Professor Frink Posted August 9, 2004 Posted August 9, 2004 I just noticed this new folder -- Ý-- at the root of C:, and it is empty. Does anybody know what it is, and where it came from?
jroc Posted August 9, 2004 Posted August 9, 2004 Looks like you updated with a Vietnamese made version of something...and now have a trojan....but then its not like you provided anything to go on
Professor Frink Posted August 9, 2004 Author Posted August 9, 2004 Alanoll:Yes, I did install Quicktime. But Quicktime has been in my unattended install for a while now, and I don't ever remember that folder appearing before.
Alanoll Posted August 9, 2004 Posted August 9, 2004 It's quicktime's temp directory folder. Sometimes it gets deleted, sometimes it doesn't. meh. The installer routine isn't always perfect
Professor Frink Posted August 9, 2004 Author Posted August 9, 2004 But how do I get rid of it with my clean.cmd? If I say rmdir "c:\Ý"that doesn't work. Andrmdir "c:\Y"doesn't work either. Is there any way to get rid of it automatically?
Alanoll Posted August 9, 2004 Posted August 9, 2004 do a search on those funky characters...I believe the remedy, was open up the file (that deletes the folder) on EDIT, through a CMD prompt (EDIT BATCH.CMD) and then enter the command there and save. You'll still need to use the Ý though
Professor Frink Posted August 11, 2004 Author Posted August 11, 2004 I tried that, and my batch file doesn't find the folder. Has anyone successfully deleted that folder through a batch file? If so, please post the code, or how you did it.Thanks!
Professor Frink Posted August 14, 2004 Author Posted August 14, 2004 I decided to delete it via an autoit script. C: should only have three folders when it's done -- Documents and Settings, Program Files, and WINNT. So the following autoit script opens up explorer, scrolls down to that stupid Ý folder, and deletes it. I consider it safe, because for those random times when the Ý folder is NOT created, it simply delets the next item down, which is my clean.bat file (it has already run, so it's not needed anyway).; --- Start ---Run("C:\WINNT\explorer.exe /n,/e,/select,c:")Sleep(5000)Send("{ENTER}")Sleep(500)Send("{DOWN}")Sleep(500)Send("{DOWN}")Sleep(500)Send("{DOWN}")Sleep(500)Send("{DELETE}"); --- End ---
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now