advice I can follow on the first 10
pages of a Google search on the string 'runauto..'. About 50% of the
entries refer to my own earlier request (6 weeks ago) and the
non-effective advices on how to remove the sub-folder. The other 50%
contain advice which is either not applicable or just plain does not work.

Question: has anyone, anywhere, at any time ever actually been able to
remove this sub-folder? Failing that, has anyone, anywhere at any time
heard of somebody who claims to have removed this sub-folder, and whose
claim has been validated?

Please be assured that running all the suggested anti-virus and
anti-spy-ware packages, that all the Google articles advise, results in
the same status report on my computer: no virus or spy-ware is found.
And file 088826.exe does not exist.

It's been a while since I've had to install Windows, so consider this an
off-the-wall suggestion that you may ignore.

Install the Recovery Console and use the recovery console to delete
088826.exe and runauto...

Using the Recovery Console requires a certain amount of skill, and you
have to set some things in the registry first. See
http://support.microsoft.com/ for the required documentation.

 

[Ben Myers]

Sorry, I previously posted this in the wrong forum by mistake.
I have this folder in the root directory of my hard disks.
I have read all the response in this forum to a previous request on
advice on how to delete this folder. None of the advice works; much of
it is inapplicable.
I have followed every article of advice I can follow on the first 10
pages of a Google search on the string 'runauto..'. About 50% of the
entries refer to my own earlier request (6 weeks ago) and the
non-effective advices on how to remove the sub-folder. The other 50%
contain advice which is either not applicable or just plain does not work.
Question: has anyone, anywhere, at any time ever actually been able to
remove this sub-folder? Failing that, has anyone, anywhere at any time
heard of somebody who claims to have removed this sub-folder, and whose
claim has been validated?
Please be assured that running all the suggested anti-virus and
anti-spy-ware packages, that all the Google articles advise, results in
the same status report on my computer: no virus or spy-ware is found.
And file 088826.exe does not exist.

Please repost with more information, including the operating system in
use on the problem computer, the exact name of the item in question,
whether it is a file or a folder and the significance of the "088826.exe"
file.

Ben

 

[jen]

"Please repost with more information, including the operating system in
use on the problem computer, the exact name of the item in question,
whether it is a file or a folder and the significance of the
"088826.exe"
file."

Here's the OP's original thread:
http://groups.google.com/group/alt....auto..+folder+in+root+directory&rnum=1&hl=en#

-jen

 

[jen]

Sorry, I previously posted this in the wrong forum by mistake.
I have this folder in the root directory of my hard disks.
I have read all the response in this forum to a previous request on
advice on how to delete this folder. None of the advice works; much of
it is inapplicable.
I have followed every article of advice I can follow on the first 10
pages of a Google search on the string 'runauto..'. About 50% of the
entries refer to my own earlier request (6 weeks ago) and the
non-effective advices on how to remove the sub-folder. The other 50%
contain advice which is either not applicable or just plain does not
work.
Question: has anyone, anywhere, at any time ever actually been able to
remove this sub-folder? Failing that, has anyone, anywhere at any time
heard of somebody who claims to have removed this sub-folder, and
whose claim has been validated?
Please be assured that running all the suggested anti-virus and
anti-spy-ware packages, that all the Google articles advise, results
in the same status report on my computer: no virus or spy-ware is
found. And file 088826.exe does not exist.

Try this:

Problem:

"Error Deleting File or Folder - Cannot delete file: cannot read from
source file or disk"

and

"Error Renaming File or Folder - Cannot rename file: cannot read from
source file or disk"

Solution 1:

* Start | Run | Cmd - Open command prompt
* cd /<path to file or directory>/
* dir /a /x
* attrib -r -s -h <~short filename> (may fail)
* rd <~short filename> /s /q

Solution 2:

Download Unlocker - a freeware program to solve the problem of
errors when trying to rename and delete files and folders.
http://ccollomb.free.fr/unlocker/

-jen

 

[x-eyed-bear]

Have you tried the free version of SuperAntiSpyware ?
What OS are you using?
Did you clear out your Restore point, if you have such on your OS?
Did you try to remove your problem in SafeMode?
You give very little info.
SuperAntiSpyware seems to get things done when others fail.

