Bogey file of zero bytes

[iandoreeninvan]

I remember reading of this one before, but I can't locate
the reference.

I've inherited ( via virus? email?) a file which shows up as a square box ( instead of a file name),of zero bytes.
I forget the ascii character code.

I've been unable to delete it ( i think i tried rebooting to DOS only) & fiddling with attributes.

it's not causing a serious drama, just stops "avg anti virus", when the logical D drive is checked.

I use D: for backups etc / burning / ..

Any fixes?
I hope without reformatting the hard disk


Ian C

 

[bcastner]

. Can you rename it, then delete it?
. The freeware version of this utility should be able to delete the file:

http://www.jrtwine.com/Products/DelFXPFiles/index.htm

 

[iandoreeninvan]

thanks again bill for help.

tried renaming ( right click|rename) :

get message "Error renaming file or folder
:Cannot rename file:cannot read from source file or disk

tried navigating to directory by "run" command...

cd xxx
etc

when I try to cd to the lowest level
subdirectory in the chain, I get "invalid directory"


I will try the freeware utility of DelFXPFiles, thanks
and pass on results

Ian c

 

[iandoreeninvan]

I also tried again, as Administrator in Safe Mode Log On
ie deleting in DOS, etc
[ to no avail ]

DeleteFXPFiles didn't work.

the error message "delete FXP files" is:

Failed to Delete "D:\0IanBu\bb\tes1\": 123 (The filename, directory name, or volume label syntax is incorrect.)

Ian C

 

[Dreadson]

Try going to

http://www.hotdownloads.com/index.php3?job=2&cat=56

and downloading "Trojan Remover". It restarts the computer to delete the files and it's always worked for me.

 

[JimPletcher]

Have you tried starting in DOS mode (to avoid windows ftom using any files)and deleting an entire Directory tree/branch with DelTree?

 

[bcastner]

My concern is that it might be a junction point, a an NTFS Streams.

http://www.diamondcs.com.au/index.php?page=archive&id=ntfs-streams

 

[linney]

131702 - Cannot Delete Files or Folders with Extended Characters

http://support.microsoft.com/default.aspx?scid=kb;en-us;131702

120716 - How to Remove Files with Reserved Names in Windows

http://support.microsoft.com/default.aspx?scid=kb;en-us;120716&FR=1&PA=1&SD=HSCH

Cannot Read From Source File Or Disk!
thread779-679065


Cannot delete garbage file created when upgrading to XP from 98
thread779-714737

 

[iandoreeninvan]

thanks again for help.

i've tried most of the suggestions ( still to no avail).

i think 'deltree' applies to win98, as i get pointed to
RmDir in winXp.
RmDir didn't work ( i forget the exact message),
unless i got the command / switches incorrect.

I don't think i have any trojans ( tho' these days that
is only a very temporary opinion)...

I'll keep looking as i get time... maybe eventually coming
up with something.

Prolly try scandisk next under dos..


regards to all

 

[linney]

Did you try this from Thread779-679065



open a command window and do this

CD to your directory.
Use: DIR /X /A to see the SHORT FILE NAMES of the files and directories there.

use:


RD [/S] [/Q] [drive:]path

/S Removes all directories and files in the specified directory in addition to the directory itself. Used to remove a directory tree.

/Q Quiet mode, do not ask if ok to remove a directory tree with /S


Have you tried running ChkDsk /r from the Recovery Console?

 

[iandoreeninvan]

Some other outputs of delXpfiles

FN<>
file name is
D:\ZZZZZZZZZZ0IanBu\bb\tes1\

FT<>
file type is
<Unknown>

right click on file

highlight

attempted to 'delete'

"Error Deleting File or Folder:
Cannot delete file: Cannot read from the source file or disk"

tried "sharing" the sub-directory

still couldn't delete
**************
following Linney's suggestion.

dos commands used

d: [ change to logical D: ] 10mb partition
dir /X /A [ to get short names ]

showed directory of D:\ZZZZZZ~1
showed date time <DIR> .
showed date time <DIR> ..
showed date time <DIR> bb
0 file<s> 0 bytes
3 dir<s> xxx bytes free
cd\ZZZZZZ~1<enter>

tried rd /S /Q bb

responded
"bb/tes1\_ - the filename, directory name, or volume label syntax is incorrect


I haven't installed the recovery console, but I'll do that
later

thanks again & regards

Ian C

 

[bcastner]

Try:

RD /S D:\ZZZZZZ~1

 

[jtwine]

Hello there...

Delete FXP Files is giving you an odd error that we have not encountered before. Please try the following; hover the mouse over the item you are trying to delete. See what information comes up in the tooltip.

