The Notebook Review forums were hosted by TechTarget, who shut down them down on January 31, 2022. This static read-only archive was pulled by NBR forum users between January 20 and January 31, 2022, in an effort to make sure that the valuable technical information that had been posted on the forums is preserved. For current discussions, many NBR forum users moved over to NotebookTalk.net after the shutdown.
Problems? See this thread at archive.org.

    cant remove virus after recycle bin delete

    Discussion in 'Security and Anti-Virus Software' started by trvelbug, Dec 9, 2009.

  1. trvelbug

    trvelbug Notebook Prophet

    Reputations:
    929
    Messages:
    4,007
    Likes Received:
    40
    Trophy Points:
    116
    hi everyone
    i recently did a virus scan with my instaled avira free edition AV. it flagged a zipfile that i had previously deleted (but never installed or ran) with the tr/dldr.bzw virus/trojan.
    the thing is i deleted the zipfile ( by emptying my recycle bin) while the AV was still scanning and even after i deleted it i still saw avira continue with the scan of the deleted zipfile.
    so now the zipfile is not present in my recycle bin anymore but everytime i scan using avira it still scans $recycle bin and the deleted file is still there with the virus/trojan.
    when i complete the scan and try to delete or quarantine the file, avira tells me that the actions are not possible.
    now i read somewhere that the file may actually be deleted already but avira maybe scanning also system restore files and the file may be present there. so i deleted all my restore points and restarted and rescanned but the offending file is still there.
    what can i do to finally delete this file? do you think its a glitch with avira or could it be that the file was transferred to some temp directory when i deleted it while the AV scan was still in progress?
    i did not run this file so im sure my computer was not infected in any way but i do wanna get rid of it...
     
    trvelbug, Dec 9, 2009
    #1
  2. Baserk

    Baserk Notebook user

    Reputations:
    2,503
    Messages:
    1,794
    Likes Received:
    1
    Trophy Points:
    56
    Why not uninstall/reinstall Avira AV?
    Sounds like Avira glitched a bit indeed, probably because you deleted the zip file before the scan was finished.
     
    Baserk, Dec 9, 2009
    #2
  3. trvelbug

    trvelbug Notebook Prophet

    Reputations:
    929
    Messages:
    4,007
    Likes Received:
    40
    Trophy Points:
    116
    i was actually thinking of that but i ran windows defender and it also detected the supposedly deleted file in $recycle bin w/in some wierd named folder . sounds like avira or windows placed this file in some temp folder when i tried to delete it while the AV was still scanning.
    when i turn on view hidden files i can see it and another folder within $recycle bin.
    just wondering if i can safely delete these folder under admin.
     
    trvelbug, Dec 9, 2009
    #3
  4. Baserk

    Baserk Notebook user

    Reputations:
    2,503
    Messages:
    1,794
    Likes Received:
    1
    Trophy Points:
    56
    I think it's save to delete both folders there but why not first delete the folder with the 'trojan zip file' in it.
    Does the other folder also have a 'weird' name or is it something more understandable?
     
    Baserk, Dec 9, 2009
    #4
  5. trvelbug

    trvelbug Notebook Prophet

    Reputations:
    929
    Messages:
    4,007
    Likes Received:
    40
    Trophy Points:
    116
    both have wierd names like a jumble of letters and numbers and it really looks like a temp file but it is in the $recycle bin.
    just dont wanna mess up my system coz its new and all. but i just cant stand that virus prompt and that file was huge, so takes some time to scan through it...
     
    trvelbug, Dec 9, 2009
    #5
  6. neenee

    neenee Notebook Consultant

    Reputations:
    111
    Messages:
    296
    Likes Received:
    0
    Trophy Points:
    30
    Try running Windows Defender and Avira in Windows Safe Mode
     
    neenee, Dec 9, 2009
    #6
  7. trvelbug

    trvelbug Notebook Prophet

    Reputations:
    929
    Messages:
    4,007
    Likes Received:
    40
    Trophy Points:
    116
    thats a good idea.
    i actually tried deleting it but i couldnt.
    firstly in order to view it i had to uncheck 'hide system protected files'
    that alone makes me super wary. i then checked admin priviledges and unchecked read only but i could not even gain access to the folder contents.
    for reference this is the folder name:

    C:\$Recycle.Bin\S-1-5-21-3447795481-176223816-2641140261-500

    is it indeed a system file/folder that i cannot delete or touch??
     
    trvelbug, Dec 9, 2009
    #7
  8. trvelbug

    trvelbug Notebook Prophet

    Reputations:
    929
    Messages:
    4,007
    Likes Received:
    40
    Trophy Points:
    116
    it worked man! never thought it would...

    at first i thought it wouldnt because it gave me the same 'you dont have admin priviledges...' quote when i tried to delete the file. but when i got into win 7 nrmal mode and did a another scan the file was gone! wuhu. and it was a damn big zipfile with 350k files.

    +1 rep for you, for reminding me that sometimes the simplest solutions are the best.
     
    trvelbug, Dec 9, 2009
    #8