problem with alternate data streams

[rudolf]

Hi,

recently I saw a new file on my desktop named "CAJAH69." which I was
not able to delete. The icon is transparent, i.e. the file seems to be
hidden or
a system file.

Using the root kit revealer from sysinternals I found out that this
seems to
be a alternate data stream without any corresponding file:

C:\Dokumente und Einstellungen\rudolf\Desktop>more <
ca8jah69.:Zone.Identifier
[ZoneTransfer]
ZoneId=3

C:\Dokumente und Einstellungen\rudolf\Desktop>more < ca8jah69.
Das System kann die angegebene Datei nicht finden.

The last error message means "file not found" in German.

Any ideas how to delete this "file" ?

Thanks in advance.

Regards
Malte

 

[Rock]

Hi,

recently I saw a new file on my desktop named "CAJAH69." which I was
not able to delete. The icon is transparent, i.e. the file seems to be
hidden or
a system file.

Using the root kit revealer from sysinternals I found out that this
seems to
be a alternate data stream without any corresponding file:

C:\Dokumente und Einstellungen\rudolf\Desktop>more <
ca8jah69.:Zone.Identifier
[ZoneTransfer]
ZoneId=3

C:\Dokumente und Einstellungen\rudolf\Desktop>more < ca8jah69.
Das System kann die angegebene Datei nicht finden.

The last error message means "file not found" in German.

Any ideas how to delete this "file" ?

Thanks in advance.

Regards
Malte

Try running HiackThis. It has an ADS module. It can be downloaded from
here:
http://www.majorgeeks.com/download.php?det=3155

 

[rudolf]

Hi, everything seems to be ok when running HijackThis. No problems.