Apologies, the detail was in an earlier posting. Here is a precis:

- OS is Win2000 SP4, with all latest 'patch Tuesday' updates
- 2 hard disks, both 'infected'
- SafeMode makes no difference to the ability to delete the folder; the
error message is "Cannot delete file: cannot read from the souce file or
disk"
- I do not use Restore points because I make frequent changes to my
system as part of my work and studies. I cannot readily keep track of
the restore points.
- I have not used SuperAntiSpyware because I have no proof that it is
not in fact Spyware.
- I am running AVG Anti-Spyware 7.5
- I am running the latest version of Norton Internet security, updated
daily.
- I am running SpyBot S & D
- I can copy files into this folder but can only delete them from the
folder using the Wipe feature in PGP. I cannot list the files that are
in the folder.

 

[x-eyed-bear]

On 08/29/2007 07:31 AM, x-eyed-bear wrote:

It's been a while since I've had to install Windows, so consider this an
off-the-wall suggestion that you may ignore.

Install the Recovery Console and use the recovery console to delete
088826.exe and runauto...

Using the Recovery Console requires a certain amount of skill, and you
have to set some things in the registry first. See
http://support.microsoft.com/ for the required documentation.

AS I said in the original post, file 088829.exe does not exist on my
system and runauto.. cannot be deleted.

 

[x-eyed-bear]

Please repost with more information, including the operating system in
use on the problem computer, the exact name of the item in question,
whether it is a file or a folder and the significance of the "088826.exe"
file.

Ben

OS is Win2000 SP4 with all latest security fixes
The name of the item is as in the title of the post - i.e. 'runauto..
It is a file ( a generic term) but with the specific characteristics of
a folder as demonstrable by a). the icon that Windows uses to represent
it and b). the fact that I can drop files into the runauto.. folder.
The file '088826.exe' is a component of the Trojan virus which creates
the 'runauto..' folder.

 

[Buffalo]

Apologies, the detail was in an earlier posting. Here is a precis:

- OS is Win2000 SP4, with all latest 'patch Tuesday' updates
- 2 hard disks, both 'infected'
- SafeMode makes no difference to the ability to delete the folder;
the error message is "Cannot delete file: cannot read from the souce
file or disk"
- I do not use Restore points because I make frequent changes to my
system as part of my work and studies. I cannot readily keep track of
the restore points.
- I have not used SuperAntiSpyware because I have no proof that it is
not in fact Spyware.

Being careful is smart. SuperAntiSpyware is an anti-spyware program and not
an anti-virus program.
Perhaps you will research the program if you are interested.
Some sites:
http://www.snapfiles.com/opinions/Super-Anti-Spyware/Super-Anti-Spyware.html
http://www.softpedia.com/reviews/windows/SUPERAntiSpyware-Professional-Review-49986.shtml
http://www.softsea.com/review/SUPERAntiSpyware-Professional.html

The free version is basically the same as the paid version with the
exception of real-time protection and auto-updating.

If you get your problem fixed, please post back with the solution.

 

[Sofa Slug]

OS is Win2000 SP4 with all latest security fixes
The name of the item is as in the title of the post - i.e. 'runauto..
It is a file ( a generic term) but with the specific characteristics of
a folder as demonstrable by a). the icon that Windows uses to represent
it and b). the fact that I can drop files into the runauto.. folder.
The file '088826.exe' is a component of the Trojan virus which creates
the 'runauto..' folder.

You've got a mean one there. I assume you have seen the instructions for
removing this Trojan at: http://www.2-spyware.com/remove-runauto-trojan.html
Although the help there is for XP, you should be able to apply the basic
techniques in Windows 2000.

As for removing the file that is giving you the delete error, I would
try booting to safe mode and running SuperAntiSpyware (install the free
version). It's actually one of the best virus scanners out there and
doesn't install any ad ware or spy ware. IMPORTANT: you will need to use
it's "Bootsafe" option on the Start Menu to boot into Safe Mode, then
reset Bootsafe again to 'Normal Restart' BEFORE you boot back into
normal Windows.

