Problematic file

Giganews Newsgroups
Subject: Problematic file
Posted by:  Milos Puchta (mpuchta@.nospam.post.cz)
Date: Fri, 31 Mar 2006

Hi to All,

in the Active Directory (Windows 2003 /SP1 and Windows XP /SP2)
there is problem with one file in the users's home directory.
I have found by using RootkitRevealer (Sysinternals) one file, the name
of which is similar to the temporary internet file (Capitals+number
characters),
zero size, atttributes SHA, that I CAN NOT DELETE.
I tried to do workaround by creating batch file that would change attributes
and running under SYSTEM .... but the server follows what RootkitRevealer
found - file is not visible for Windows APi.

Any help is appreciated.

Regards,
Milos

Replies