NPROTECT

[Larry]

I have 5.7GB of apparently deleted files in the folder
NPROTECT, found in the hidden RECYCLERS Folder. I want
very much to delete these files and permanently undo
NPROTECT. I expected it to go away when I uninstalled
Norton Systemworks, but it didn't, probably because I have
a 2nd RECYCLERS Folder in a mystery partition, Drive F.
Drive F contains an identical NPROTECT Folder with files
identical to those in C/RECYCLERS/NPROTECT I have no idea
where the F drive came from, and can get no answers from
anyone on any message board or any Google search as to
what it is.

I get an error message when I try to delete NPROTECT that
says the files are already in use, blah, blah, blah. Duh!
Must be because there are two sets of identical files.

Anybody had this problem, or familiar with the procedures
required to get rid of NPROTECT, and for that matter,
Drive F? Can Windows safely delete the partition, or do I
have to buy fancy software? Come to think of it, it
probably won't delete for the same reason.

If this isn't the shell for a busted trojan, I'll eat it.
Systemworks told me 10 months ago that my F partition had
been deleted; did I want to put it back on? Thinking it
might be critical, I replied yes. It was the first
knowledge I had of any partitioning that had been done. I
think The Cleaner killed the trojan, but at that time I
didn't have the experience to put it all together.

Thanks,
Larry

Internet Explorer 6.0 SP1
eMachines T2042
2GHz Intel Celeron Processor
512MB RAM
40GB Hard Drive
Intel 3D AGP Graphics
10/100Mbps Ethernet
CD-RW 40x Write
DVD 16x Play

 

[davetest]

I have 5.7GB of apparently deleted files in the folder
NPROTECT, found in the hidden RECYCLERS Folder. I want
very much to delete these files and permanently undo
NPROTECT. I expected it to go away when I uninstalled
Norton Systemworks, but it didn't, probably because I have
a 2nd RECYCLERS Folder in a mystery partition, Drive F.
Drive F contains an identical NPROTECT Folder with files
identical to those in C/RECYCLERS/NPROTECT I have no idea
where the F drive came from, and can get no answers from
anyone on any message board or any Google search as to
what it is.

I get an error message when I try to delete NPROTECT that
says the files are already in use, blah, blah, blah. Duh!
Must be because there are two sets of identical files.

Anybody had this problem, or familiar with the procedures
required to get rid of NPROTECT, and for that matter,
Drive F? Can Windows safely delete the partition, or do I
have to buy fancy software? Come to think of it, it
probably won't delete for the same reason.

If this isn't the shell for a busted trojan, I'll eat it.
Systemworks told me 10 months ago that my F partition had
been deleted; did I want to put it back on? Thinking it
might be critical, I replied yes. It was the first
knowledge I had of any partitioning that had been done. I
think The Cleaner killed the trojan, but at that time I
didn't have the experience to put it all together.

Thanks,
Larry

Internet Explorer 6.0 SP1
eMachines T2042
2GHz Intel Celeron Processor
512MB RAM
40GB Hard Drive
Intel 3D AGP Graphics
10/100Mbps Ethernet
CD-RW 40x Write
DVD 16x Play

Try to do it from safemode. If still no good,
try it from the CMD box. Navigate to the recycler
(CD \recycler)
Then remove it (RMDIR nprotect)

Dave

 

[Larry]

Thanks, Dave. To catch you up, I've reinstalled Norton
Systemworks but I still can't get rid of NPROTECT or the
other file in RECYCLER, S-1-5-21-1618058900-1867448843-
1177669790-1005, which apparently is linked to my
password, or user rights. It also shows up in 4 other
folders -- credentials, protect, RSA, etc. -- in Docs and
Settings. It won't delete from any of them... says it
can't find the files to delete. Funny, when I check disk
usage in C Drive Properties, it sure recognizes them. I
instructed Norton to unprotect the bin and it did, but it
changed nothing. Even selecting "Purge all protected
files" was no help. I'll try the safemode method later
this evening and let you know.

Larry

 

[davetest]

Thanks, Dave. To catch you up, I've reinstalled Norton
Systemworks but I still can't get rid of NPROTECT or the
other file in RECYCLER, S-1-5-21-1618058900-1867448843-
1177669790-1005, which apparently is linked to my
password, or user rights. It also shows up in 4 other
folders -- credentials, protect, RSA, etc. -- in Docs and
Settings. It won't delete from any of them... says it
can't find the files to delete. Funny, when I check disk
usage in C Drive Properties, it sure recognizes them. I
instructed Norton to unprotect the bin and it did, but it
changed nothing. Even selecting "Purge all protected
files" was no help. I'll try the safemode method later
this evening and let you know.

Larry

If you have reinstalled Norton, empty the protected bin then
disable the nprotect feature.
Regarding S-1-5-21-1618058900-1867448843- and similar,
this is legitimate, it represents a particular logon ID
and is the mechanism used on NTFS volumes.
Dave