how to question (locked files)

[David Harrah]

There are some enemy files in a W2000 server that we need
to delete. they look accessable - not marked as read
only or hidden BUT they cannot be erased. In safemode
command prompt we are still unable to remove this rogue
directory of files. How does one get to them (in an NTFS
directory). If it was a fat (any flavor) no problem !
Any ideas would be GREATLY appreciated. There is a
program for sale: NTFSDOS that will do it BUT it costs
499.00 (clearly more that we can afford). It will boot
an NTFS drive and provide a DOS like front end. Thanks,
in advance for any and all thoughts
dh

 

[Steven L Umbach]

Hi David. See link to this KB article on removing files with reserved names to see if
it helps. You may want to disable the posit subsystem on your server and review your
security/hardening procedures also to prevent it's recurrence. --- Steve

http://support.microsoft.com/default.aspx?scid=kb;EN-US;120716
http://securityadmin.info/faq.asp#harden -- from FAQ.
http://securityadmin.info/faq.asp#ftpfolder -- from FAQ.
http://is-it-true.org/nt/registry/rtips56.shtml

 

[Dave H]

Your response is much appreciated. Thanks for your
input. I will try the links -- we are at the point of
gnashing of teeth and pulling of hair. thanx again dh

 

[Steven L Umbach]

Good luck. Her is another KB link, similar to last one with a bit more info. ---
Steve

http://support.microsoft.com/?kbid=320081