Clarification/Follow-up by hamed on 09/14/06 4:45 pm:
i checked, but this program is not in Add/Remove list
Clarification/Follow-up by Pride_of_Alderaban on 09/18/06 12:31 pm:
Hi hamed
OK So continuing...
First:
You wrote "recently i have downloaded a file (strCodec) that is almost a virus"
PLS explain "that is almost a virus"
What do You mean by that
Either a file is a Virus or not a Virus!!!!
You said You downloaded a file. Where did You save it? The Folder Program files is assigned for Installed programs, Did You run the downloaded file or not?
-------------
Second try this...
Do exactly as described here
Nothing else...
Assuming that the folder is located in
C:Program files
1. Start/Run or Win-Key + R-Key
2. In the dialog box type: COMMAND and Click OK or press Enter
3. Enlarge the Black DOS-envoriment Window
4a. If the prompt doesn't start with C: then type C: and press Enter
The prompt now changes to C:>
4b. If the prompt start with C:
and is NOT C:>
Then type CD .. and press Enter
Repeat CD .. until prompt equals C:>
5. Type CD PROGRA~1 and press enter
(Note to get the ~1 is a two key stroke,first press ~ and then 1)
The prompt now changes to C:Progra~1>
Make sure it does...
6. type DIR /P and press enter
You should be able to see a directory named
strCodec now. If not press space bar to display one page at a time
7. Notify (Check) that strCodec is aligned with the other directories (No leading spaces)
8. Type CD strCodec and press Enter
prompt should change to
C:PROGRA~1strCodec> (Checking that this is the REAL NAME OF THE DIRECTORY)
9. Type CD .. (up one level in directory tree (back to C:PROGRA~1> ))
10 Type RMDIR STRCODEC and press enter
Now You will either get a
Access is denied
or
directory is not empty
or
NO MESSAGE (just a blank line and the prompt again... which means it has been deleted)
message telling you what has happened
11a. Most likely You will get the Access is denied message
Type ATTRIB STRCODEC and press Enter
the result will show
R C:PROGRA~1strCodec
Now type ATTRIB -R STRCODEC
Then type ATTRIB STRCODEC (to check that the read only attribute has been removed (No R anymore)
Remove any other attributes that may exist
(Just type the command ATTRIB and - sign for any attribute to remove them and the directoryname)
Now we can remove STRCODEC
11b. If You get the
The directory is not empty.
message then come back and I tell how to delete the files
12. Removing the STRCODEC
Type RMDIR STRCODEC and press Enter
.................................
Don't forget to check that it's gone by
DIR /P
------------------------------------
Now type EXIT and press Enter
Clarification/Follow-up by hamed on 09/23/06 6:41 am:
hi
actualy this is not a virus, during web surfing i wanted to download a clip but i got a message that told me my media player is not updated so i have to download new version of this program, from that website , i downloaded that program then i run that...Macafee alert that this is a trojan file in my pc but it couldnot delete that because the extention is DLL...
.
i did what u told me and at the end i've got "The directory is not empty" so what should i do now???
.
Regards
Hamed
Clarification/Follow-up by Pride_of_Alderaban on 09/24/06 8:07 pm:
Hi
Never update Windows MediaPlayer or any Player from any site that is not the origin site, (You learned it the hard way)
I suspected that it was NOT empty
To be able to remove (Delete) the directory
It must be empty or use the RD command. (See latest part of this)
While performing theese tasks You are in full control and it's obviously "dangerous"
Deleting things, so I suggest
If running Win98 then make an entire backup before continuing, If WinME or XP do a restorepoint before continuing...
OK to remove the files is very simple
And Dangerous...
There are two ways to do it, The Process can't be reversed without special software
so don't make misstakes
First Make absolutely sure that You are in the correct directory (The prompt tells You in which directory You are (Current Directory)
To see whats in the Directory Use DIR /P
To do it We are using the DEL command
You can see the syntax for it by typing
DEL /?
So either You delete each file one by one
(You need to type each filename...)
or
USE THE FOLLOWING WITH EXTREME CARE
Make sure you are in the STRCODEC directory
Type
DEL *.*
and press Enter
This will delete every file in Current Directory and ALL FILES in Subdirectories except write protected files
----------------
In Your Case You should USE the following
since You want to delete everything.
DEL /S /P *.*
and press Enter
This will delete every file in Current Directory and ALL FILES in Subdirectories regardless if write protected or not, It also prompts You for each file before deleting the file
Then You need to remove the directory itself
with the RMDIR command (Use RMDIR or RD)
to do that make sure You are in the directory tree one level above STRCODEC directory (You should see it when using the DIR command) This is the easiest way to do it(You can delete it regardless of where in the directory tree you are but then You need to specify the exact directory-path)
So if You are in the STRCODEC directory
You should go up one level by typing
CD ..
and press Enter
by using DIR /P You should find STRCODEC
--------------
to get SYNTAX for RD | RMDIR then type
RD /?
and press enter
THIS IS THE SYNTAX
Removes (deletes) a directory.
RMDIR [/S] [/Q] [drive:]path
RD [/S] [/Q] [drive:]path
/S Removes all directories and files in the specified directory
in addition to the directory itself. Used to remove a directory
tree.
/Q Quiet mode, do not ask if ok to remove a directory tree with /S
-------------------
So Being one level above the STRCODEC You don't need to specify the path
So lets do it... type
RD /S STRCODEC
This You could have done from the beginning because it removes a directory tree with it files... Yepp everything will be deleted and because You will not be prompted with files to be deleted it is the most dangerous command of them all...
So if this is not clear then You better ask before trying...
Janne alias Pride..
