Hi, Malke.
Thanks for jumping in! I know you have a lot more experience in this kind
of problem than I do.
Larry did answer my two questions yesterday. His post was at "Date: Thu, 08
Nov 2007 20:51:17 -0500", per the headers. Perhaps your message and his
"crossed in the mail".
But the filenames don't ring any bells with me, and he said he runs
Kaspersky, so I still don't have much of a clue as to what the problem is.
The only time I've seen this behavior - and I've seen it many, many
times - is when a computer is infected with malware that respawns.
I've never seen this, but then I only work on my own computer and, luckily,
have never had any significant malware. But I know that you and many other
MVPs deal with such problems regularly.
Just in case Larry's "missing" post has scrolled out of your reach, I'll
paste the whole thing, including my quoted questions, after my Sig.
RC
--
R. C. White, CPA
San Marcos, TX
(e-mail address removed)
Microsoft Windows MVP
(Running Windows Live Mail 2008 in Vista Ultimate x64)
<paste>
R. C. White said:
Hi, Larry.
Thanks for more details. But I still have questions.
I've not used any of these except Windows Explorer, so I can't comment on
those. I do use Word 2007, but Word98 was a very long time ago and I don't
have any way to check on that.
HOW are you deleting files in Windows Explorer? I know it sounds
elementary, but that's exactly why we need. it. Do you use your keyboard's
Delete key? Or do you right-click on the file name and then click Delete
on the context menu? Do you drag the file to the Recycle Bin? To Rename a
file, do you press <F2>? Or right-click on the filename and click Rename?
I think I've done all of the above, i.e. use various way to rename and
delete files. Usually I use PowerDesk to manage files; I click on the
filename, than click on the Delete icon in its toolbar, which deletes
the file without it going into the recycling bin. I have also used
<shift>+<delete key> so it doesn't go into the recycling bin, and just
the <delete> key. No difference in results.
For renaming, I use both the contect menu, but probably most often I
just click the filename twice (slowly) to select it and ready it for
editing, edit the name, then hit <Enter>. All these things give the
appearance of having worked as they should, until I reboot.
I will try using the command console to delete the files and see if
the results are different. That's the only method I haven't tried so
far.
Can you give us at least one sample of the filenames? Are you trying to
delete protected files? Either system files, or files that belong to some
other User? Files that you don't have permission to delete or rename?
Give us some samples.
Here are files that I deleted from the "Next Issue" folder, but which
re-appeared after re-booting...
0711 Bark.doc
Artists Corner by <redacted>.doc
ArtthxO7.wpd
Dear fellow community members.wpd
New Speeding Fines for Florida.doc
New Traffic Fines Now in Effed in Florida.rtf
pinemeadows.doc
Presidents Comments.doc
Social Events and Quizzes.doc
As you can imagine, trying to prepare the next issue of the newsletter
for our community association is made difficult by the presence of
material already included in a prior issue then "deleted."
One "I hope not" scenario is that you have a virus or other malware that
re-creates those files/folders each time you reboot. Samples of the
filenames might trigger recognition by someone here of the likely culprits.
I use Kaspersky version 7.0 and have a great deal of confidence in it.
Have you run a malware scan? Recently?
Not a full scan lately. The automatic "Startup" scan runs with each
startup; KAV catches things as they try to run or as files are
downloaded or "touched"; its Event log shows it to be up-to-date, and
active. It updates definitions every 3-4 hours or so. I haven't tried
checking for root kits but KAV does this to some extent, I believe.
Thanks for your continued assistance.
Larry
</paste>