Removing File From Desktop.

[Geeky Dave]

Bill, if you are there, I need your help again. Somehow when I was doing
something (possibly related to the previous post regarding deleteing files &
folders), a file suddenly appeared on my Desktop. When I left click on it, I
get an error message "Windows cannot access the specified device, path or
file. You may not have the appropriate permissions to access the item".
There is just an "OK" button to get rid of the error message. Right clicking
on the file, then left clicking "Properties", all I see is a "General" tab.
If I click on "Delete" (above "Properties") I get another error message "
Cannot delete file: Cannot read from the source file or disk" (again there
is just an "OK" button to get rid of the error message). I looked through
the KB page you sent me, but can't find anything about removing this file.
Do you have any more brilliant ideas as to how I can delete this file?
Thanks again in advance, Dave.

 

[Brian A.]

What type of file is it, a shortcut to a file or another type?
If you boot to Safe Mode can you delete it?
Have you checked to see if the machine has been comprised?
Run a full system virus scan with fully up-to-date definitions.

**It is very important to run the update for each program before running the
app/s to be sure you have the latest definitions.**
Run the programs in Safe Mode after assuring you have shut down all running
tasks except explorer or systray and all apps are fully up to date.
Remove your Temp Internet files: Right click IE. Under the General tab click
Delete Files, put a check in Delete all Offline..., click OK and close when
finished.
Delete all files in c:\windows\temp.

Download/run Cool Web Shredder from:
http://www.intermute.com/products/cwshredder.html

For Info on Cool Web Search variants:
http://www.richardthelionhearted.com/~merijn/cwschronicles.html

Download/install/run Ad-Aware SE to detect/rid of any other parasites/spyware
that may be installed. It can be obtained free from:
http://www.lavasoftusa.com/
After installing Ad-Aware, open it and click on the ref update to get the
latest up-to-date ref file, then run Ad-Aware and delete everything it finds.

Download/install/run Spybot - Search & Destroy:
http://security.kolla.de/index.php?lang=en&page=download
Run it at it's default settings until you learn an know more about it. Spybot
S&D is more of an advanced users tool and changing from the default settings can
be dangerous to the novice user. Items found in the default settings that are
RED can usually be safely removed. If you are unsure of a found item, do not
remove it and ask for help.

If you still have problems, download/run HijackThis from:
http://www.richardthelionhearted.com/~merijn/downloads.html
http://majorgeeks.com/downloads31.html

Copy HJT to it's own folder, this is where the log files will be saved. Run
HJT in Normal Mode.
Do not remove anything with it until you get advice on what to remove, HJThis
will list many apps that are needed along with the bad ones. Removing items
listed hap-hazardly without knowing what they are can/will create a royal mess.
Read the quick start here on how to create a log file that can be copied/pasted
into a forum that can provide assistance on removal of unwanted pests.
http://mjc1.com/mirror/hjt/#quick

Then post the logs to an appropriate forum where they specialize in
spyware/hijacker removal. Please read any sticky notes for proper posting which
are most commonly posted first at the top in each specific forum. Read any
information under each forum category name for information on what that
particular one is used for, look for the proper one that you post logs to.
http://forums.spywareinfo.com/
http://aumha.net/
http://forum.aumha.org/

After running the above and assuring you have a clean machine:
It's also a good idea to have a HOSTS file to block bad sites, scroll to HOSTS
File Manager here:
http://www.mvps.org/PracticallyNerded/Software.htm

Download/install/run SpywareBlaster which stops the badboys before they even get
a chance to install:
http://www.javacoolsoftware.com/spywareblaster.html

--

Brian A. Sesko { MS MVP_Shell/User }
Conflicts start where information lacks.
http://basconotw.mvps.org/

Suggested posting do's/don'ts: http://www.dts-l.org/goodpost.htm
How to ask a question: http://support.microsoft.com/kb/555375

 

[Geeky Dave]

Hi again,
It is a file, although it consists of zero bytes. It is called "Pong", (the
old arcade game I assume)
which I think I downloaded ages ago. Under "Properties" it is listed as a
Desktop file.
I can't find the original installation file on my PC. I have just done a
clean install of
XP Pro SP2 a couple of days ago, but this only appeared last night. It can't
be deleted
in Safe Mode. I run McAfee Security Centre which has just been updated. I
also ran
a complete virus scan today. I've deleted all files in C:\Windows\Temp, run
adaware,
spybot, stopped all services & startup programs, basicaly everything you've
suggested,
but still can't get rid of it. If you look at my last post about "Deleting
Unwanted Folders"
(6/8/06) I tried that too, but as this file has only the "General" tab, I
can't personalize the file.
Any other suggestions, as I'm just about at the point of formatting my C:\
drive again &
reinstalling XP?
Thanks, Dave.

 

[Brian A.]

Click Start > Run, type in: cmd and press Enter.
At the command prompt type and press enter after each command below. **Note: ^
= space

cd desktop
attrib -r -s -h filename **Note: Replace filename with actual filename
del filename
exit


--

Brian A. Sesko { MS MVP_Shell/User }
Conflicts start where information lacks.
http://basconotw.mvps.org/

Suggested posting do's/don'ts: http://www.dts-l.org/goodpost.htm
How to ask a question: http://support.microsoft.com/kb/555375

 

[WTC]

Dave,

Question: In Windows Explorer, can you see the file at these locations?:

c:\documents and settings\all users\desktop
or
c:\documents and settings\<your_user_name>\desktop

------

If you can see the file then please try this method:

1. Write down the path and filename of the undeletable file. (c:\documents
and settings\<your_user_name\desktop\filename.ext)
2. Open a command prompt window. (Start > Run > cmd.exe)
3. Open the Task Manager. (Start > Run > taskmgr.exe)
4. In the Task Manager, find the process called "Explorer" and end the
process for explorer. (This will make the desktop and taskbar disappear)
5. Close the Task Manager.
6. In the command prompt window, type:

del /a /f "\\?\c:\documents and
settings\<your_user_name>\desktop\filename.ext"

7. To regain your desktop and taskbar, type the following in the command
prompt window:

explorer.exe


-------

You may wish to read this KB article.

You cannot delete a file or a folder on an NTFS file system volume
http://support.microsoft.com/?kbid=320081

 

[Geeky Dave]

Hi Bill,
I do have the file listed in "c:\documents and settings\dave\desktop",
trouble is that when I do as you suggest, del /a /f "\\?\c:\documents and
settings\dave\desktop\pong" I get the following error message: Parameter
format not correct - "f"\\?\c:\documents and settings\dave\desktop\pong"".
I guessed it was probably a typo, so I entered "del /a/f "c:\documents and
settings\dave\desktop\pong", but got the following error message:
"Could Not Find c:\documents and settings\dave\desktop\pong". The file name
is "PONG" & it is in "c:\documents and settings\dave\desktop".
I don't know why I can't find it!! It's all very frustrating. Any other
ideas would be appreciated. Otherwise I'm going to format my HDD &
re-install XP as I'm also getting another error message when using MSCONFIG
which my be related. This one headed "System Configuration" tells me "An
Access Denied error was returned while attempting to change a service. You
may need to log on using an Administrator account to make specific changes".
I can make changes despite this error message though.
Thanks Bill,
Dave.

 

[Geeky Dave]

Hi Brian,
Thanks for the advice, unfortunately removing the attributes didn't work.
For some reason Windows just does not recognize that the"PONG" file exists.
See my reply to Bill for a full explaination. Any further suggestions would
still be welcomed though. (Before I slash my wrists, or worse!).
Cheers,
Dave.