Something stops me from deleting ANY files in Win XP

Viruses and worms
1

At some point on my wife’s computer something happened that stops me from deleting ANY files WHATSOEVER.

At first it looked like it happened while downloading a legitimate attachment from yahoo mail ()not opening - downloading) in Firefox browser. The attachment refused to save into “Downloads”, gave an error message.

I tried to see why it does not save. I found out I cannot delete anythhing in this dir. Then I found out I cannot delete anything anywhere.

Then I found out the IE Explorer does save files.

then I realized Firefox does not save ANYTHING from the web, and IE does.

Then I found out that using DOS CMD, whenm browsing to a file and using “del” command the file can be deleted - it is only from Windows Explorer that it cannot be.

Note: I checked, my wife IS an admin user, and sbhe IS the owner of all files.
Note 2: She can create files. She cannot delete them, or modify their names etc.

Now these were the symptoms.

Remedies: I restored Windows, and I regain the deletion rights.
Untill I used Firefox and tried to save something. I immediately got an error message (something about cannot write in this dir), and my deleting rights were gone.

I uninstalled Firefox and used IE only.
For a day all was OK.
Then my wife wanted to create a dir. to download photos from her camera. When she did it, she could not rename “new folder” into something else. I checked - same thin g again, no deletion.

Resume:

I ran at least 6 scans by 5 differen antiviruses/antispywares. I have AVAST installed and updated all this time. I used spybot, Malware bytes, SUPERAntispyware, etc.
I scoured Internet for answers - no one ever described this situation.

WHat is happening?

2

IE version?

.

3

Doesn’t sound exactly the same, but I’d try the fix linked here:
http://forum.avast.com/index.php?topic=94601.msg762216#msg762216

4

IE7.

Does not matter - happens with the recent Firefox too.

5

FF is stil uninstalled, yes? I mean, when going step-by-step with a troubleshoot project it’s sort of good to have all the info one can gather and I am just confirming you’ll be doing everything with just the IE for a bit, yes?

.

6

ManyQs:

Yes. FF is still uninstalled.
Note: I myself is a professional troubleshooter (electronics) and always follow my own golden rule: do one step at a time. Baseline is everything.

Igor:

I also thought it was not the same (it started long trime ago; Avast ve nt through some updates since), but did it just for shits and giggles.
Did not help.

7

Okey-dokey, seems the next question would be if it seems to be a particular kind of file. For example, I seem to remember a few years back there was a problem with AVI files and XP. Still, if it’s a particular kind of file, that may be something to keep in mind.

.

8

ManyQs:

as I wrote in my original post, it is EVERY SINGLE file. I cannot delete anything. Anywhere. Period.

9

Anyway, I know you wrote above about any file, but if it might have been a particular that started the problem, other than that attachment, it may have been a hint. Photos indicate a bit of size. Just checking.

Next thing I was going to offer is this list of 6 or 7 possible causes or combination of causes that Microsoft put out. It may have something of value in it. Of course, you may have read this already.

http://support.microsoft.com/kb/320081

10

Yep, I’ve read that.

None apply. They also offer using different tools, or … I cannot go through songa and dance every time I renbame anything or delete anything.
There is a central, one single reason for it, and I want to know what it may be.

PS. To answer your Q about the type of file: The file we noticed that it started with was the MS Word doc file. But then it might’ve happened before.

11

Nope, MS Word doesn’t ring any bells from my XP days.

Actually, what really is worrisome is it’s across the board, so to speak.

Sure sounds like a UAC type of situation when it happens in all configurations. But what caused the UAC to change is the key.

You might try creating a new account/user. Give the new account/user full control and view of all hidden and all that stuff I’m sure you’re familiar with.

Then see how the new account is able to handle the File System.

Problem I have right now is it’s creeping up on 2:30 in the A.M. where I live and I may not last too much longer at this work station.

But I am very sure somebody else around here can help. Well, let’s hope so.

12

Here’s a quesiton:

Where is that Max-Path parameter?

What if someone resets it to “0” (zero)? Files cannot be manipulated if tehir path exceeds the Max_Path length.

13

I’ve got this blog entry in my files, but it’s been a fair bit since anyone has asked me about MAX_PATH.

I see my notes tell me there are some references in this blog entry. Wonder if it’ll help.

http://blogs.msdn.com/b/bclteam/archive/2007/02/13/long-paths-in-net-part-1-of-3-kim-hamilton.aspx

.

14

Thanks.

No, it is not going to help much. Thing is, I need to see if someone overwrites MAX-PATH value (if it is even possible to do, maybe it is not).

I don’t think there are easy answers with Windows.

I am asking in this forum because, well, if at some point on a particular computer after (in all probability) some Internet browsing / webmail checking a problem occures and thenm after fixing, re-occurs, it is highly probable it is a some sort of malware at play.

But somehow no one ever herd of it.

And I thought here in this forum there may be some pros who at least might have an idea.
If even here everyone is clueles, I am screwed.

15

MAX_PATH is a constant, it cannot be changed by any means.
When deleting via Explorer, do you [try to] delete the file for real, or rather move it into the Recycle bin?

16

I thought deleting through the Explorer always sends the file to the Recycle bin by default.

I just changed this option (in recycle bin props) and it deletes the files.

So maybe the Recycle bin is inaccessible.

But why?

Anyway it should allow me to send the files to the Bin.

Also, it still does not allow me to rename the files/folders.

17

Have you tried making another user account to see if the symptoms are also present there?

18

No I have not.

This is what I know so far: it is not deleting I cannot do, but renaming.

if I remove the option “send to the recycle bin”, the files delete. But I cannot rename anything.
I also think sending to Bin is also, in factm renaming, and this is why it does not work.

Sow, now - what about “cannot rename anything anywhere”?

19

is it drive check? I’ve just run it; came up with nothing. Also included the search for corrupted sectors - took 40 minutes.

Why just rename?

20

Well, I found it!

I eventually thought it did not act as a malware, so I started disabling startups in my MSConfig.

After disabling WavXDocMgr everything worked.

Then I started looking for other folks having the same problem, and sure enough…

http://www-01.ibm.com/support/docview.wss?uid=nas101f505dd8a8322068625758c0065204a

I will uninstall it. It is an encryption soft, Embassy Trust Suite software by Wave Systems and is not being used on my PC.

Consider this soft a malware. I will, from now on.