Folder Deletion and Property Issues in XP

[clayndwoods]

PROBLEM:

When attempting to delete a folder in my <User Name>\Local Settings\Temp directory, it will not allow me to do so. I get an error message "Directory is not empty". However, there is not a file in it, and the sub-folders are also empty. Any attempt to delete the folders within the folder (4 of them) get the same result.

I found a shaded read-only check box in the properties. It will allow me to uncheck it, but it doesn't "APPLY"

I have used safe mode command line ATTRIB -H -R -S on the folders with no luck. I used Cacls to ensure I had full rights to the folder. I do.

I can move the folders around, and once in a while I can delete one or two (there were two sets of these folders, I have almost eliminated the other one by using this method).

I've used ntfslink and Link Magic to see if there were hard links involved, and they show nothing. These were temporary folders for Ad-Aware, and this happened about the same time GLB1A2B.EXE showed up, and all my anti-malware tools started going crazy killing stuff.

A program called _ showed up in ZoneAlarm (gave itself permissions and everything) and it's ZoneAlarm properties said it was "phiisyt" which I promptly hunted down and killed.

Everything seems quiet and stable now, and I'm considering creating a ram drive, moving the undeletables to it, and turning the machine off. But I'm sure it will happen again and I would love to know how to accomplish deleting these files.

From what I see in other forums and issue reports, this isn't an uncommon problem, and often occurs after a LOPCOM infection.

Anyone have any ideas?

[allen2]

You can try process explorer from sysinternals to find which program has a handle on the directory you want to delete.

[The Glimmerman]

Or try Unlocker

http://ccollomb.free.fr/unlocker/

[IcemanND]

If you are using XP pro, not Home you cna tyr this to delete the files, it won't tell you what was using them if anything but if they were their own app it usually works to get rid of them.

Turn off 'Simple File sharing'

find file, display properties and click on security tab.

Remove all groups and users listed and click ok

repeat for all offending files.

Reboot system in safe mode.

repeat above process except give only the logged in user full control permissions.

click ok

then delete the file

repeat for all of the files.