Also, if this is a folder/directory, try to enter it using Delete FXP Files and see if you can delete its contents.

You may be getting that error because some application may be using the file, or in the process of trying to create it (although you usually get a different error message in that case).

The "Delete On Reboot" functionality might help then.

Lastly, be sure to do a chkdsk run (backup first!) just in case you have some filesystem metadata corruption (not likely but possible). Then try to delete the file/folder again.

Peace!

-=- James R. Twine

 

[bcastner]

jtwine,

If you are involved with the FXP project, I would appreciate your comments on this, and some other issues that have appeared in this forum.

A use of the forum "Keyword Search" should show quickly several stubbon examples. Try the keyword "delete" in the subject line.

I will continue recommending your tool suite, and others, but it bothers me that somehow files or folders are being created that fall through the cracks, and prove even under Safe Mode unremovable.

Comments would be appreciated.

Best wishes,
Bill Castner

 

[iandoreeninvan]

Hi again & thanks all for suggestions...

Latest attempts...

tried RD /S D:\ZZZZZZ~1
responded "Are you sure <Y/N>? typed y<enter>
responded "D:\ZZZZZZ~1\bb/tes1\_ - the filename, directory name, or volume label syntax is incorrect.

****
tried "jtwine (Programmer)Jun 23, 2004" suggestion
"Hello there..."

"Delete FXP Files is giving you an odd error that
we have not encountered before. Please try the
following; hover the mouse over the item you are
trying to delete. See what information comes up
in the tooltip."

tooltip comes up "Name: " " [ ie inverted commas around a square box]
Times (C/A/LW): <Cannot Access File Times>
Attributes: -------------------
Owner: <Unknown>\<Unknown>

"Also, if this is a folder/directory, try to enter
it using Delete FXP Files and see if you can
delete its contents."

Im using JRTS - Delete FXP files [Unregistered Version]
... comes up with "recursive deletion not allowed in non-registerd", etc

"You may be getting that error because some
application may be using the file, or in the
process of trying to create it (although you
usually get a different error message in that
case).

The "Delete On Reboot" functionality might help
then."

i did get that error .. something about used by another process...
but i cant remember the circumstances...

... comes up with "recursive deletion not allowed in non-registered", etc

Lastly, be sure to do a chkdsk run (backup first!)
just in case you have some filesystem metadata
corruption (not likely but possible). Then try to
delete the file/folder again.

I did a chkdsk - the following is the 'piped' output ( text file )

The type of the file system is FAT32.
Volume OTHER created 10/08/2003 3:09 PM
Volume Serial Number is BC98-5197
Windows is verifying files and folders...
File and folder verification is complete.
Windows has checked the file system and found no problems.
8,345,484 KB total disk space.
3,040 KB in 15 hidden files.
8,600 KB in 905 folders.
2,133,508 KB in 61,922 files.
6,200,332 KB are available.

4,096 bytes in each allocation unit.
2,086,371 total allocation units on disk.
1,550,083 allocation units available on disk.

****

I have tried this when AGV ( antivirus ) is running, and when is stopped
i tried 'sharing the sub-directory, then deleting the bogey file from the win98 pc
on my 2 pc network' [ but it didn't work].


***
A further note.
I think my keyboard input is set to US- English or US-Australian(if it exists).
Could i use the Alt + numeric keypad keys, say in combination with
rename command ?

I vaguely remembered something like that some years back ( i think in Win 98 ).


I had a look at the ascii characters using "character map" but couldn't find the
ascii equivalent of the square box.

I had quick look at recovery console in help.

haven't installed it yet... a little reluctant
as my system otherwise is working & i don't want
to beggar it up<grin>


thanks again & TIA any answers.

Ian C

 

[bcastner]

Please do the recovery console install:

http://support.microsoft.com/defaul...port/kb/articles/q307/6/54.asp&NoWebContent=1

And, make this edit:

http://support.microsoft.com/?kbid=310497

 

[iandoreeninvan]

Hi again,

Still working on it as i get time.

i did the recovery install.
tried to delete the file using dos commands d:....
- i forget the error.

I also tried setting group policy as per ... 310497...
I think I got tangled up.

Set up a Ianconsole1.
tried to add "group policy"

but instead i got ... local policy... ???
I think might be related to a domain setting / networking etc, which i mentioned in a different thread [ on networking ].

in IanConsole1\console root\Resultant set of policy
i get a red cross [ ie bad configuration of some
sort ]

I'm still looking and reading mmc etc, & trying to figure
it out.

When i get time i'll have to look at M/s site on policy etc.


regards,

ian C

 

[jtwine]

Sorry for the delay, I did not get any email notifications from this forum...

