Securom was loaded on my computer with the F.E.A.R. Demo.
All with it came 2 files,
1)ЃϵϳЅЂϿϽϯІχϯπρϯϸϹϴϴϵϾ
2)ЃϵϳЅЂϿϽϯІχϯπρϯϸϹϴϴϵϾϻϵЉ
I have already removed the Registry entry and done an advanced search for additional files and found none.
These are the only two files left and I am not allowed to delete them?!?!?!?
The are in c:/DocumentsandFolders/Dan/Securom/UserData
When I try to delete them I get this error message,
"Cannot Delete File: Cannot Read from the source file or disk."
I cannot rename them either?
Does anyone know how to delete these files?
Thx,
Dan
Crow,
My processes look good. I had 17 base processes at start up, when I installed Xp, and 17 now. I did a google search and found 1 hit about this. Seems that, even in Safemode, these files can not be deleted.
I do not think they are malicious. To me, it is the principle. I downloaded the free F.E.A.R. demo and without any notification security files were also downloaded with no means, that I know of, to remove them. I have also looked at the Securom website and found no information about how to remove thier files.
Do you know of any other means to delete files?
Thx,
Dan
THERE ARE LOTS OF 3RD PARTY CLEANING PROGRAMS NOW THAT CAN DELETE HARD TO DELETE FILES BY DOING IT IN DOS DURING THE NEXT BOOTUP, U SHOULD BE ABLE TO FIND THESE PROGRAMS USING GOOGLE
IM A NOOB TO USING FORUMS SO …
Ok, first, download Hijack This here and then scan but do not fix anything yet. Save your scan to a log file then click here to post your log into a new thread in the "hijack this logs and spyware/malware removal" forum.
Hey. I have the same problem. I went out to a dos prompt and I couldn't delete it there either. Files had a SHR attrib that I couldn't get rid of either (using attrib command). I'm been searching around the net but unable to find a solution.
If Buzzter's suggestion doesn't work you can try the following:
Open a Command Prompt window and leave it open. Close all open programs. Click Start, Run and enter TASKMGR.EXE Go to the Processes tab and End Process on Explorer.exe. Leave Task Manager open. Go back to the Command Prompt window and change to the directory the AVI (or other undeletable file) is located in. At the command prompt type DEL where is the file you wish to delete. Go back to Task Manager, click File, New Task and enter EXPLORER.EXE to restart the GUI shell. Close Task Manager.
If that fails, view the following page and follow the instructions carefully:
Thanks Happy shiner. It worked. Just an FYI tried all suggestions and the only one that worked is the DelinFile.exe
Will keep this one in my tool box. Thnaks again
Buzzter
Ok, I have had a few system "blue screen" crashes due to unknown driver conflicts that I have sent reports to ya'll on, and I think I may have just figured out what part of the problem is. I have a game called F.E.A.R. on my computer and it came with a wonderful little piriacy protection program called SecuRom (which is owned by Sony DADC) (and personally I think it's a piece of carp**). I have had these crashes since the game was installed, but didn't realize there was anything to it cause the computer is crashing when I run another game called Silent Storm (this game did NOT come with the piece of carp** piriacy protection program called SecuRom). I would say that in the last week or so I got a recent update from McAffee, and recently (within the last 3 days) I have attempted to play my Silent Storm game (I beat F.E.A.R. and so no longer play the game, but am awaiting the arival of the expansion pack soon to be released). However, when I click on the game icon for Silent Storm to start up, I get a nice little message from McAffee that it has found a "Generic RootKit.b" trojan and has deleated it for cleaning purposes. The name of this file is Fadpu16E.sys. After that message I get another message that states "Conflict with Disc Emulator Software detected. See www.securom.com/emulation for more details". Funny thing of it is though is that I am not running an emulation program or Alchol 120 or any of that other bull carp**. So, after a little research and playing around with the computer, I figure out that the SecuRom program that came with F.E.A.R. is checking EVERY game CD to see if it a pirated disc (I have NO pirated disc any where in my apartment at all!!!). If I turn off McAffee I can play my game without any problems unless of course I get that wonderful "blue screen" about the unknown device driver (and if you look at that blue screen carefully you'll see that down at the bottem it mentions a file named (hold on to your pink panties) Fabpu16E.sys (the shock and horror that must be coming to you. lol). So, being the old school programmer that I am, I can figure out that the piece of carp** piriacy program called SecuRom has a file (program) that creates Fabpu16E.sys to verify that the game you are about to play is on it's original CD. Without this file the piriacy program defaults to the conclusion that the CD is not the original one for the game and thus halts loading of the game. I can understand that the dumbasses that made this program want to protect their game. However, the program is trying to protect ALL games, if ALL games were written with this piriacy program there probably wouldn't be a problem. However, Sony (owners of SecuRom) does not own ALL of the software companies out on the market (aren't you just jumping for joy?). So their security program with the ego that it has, is not only messing up other games that it is not even written for, it's even messing up Windows (I would suggest you sue the dog carp** out of them). I have attempted to get what help I could from some of the forums about removing the SecuRom program and have done so. However, the problem still persist, which tells me that they have other files on MY computer that are not easily found and that are still doing the same stuff. I'm pissed, and you should be as well. I want the program off of my computer, I want to play my games without having to turn my virus protection programs off, and I want my windows to stop crashing.
==========================================================
This is an email that I've sent to Microsoft. I have NO services running that say SecuRom or uaservice7, I have NO files that can be located in any hidden or system folders that say SecuRom or uaservice7, and I have NO words, keys, values, data, or folders in my Registry that say SecuRom or uaservice7, and the Piece of stuff is still running. (go bunny. lol)
Interesting saga, but it's likely that your concerns will be lost at the tail end of this other Members thread.
To get assistance with removing this possible rootkit, Run and post a HJT Log over into the Malware Removal Forum. Here:
http://forums.tomcoyote.org/index.php?showforum=27
I will post an abrevated log as I got rid of everything in the log that I could identify (such as yahoo, Mcaffee, etc). However, of the files that remain none of them appear to be anything of interest. I think they are using Hacker tactics for their software to prevent people from removing it and I think that it's illegal.
✨ Ask AI
AI can make mistakes. Check the cited posts. Archived advice can be out-of-date
Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI
Unfortunately it didn't work for me either.
Dan