If that doesn't work, this will for sure...

Try burning a Linux based "Knoppix" disc downloaded from:
http://www.knoppix.net
Boot to this disc, navigate to the folder/file(s) and delete away.

Whichever method you use, be sure and nuke any malware infected registry
key(s) before you boot back up in normal Win2K (taking appropriate
precautions to back up the registry first of course).

 

[x-eyed-bear]

Being careful is smart. SuperAntiSpyware is an anti-spyware program and not
an anti-virus program.
Perhaps you will research the program if you are interested.
Some sites:
http://www.snapfiles.com/opinions/Super-Anti-Spyware/Super-Anti-Spyware.html
http://www.softpedia.com/reviews/windows/SUPERAntiSpyware-Professional-Review-49986.shtml
http://www.softsea.com/review/SUPERAntiSpyware-Professional.html

The free version is basically the same as the paid version with the
exception of real-time protection and auto-updating.

If you get your problem fixed, please post back with the solution.

I have now installed and run SUPERAntiSpyware. AS I really expected, it
does exactly what it does NOT say on the box. It fails to even detect,
let alone remove 'runauto..' and fails to detect a known piece of
malware embedded in a zip file which I keep on my system, but never
execute, as a test case. So far AVG is the only anti-spy ware which
detects this malware.


I guess I should ask my question again: has anyone, anywhere, at any
time actually ever removed this folder 'runauto..?

 

[x-eyed-bear]

You've got a mean one there. I assume you have seen the instructions for
removing this Trojan at:
http://www.2-spyware.com/remove-runauto-trojan.html
Although the help there is for XP, you should be able to apply the basic
techniques in Windows 2000.

As for removing the file that is giving you the delete error, I would
try booting to safe mode and running SuperAntiSpyware (install the free
version). It's actually one of the best virus scanners out there and
doesn't install any ad ware or spy ware. IMPORTANT: you will need to use
it's "Bootsafe" option on the Start Menu to boot into Safe Mode, then
reset Bootsafe again to 'Normal Restart' BEFORE you boot back into
normal Windows.

If that doesn't work, this will for sure...

Try burning a Linux based "Knoppix" disc downloaded from:
http://www.knoppix.net
Boot to this disc, navigate to the folder/file(s) and delete away.

Whichever method you use, be sure and nuke any malware infected registry
key(s) before you boot back up in normal Win2K (taking appropriate
precautions to back up the registry first of course).

Yes, I have seen the instructions you mention - that is precisely why I
stressed that I do NOT have the file 088826.exe on my system. The
removal procedure in your reference is not applicable.

Yes, I have tried SUPERAntiSpyware in Safe Mode and no, it doesn't even
detect, let alone remove this folder. In fact it doesn't even detect my
test case piece of malware which I retain on my system as a test of the
claims from so-called anti-soy ware programs. Of the 20 or so I have
tried most turn out to be spy ware rather than anti spyware. To that
extent they are useless and their developers are, to put in plainly,
liars. So far only AVG detects my test case and is the only product
capable to cleaning up the malware left behind by other anti spy ware
programs.

I don't believe the Knoppix based approach will work, because using the
Recovery Console, giving me a command line interface, also fails.

I repeat my question: has anybody, anywhere, at any time actually had
experiencee of removing this folder?

 

[x-eyed-bear]

If you can prepare a BartPE CD using http://www.ubcd4win.com/
(assuming you use XP) you could use it to delete the files and
folders. Failing that, remove the hard drive and connect it as a slave
on a second computer (with proper regard to drive jumper settings) and
delete them using the second computer, then scan the drive for malware
while it's there and then replace it in your sick computer. An
alternative to mounting the drive as a slave on another system, you
could install it in an external drive case that can than be connected
via USB port to the second computer. That saves having to open up the
second computer.

