1. You are viewing our forum as a guest. For full access please Register. WindowsBBS.com is completely free, paid for by advertisers and donations.

Resolved Deleting corrupt files/folders.

Discussion in 'Windows XP' started by tvhawaii, 2011/05/29.

  1. 2011/05/29
    tvhawaii

    tvhawaii Inactive Thread Starter

    Joined:
    2008/09/19
    Messages:
    12
    Likes Received:
    0
    I restored an Image (.tib file) from an older computer, from my GoFlex 500 MB USB drive, to a 'New Folder' on the C drive so I could extract windows address book. That part worked fine.
    The Image/Restore was created bySeagate's Disc Wizard (from Acronis), and when I tried to delete it, the 'New Folder' was full of hundreds of corrupt files. Windows XP Pro SP3 says, "Cannot delete xxx.xx:The file or directory is corrupt or unreadable. "
    "Unlocker" has managed to delete the New Folder with the Image and has put all of the corrupt files in a "TmpDelete" folder with 300 subfolders, each containting a corrupt file. None of these files seem to be 'System Files'.
    I've tried to delete this folder and some of the subfolders, with 'Unlocker', 'Killbox', 'Total Commander', and 'DeleteDr' with not much luck. Chk Dsk has run so many times I'm afraid I'm going to wear out the C drive.
    Any suggestions would be much appreciated.
    Thank you.
     
  2. 2011/05/29
    rsinfo

    rsinfo SuperGeek Alumni

    Joined:
    2005/12/25
    Messages:
    4,032
    Likes Received:
    172
    Have you tried to delete these folders in Safe Mode ?
     

  3. to hide this advert.

  4. 2011/05/30
    tvhawaii

    tvhawaii Inactive Thread Starter

    Joined:
    2008/09/19
    Messages:
    12
    Likes Received:
    0
    Yes, same error, "Cannot delete xxx.xx:The file or directory is corrupted and unreadable. "
    When that happens, the disc must get flagged as dirty because at the next boot, CHKDSK runs again and the following is then in the Event Viewer:

    Event Type: Information
    Event Source: Winlogon
    Event Category: None
    Event ID: 1001
    Date: 5/30/2011
    Time: 4:32:19 PM
    User: N/A
    Computer: OWNER-59E1F1502
    Description:
    Checking file system on C:
    The type of the file system is NTFS.

    One of your disks needs to be checked for consistency. You
    may cancel the disk check, but it is strongly recommended
    that you continue.
    Windows will now check the disk.
    Cleaning up 14 unused index entries from index $SII of file 0x9.
    Cleaning up 14 unused index entries from index $SDH of file 0x9.
    Cleaning up 14 unused security descriptors.
    CHKDSK is verifying Usn Journal...
    Usn Journal verification completed.

    156288320 KB total disk space.
    52520432 KB in 103793 files.
    37128 KB in 8714 indexes.
    0 KB in bad sectors.
    460356 KB in use by the system.
    65536 KB occupied by the log file.
    103270404 KB available on disk.

    4096 bytes in each allocation unit.
    39072080 total allocation units on disk.
    25817601 allocation units available on disk.

    Internal Info:
    f0 3c 05 00 85 b7 01 00 88 44 02 00 00 00 00 00 .<.......D......
    b6 00 00 00 02 00 00 00 d7 08 00 00 00 00 00 00 ................
    18 c1 53 05 00 00 00 00 f6 78 cd 45 00 00 00 00 ..S......x.E....
    bc c7 1e 2b 00 00 00 00 00 00 00 00 00 00 00 00 ...+............
    00 00 00 00 00 00 00 00 f4 de de 7f 00 00 00 00 ................
    90 8f 7a a6 00 00 00 00 80 38 07 00 71 95 01 00 ..z......8..q...
    00 00 00 00 00 c0 97 85 0c 00 00 00 0a 22 00 00 ............. "..

    Windows has finished checking your disk.
    Please wait while your computer restarts.
    For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

    >>Cleaning up 14 unused index entries from index $SII of file 0x9.
    Cleaning up 14 unused index entries from index $SDH of file 0x9.
    Cleaning up 14 unused security descriptors.<<

    This apparently doesn't have anything to do with my problem...see last post here:
    http://forums.techarena.in/windows-xp-support/792351.htm
     
  5. 2011/05/31
    rsinfo

    rsinfo SuperGeek Alumni

    Joined:
    2005/12/25
    Messages:
    4,032
    Likes Received:
    172
    Try running chkdsk /r. There could be some physical problem with the disk.

