Cannot delte "filename": invalid file handle. error

[AlaDes]

I am in the process of cleaning an XP machine and have cleaned all the malware off, except one: "Web Protect". I have ran everthing I can think of in D7, but cannot delete this aggravating folder, or dll files in it, at all. Everytime I try to delete one of the dlls in the folder, I get an error that I cannot delete the file due to an invalid file handle. I have googled for days and still have not come up with a solution to deleting this folder, except to boot with Linux and delete it that way, which I would rather avoid, if possible. Any suggestions would be greatly appreciated.

For the record, I remember coming across this a couple years ago but can't for the life of me remember what I done to resolve it. Thanks!

Update:
I finally found a resolution! I hope this helps for others as well. Although I thought I had ran everything, one item I actually forgot to run was Malwarebytes. This was probably due to the fact that it was already install on the system. It actually found two services that I had manually deleted, which was responsible for not allowing me to delete the folder and files in question. I performed a custom scan and only selected the folder in question. Although Malwarebytes didn't delete these folder, it did successfully delete the services I tried to delete manually. These services are: MYOSPROTECT and pcwatch.

 

[phaZed]

Perhaps it was "fsutil reparsepoint delete <file name>" ?

http://technet.microsoft.com/en-us/library/cc785451.aspx

 

[glennd]

safe mode.
delete from the command line.
if that fails i'm recommending boot to another OS.
might still be a rogue process running that's protecting itself.

 

[phaZed]

We'll have to see what AlaDes says, but if he tried everything in D7 such as deleting the file upon reboot - then safe mode shouldn't work either.

 

[glennd]

We'll have to see what AlaDes says, but if he tried everything in D7 such as deleting the file upon reboot - then safe mode shouldn't work either.

agreed. i note that webprotect should appear in the uninstall list (add/remove programs) so should be able to do a regular uninstall. so i recommend:

1. add/remove
2. rkill
3. malwarebytes
4. hitmanpro
5. beer

 

[AlaDes]

safe mode.
delete from the command line.
if that fails i'm recommending boot to another OS.
might still be a rogue process running that's protecting itself.

Actually, I had already tried this. However, see my update. I actually missed the only scan that did matter. Usually, Adwcleaner takes care of stuff like this, bit it couldn't even delete it. Even a manual deletion of the services I mentioned in my update didn't even work. Malwarebytes rules! lol

 

[Altster]

agreed. i note that webprotect should appear in the uninstall list (add/remove programs) so should be able to do a regular uninstall. so i recommend:

1. add/remove
2. rkill
3. malwarebytes
4. hitmanpro
5. beer

I whole-heartedly vote for #5