2

[

In the above image there are four large files with names composed of what appear to be random (non-Roman) Unicode characters. I have no idea where they came from. Is anyone familiar with these? Do I have a virus?

They have HSA (Hidden, System & Archive) attributes. I have been able to see all hidden files and I have been able to locate these files. Upon trying to delete I have run a cmd to take ownership and rebooted to Safe Mode. Tried deleting the four files and it says that the "files are in use by another program". Under processes and services I do not know what to stop to be able to delete these files? Can I delete these? If so, how?

G-Man Says 'Reinstate Monica'
  • 7,678
  • 22
  • 41
  • 87
JasonNay
  • 21
  • 1
  • 1
    Boot from a linux live cd-dvd-usb and delete them. – Moab Apr 03 '16 at 23:05
  • Related, but without an answer: http://superuser.com/questions/1011504/what-are-those-huge-one-letter-files-in-windows-folder – Gene Apr 04 '16 at 12:36
  • A hint about the version of windows you use would help. Also the details of the files (yes windirstat shows big files but its the 4 files you're asking about that matter not the other 99' of the screenshot.) – Stilez Apr 05 '16 at 09:51

2 Answers2

0


There is many ways to do this, one example is like @Moab told you.

First atempt:
I should restart my computer in safe mode instead.
How to restart Computer in safemode 3 quick ways
then delete the files manually.

Second atempt:
Download a program called Unlocker
Download Unlocker Here

I have very hard to believe not of these altenatives should work if not.

Last atempt:
Download a Linux-Ubuntu Live DVD. Download Ubuntu live DVD HERE
select boot live only(Without install)
then navigate in Gnome/KDE to the files and delete them.
then reboot

Regards

Xsi

XsiSec
  • 276
  • 3
  • 4
  • 15
  • please expand steps about unlocker and booting into safe-mode. (you can quote your source and list necessary steps here) – conquistador Apr 05 '16 at 08:25
  • Used unlocker for hears. It can't always force a lock to be released or deleted on next boot – Stilez Apr 05 '16 at 09:47
0

Even safe mode locks some files. Modern Windows and windows install dvds have a recovery/repair/advanced mode which will always work as a last resort.

Shift f10 or menus get you into command mode which you can use to delete any file as its not running that install of windows or locking its files.

From some situations you can also type explorer.exe to run the usual windows explorer from these places.

Stilez
  • 1,655
  • 3
  • 24
  • 40
  • the commands you refer to depends totally on what computer you have got @Stilez – XsiSec Apr 05 '16 at 09:09
  • Not for this question :) The screenshot shows enough of the system to know its a version of windows modern enough that it'll have some form of install media or recovery mode with the features described. I don't say which commands to use because those can be researched (they aren't as much the focus of the question and the user can ask that detail if needed) – Stilez Apr 05 '16 at 09:46