    If everything fails, download a Linux Live disk, boot from it & then try to delete the files/folders.
     
  6. 2011/06/03
    tvhawaii

    tvhawaii Inactive Thread Starter

    Joined:
    2008/09/19
    Messages:
    12
    Likes Received:
    0
    Disk appears to be fine...ran all kinds of tests and it has zero problems.
    Scandisk created these bad files and at least they are all in one 42 MB directory now... "TmpDelete ", instead of being shot-gunned all over the 16 GB Image (which has since been removed).

    I loaded an old copy of Backtrack3 I had here, and it let me use 'Files and Folders' to browse to the TmpDelete folder. It listed all the bad files and right click had a 'Delete' option, so I supposedly deleted them all, but after loading Windows again, they are all still there.<sigh>
     
  7. 2011/06/03
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    What is the EXACT path to the folder, you want to delete?
     
  8. 2011/06/03
    tvhawaii

    tvhawaii Inactive Thread Starter

    Joined:
    2008/09/19
    Messages:
    12
    Likes Received:
    0
    C:\TmpDelete

    That folder has ~220 subfolders in it, numbered 80 to 303, each with two or more folders, each of which contain two or more files, for a total of about 2800 files.
     
  9. 2011/06/03
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    Do you want to delete a whole "TmpDelete" folder?
     
  10. 2011/06/03
    tvhawaii

    tvhawaii Inactive Thread Starter

    Joined:
    2008/09/19
    Messages:
    12
    Likes Received:
    0
    Yes...it only contains corrupt files. If I try to delete anything, I get the
    "Cannot delete xxx.xx:The file or directory is corrupt or unreadable." message.
     
  11. 2011/06/03
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    Download BlitzBlank and save it to your desktop.
    Double click on Blitzblank.exe

    • Click OK at the warning (and take note of it, this is a VERY powerful tool!).
    • Click the Script tab and copy/paste the following text there:
    Code:
    DeleteFolder: 
    C:\TmpDelete
    

    • Click Execute Now. Your computer will need to reboot in order to replace the files.
    • When done, post the report created by Blitzblank.
      You can find it in the root of the drive, normally C:\
     
  12. 2011/06/03
    tvhawaii

    tvhawaii Inactive Thread Starter

    Joined:
    2008/09/19
    Messages:
    12
    Likes Received:
    0
    BlitzBlank 1.0.0.32

    File/Registry Modification Engine native application
    MoveDirectoryOnReboot: sourceDirectory = "\??\c:\tmpdelete ", destinationDirectory = "(null) ", replaceWithDummy = 0
    MoveDirectoryOnReboot: sourceDirectory = "\??\c:\tmpdelete\100 ", destinationDirectory = "(null) ", replaceWithDummy = 0
    MoveDirectoryOnReboot: sourceDirectory = "\??\c:\tmpdelete\100\LC_MESSAGES ", destinationDirectory = "(null) ", replaceWithDummy = 0
    MoveFileOnReboot: sourceFile = "\??\c:\tmpdelete\100\LC_MESSAGES\gtk20-properties.mo ", destinationFile = "(null) ", replaceWithDummy = 0
    RemoveFile: ZwDeleteFile failed: status = c0000102
    MoveDirectoryOnReboot: ProcessElement failed: status = c0000102
    MoveDirectoryOnReboot: ProcessElement failed: status = c0000102
    MoveDirectoryOnReboot: ProcessElement failed: status = c0000102
     
  13. 2011/06/04
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    Is it still there?
     
  14. 2011/06/04
    tvhawaii

    tvhawaii Inactive Thread Starter

    Joined:
    2008/09/19
    Messages:
    12
    Likes Received:
    0
    Sorry...yes, that exact folder mentioned above in the log,
    C:\TmpDelete\100\LC_MESSAGES
    Still has the files in it and the other ~220 folders are still there.
     
  15. 2011/06/04
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    According to MS, you may need to format that drive: Cannot Delete or Repair Corrupted File on NTFS Volume

    But, let's try one more thing...

