 |
| Register | Login | |||||
 |
Main
| Memberlist
| Active users
| Calendar
| Chat
| Online users Ranks | FAQ | ACS | Stats | Color Chart | Search | Photo album |
|
| | ||
|
| Register | Login | |||||
|
Main
| Memberlist
| Active users
| Calendar
| Chat
| Online users Ranks | FAQ | ACS | Stats | Color Chart | Search | Photo album |
|
| | ||
| 0 users currently in Hardware / Software. |
| User | Post |
| HyperHacker Posts: 4491/5072 |
These results are quite inconsistent (some files visible but missing from MFT, others hidden from API), and why shortcuts like these would be faked or hidden is beyond me. Seems like either a very strange virus or some sort of disk corruption, possibly memory failure.
Originally posted by FreeDOS + Explorer enforces some arbitrary restrictions, such as not allowing a filename to begin or end with a period, even though other programs can create such files and it'll have no problems working with them.  |
| FreeDOS + Posts: 1147/1312 |
If you mean hardlinks, then yes it supports those, and you can use fsutil to make them. You could use symlinks from Interix, though the usefulness is lessened because only Interix apps can follow them. |
| niteice Posts: 34/45 |
Originally posted by FreeDOS + NTFS has supported a form of symlinks (not quite in the Unix sense) for a while but there hasn't been an easy way to create one. |
| FreeDOS + Posts: 1143/1312 |
neo: Shortcuts in Windows *are* files, a binary format actually. The unfortunate thing though, they're not nearly as useful as symlinks are (I've heard rumor that Windows Vista supports some form of symlink, anyone to give more information?).
theclaw: The last file doesn't have an invalid name (where the hell did you hear that dots can't be at the end?), and the colon is likely an alternate data stream (though, colons *are* valid in NTFS as well). This seems odd though. See if you can make Ubcd4Win, boot it, and try to scan for viruses/malware there. Either that, or try to find the objectionable files from the live environment and possible remove them. |
| theclaw Posts: 65/97 |
Like one of them has the name SQLPRSE.DLL which contains invalid characters. I get "cannot read from the source file or disk" even though the file has been there for months. According to that log there is a similar file in the same directory named SQLPARSE.DLL that does not appear in the Windows Explorer.
Unfortunately RootkitRevealer mainly finds problems, it doesn't repair most itself. The weirdest one is at the very bottom. There's a CABIULRB. file which has no similar file elsewhere and as you can see it's name is invalid since names can't end with a dot. It also says "cannot read from the source file or disk". About the shortcuts... I was moving items around in the Start Menu. They appear and work correctly at their new locations, so that means Windows XP doesn't clean up changes to the file system 100%. I should also mention my hard drives are formatted NTFS. Edit: My computer indeed does not allow dots on the end of file names. If I attempt to say, make a file called "Taxes.......", it will come out as "Taxes". This occurs whether or not there are dots elsewhere in the name. It also doesn't allow me to save or create a file whose name is nothing but dots. |
| ||bass Posts: 566/594 |
I'm assuming this is windows. Have you tried booting into safe mode command prompt and logging in as administrator and deleting them that way? |
| neotransotaku Posts: 1829/1860 |
Those look like shortcuts...which I guess are not really files... |
| theclaw Posts: 64/97 |
It appears I have a bunch of files which show up in Windows Explorer, but the MFT doesn't contain their entries or something. A quick scan with RootkitRevealer shows them. I've attached the log for advice on removal. Simple as that! |