[1: bcastner]
Yes, I am involved: "jtwine", "JRTwine Software", "James R. Twine"... You can figure it out! I can do a quick search, but it would be better to have some kind of FAQ available, where I could post information/tips once. Oh, and I tried the NT Faq, they will not even respond to my emails! :/


[2: iandoreeninvan]
When Delete FXP Files cannot display correct tooltip information, it is usually a permissions issue. (Make sure you are using version .72 or later.)

When I said, "if this is a folder/directory, try to enter it using Delete FXP Files", I meant to double-click on it to descend into it, not to try to delete the folder/directory. Go into it and try to delete the items and/or schedule them for Delete On Reboot.

If you are getting a "The process cannot access the file because it is being used by another process" error, that means that something else is using the file or is "in" the directory. For example, if you have a Command Prompt at a certain directory, you will not be able to delete that directory because it is being "used" by the Command Prompt.

Have you made any more progress since your last post?

Lastly, are any of you involved with the management of this site?

Peace!

-=- James R. Twine.

 

[iandoreeninvan]

For bcastner
some progress ( ie lack of ) reports

Re the recovery console

Question Re Group Policy MMC snap-in.

I don't know if i've got this right.


I set up IanConsole1

shows
[Console Root Local Computer Policy Computer Configuration Windows Settings Security Settings Local Policies Security Options

I found a couple of 'Policy' entries.
(1) Recovery Console: Allow automatic administrative logon
This option currently is "disabled"
(2) Recovery Console: Allow floppy copy and access to all
files and folders
This option currently is "enabled"


...
Followed 310497....

i apparently got that bit correct because I checked the registry
key and SetCommand did have a value of 1.


I also set the environment variables to "TRUE" &
verified this by
SET<enter>

...
ran chkdsk /r - no errors reported.

I was still unable to del *.*
or RD the directory ZZZ0IanBu
or sub-directories.

I can however rename the sub-directory.

***


For jtwine

[2: iandoreeninvan]
When Delete FXP Files cannot display correct
tooltip information, it is usually a permissions
issue. (Make sure you are using version .72 or
later.)

Vers 1.2.72 of 5/04/04 ( Help | About )


When I said, "if this is a folder/directory, try
to enter it using Delete FXP Files", I meant to
double-click on it to descend into it, not to try
to delete the folder/directory. Go into it and
try to delete the items and/or schedule them for
Delete On Reboot.

[on 29 July 2004 ]

I cant schedule the item for delete on reboot
( i understand as i am using the unregistered version ).

I've created *.txt and *.bmp files indicating the error.
i'll post them to the
alt.binaries.band.in.a.box newsgroup
under subject "REQ: Bogey files of zero Bytes"


as this group doesnt appear to allow
posting, otherwise etc of binaries.


I ran recovery console.

Did chkdsk /r
... displayed checking volume etc
... then volume statistics, but did not complain about
errors.


If you are getting a "The process cannot access
the file because it is being used by another
process" error, that means that something else is
using the file or is "in" the directory. For
example, if you have a Command Prompt at a certain
directory, you will not be able to delete that
directory because it is being "used" by the
Command Prompt.

I tried running 'DelXpfiles' in
safe mode as Administrator with the same error as
in normal XP pro.
[note that the original 'Administrator' was 'Chris'.
this was the bloke who set up the computer/network
the original settings were lost because I deleted
the user 'Chris' ]


Got the same error.

I tried using RD ... etc
Created a bmp of the 'cmd' session, which i'll
also post to the newsgroup.

Have you made any more progress since your last
post?

Not really. [ ie no progress ]
The last time I tried the recovery console, I
couldn't change directories in the D: logical disk.

From memory, received 'access denied'

Lastly, are any of you involved with the
management of this site?

[ I assume you mean "tech tips".
I ( Ian ) am not!
As an aside, IanDoreenInVan is a generic email
address we used when travelling around Australia
in our 16ft 8inch caravan - house on wheels - I
understand the yanks call them RV's. I've kept
the email address as our friends/family know it
and in a vain attempt to alleviate some of the
trolls / spam. ]

Thanks again for the suggestions/assistance.

Ian C
***

 

[linney]

Staying away from the format option mentioned in your first post, have you considered the free diagnostic software offered by your drive manufacturer, it should be a bit more probing than ChkDsk.

Another piece of software (that may or may not help you)allows you to see what actually is written on the disk in machine code, cluster by cluster, whether this has any use I'll leave to your imagination.

Disk Investigator Web Page:

http://www.theabsolute.net/sware/dskinv.html