    • You'll need to find your Windows XP installation disk.
    • Insert the Windows XP CD into the CD-ROM drive, then restart your computer.
    • If prompted, click any options that are required to start the computer from the CD-ROM drive.
    • When the Welcome to Setup screen appears, press R to start the Recovery Console.
    • The Recovery Console will start and ask you which Windows installation you would like to log on to.
      • If you have multiple Windows installations, it will list each one, and you would enter the number associated with the installation you would like to work on and press enter. If you have just one Windows installation, type 1 and press Enter.
    • It will then prompt you for the Administrator's password. If there is no password, simply press enter.
    • You will now be presented with a C:\Windows> prompt
    • At the comand prompt window, type:

      rd C:\TmpDelete

      Press Enter.
    • type exit to exit the command prompt and restart your computer.

    ==============================================================================================================

    If you don't have Windows CD...
    Download Windows Recovery Console: http://www.thecomputerparamedic.com/files/rc.iso
    Download, and install free Imgburn: http://www.imgburn.com/index.php?act=download
    Using Imgburn, burn rc.iso to a CD.
    Boot to the CD...let it finish loading.
    When the "Welcome to Setup" screen appears, press R to start the Recovery Console.
     
  16. 2011/06/04
    tvhawaii

    tvhawaii Inactive Thread Starter

    Joined:
    2008/09/19
    Messages:
    12
    Likes Received:
    0
    I get 'Access is denied', possibly because of running from the Recovery Console, because I have attempted to remove the directory from the Command Prompt in Windows, and because the directory isn't empty, wasn't able to.
    I could CD into the Windows directory, but couldn't CD into tmpdelete dir.(from the Recovery Console).
    Since you can't rd any folders with files in them, you have to delete the files first. I calculated it would probably take me around 20+ hours to change the attributes and delete all the files, even if it was possible.

    I would Format the drive, but I don't want to start over with installing all the applications, etc. and if I Image the drive for backup, the bad folders/files are backed up as well so will end up back where I started.

    I really do appreciate your time helping me to overcome this but I think I'll just have to live with a 42MB folder full of corrupt files.

    Aloha and mahalo,
    --Michael
     
    Last edited: 2011/06/04
  17. 2011/06/04
    Arie

    Arie Administrator Administrator Staff

    Joined:
    2001/12/27
    Messages:
    15,174
    Likes Received:
    412
    You could try some of the utilities from Hiren's BootCD.

    No, as the Microsoft article suggest, just exclude the TmpDelete directory from being included in the image...
     
  18. 2011/06/04
    rsinfo

    rsinfo SuperGeek Alumni

    Joined:
    2005/12/25
    Messages:
    4,032
    Likes Received:
    172
    Did you try to delete the folder from Linux ?
     
    tvhawaii likes this.
  19. 2011/06/04
    tvhawaii

    tvhawaii Inactive Thread Starter

    Joined:
    2008/09/19
    Messages:
    12
    Likes Received:
    0
    Hiren's BootCD has an impressive list of programs and some I'd like to try, but I can't find a link to get it. What am I missing?

    Neither of my backup Imaging solutions, Seagate DiscWizard nor EASUS ToDo Backup, have the ability to exclude anything from the Image, which I've confirmed with them...it's all or nothing.
     
  20. 2011/06/04
    tvhawaii

    tvhawaii Inactive Thread Starter

    Joined:
    2008/09/19
    Messages:
    12
    Likes Received:
    0
    Yes, the results of which were in the next post (but not clear).
    "I loaded an old copy of Backtrack3 I had here, and it let me use 'Files and Folders' to browse to the TmpDelete folder. It listed all the bad files and right click had a 'Delete' option, so I supposedly deleted them all, but after loading Windows again, they are all still there.<sigh> "
    Backtrack uses an implementation of Linux+KDE.
     
  21. 2011/06/05
    rsinfo

    rsinfo SuperGeek Alumni

    Joined:
    2005/12/25
    Messages:
    4,032
    Likes Received:
    172
    Ok. Seems to be something else.

    Boot into Linux & rename the folder instead of deleting it. Reboot into Linux & confirm that the new renamed folder is there & TmpDelete folder is NOT there. Now boot normally into Windows. If this folder is created again, it could be an indication of malware.
     

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.