Now that I think of it, the simplest way is to boot from your OS CD
and use the command console to delete the files and folders. Even
easier is to find a tech who knows how to do these things and have
him/her do it for you.

Good luck!

Larry

Booting from the OS CD and entering the Recovery Console is not effective.

Trying to 'rd' this folder results in the error msg 'access is denied'

Trying to 'attrib -h' or 'attrib -s' this folder results in the error
msg ' The system cannot find the file or directory specified'

Dir lists the folder as having attributes 'd--hs--'

 

[x-eyed-bear]

Try this:

Problem:

"Error Deleting File or Folder - Cannot delete file: cannot read from
source file or disk"

and

"Error Renaming File or Folder - Cannot rename file: cannot read from
source file or disk"

Solution 1:

* Start | Run | Cmd - Open command prompt
* cd /<path to file or directory>/
* dir /a /x
* attrib -r -s -h <~short filename> (may fail)
* rd <~short filename> /s /q

Solution 2:

Download Unlocker - a freeware program to solve the problem of
errors when trying to rename and delete files and folders.
http://ccollomb.free.fr/unlocker/

-jen

Congratulations! You get a prize for being the only person who has found
a solution to this problem. I have worked at it since July 14th almost
every day trying the advices given by others. Yours actually worked -
unlocker deleted all instances of the file immediately.

Thank you very much.

 

[Buffalo]

I have now installed and run SUPERAntiSpyware. AS I really expected, it
does exactly what it does NOT say on the box. It fails to even detect,
let alone remove 'runauto..'

As I stated previously, it is not a virus detector.
Hell, just uninstall it. It was free and it didn't take too much of your
time.

and fails to detect a known piece of
malware embedded in a zip file which I keep on my system, but never
execute, as a test case. So far AVG is the only anti-spy ware which
detects this malware.

No antispyware detects them all.
Did that test zip file come from AVG?

I guess I should ask my question again: has anyone, anywhere, at any
time actually ever removed this folder 'runauto..?

BTW, if nothing detects your 'runauto..' file, what kind of problem(s) is it
causing?
What is its size?
Just curious.

 

[Buffalo]

Congratulations! You get a prize for being the only person who has found
a solution to this problem. I have worked at it since July 14th almost
every day trying the advices given by others. Yours actually worked -
unlocker deleted all instances of the file immediately.

Thank you very much.

Happy to hear you got it sorted out.
BTW, what is the prize?
Also, would you be considerate enough to post which solution worked?
Was it the long file name that caused the file not to be found in DOS?

 

[Buffalo]

BTW, if nothing detects your 'runauto..' file, what kind of problem(s) is it
causing?
What is its size?
Just curious.

Disregard the above questions.
I read your post that you got it deleted.
When you tried to change the attributes in DOS, did you call the file
runauto.. or runaut~1 or "C:\runauto.." or ?
Curious, in case I have a similar problem with my Win2000Pro.

 

[x-eyed-bear]

Happy to hear you got it sorted out.
BTW, what is the prize?
Also, would you be considerate enough to post which solution worked?
Was it the long file name that caused the file not to be found in DOS?

The prize is notoriety: it seems that they are many other so-called
'solution providers' or problems solving web-sites that have no
value-add function at all -they merely trawl newsgroups like this and
vacuum up what nuggets they can find. Mostly the nuggets turn out to be
a well known compound of iron and sulphur. They also suck up the names
of people involved - so your name will be known. So expect the usual
spam shortly.

As I said, the solution that worked as to use the Unlocker program. I
listed the contents of the root directory on all my hard drives, right
clicked on the 'runauto..' folder and selected 'unlock' from the context
menu. Unlocker told me there were no locks in existence on the file but
offered a number of actions that it could perform, delete being one of
them. Deletion was immediate.

There was no long file name involved: both the windows command prompt
and the Recovery Console were able to display the file/folder name
'runauto..' but neither were able to do anything with it. I suspect it
was the trailing two periods which were the problem. I never thought to
type the file name within quotes: "runauto.." when trying any of the
DOS-like commands. I have no idea if this would have made a difference.