Welcome to Smokey's Security Forums.
Guests have only limited access to the board and it's features, please consider registering to gain full access!
Registration is free and it only takes a few moments to complete.

Smokey's Security Forums

Please login or register.

Login with username, password and session length
Advanced search  

News:

Guests now allowed to post for Malware Removal help.

There are a few rules governing this, so please check the link below for more information:

   Guests allowed to post for Malware Removal help

OTL Log Analysis and Malware Removal - Qualified PC Disinfection & Cleaning - Microsoft Security Info & Alert Center - Official Jetico Inc. Support Forums

Share this topic on FacebookShare this topic on MySpaceShare this topic on Del.icio.usShare this topic on DiggShare this topic on RedditShare this topic on StumbleUponShare this topic on TwitterAuthorTopic: Cannot delete BCArchive file after creating it  (Read 461 times)

0 Members and 1 Guest are viewing this topic.

thesecretmanTopic starter

  • Member
  • *
  • Offline Offline
  • Posts: 4
Re: Cannot delete BCArchive file after creating it
« Reply #7 on: November 30, 2009, 03:47:41 PM »
Incredible! Simply incredible it had to be THIS easy!

Thanks alot man  :)

Jetico

  • Jetico Support Engineer
  • *
  • Offline Offline
  • Posts: 611
Re: Cannot delete BCArchive file after creating it
« Reply #6 on: November 26, 2009, 01:48:46 PM »
Please open BC Control Panel ('as administrator', if you are running Windows 7 or Vista) and disable Container Guard utility using the toolbar button or the command in Utilities menu.

thesecretmanTopic starter

  • Member
  • *
  • Offline Offline
  • Posts: 4
Re: Cannot delete BCArchive file after creating it
« Reply #5 on: November 26, 2009, 01:44:27 PM »
My bad, it looks like I have the entire package installed yes. I have the Best Crypt container program running as well.

I tried shutting down the process but little did it do. Something somewhere is making the BCArchive files impossible to delete. Something in the system is using them, but I cant seem to figuere out what that could be.

What is the process name of the container guard? I can run some other utility programs to scan all active processes and maybe I can find it and shut it down.

Jetico

  • Jetico Support Engineer
  • *
  • Offline Offline
  • Posts: 611
Re: Cannot delete BCArchive file after creating it
« Reply #4 on: November 25, 2009, 06:03:43 AM »
I thought that you have installed the whole BestCrypt. I that case, Container Guard utility guards BCA  archive files as well as JBC containers.
But as you do not have BestCrypt, BCA files are not guarded. It seems there is another reason why the file is "locked by system". Have you closed the archive file before deleting?  Please try to rename the file (change extension and/or location). What about other files on the same location (TC container) - can you delete them?

As for the process "Wipe swap file", it happened for the following reason:
As I understand, you tried to use "Delete with wiping" procedure for BCA archive. This command has the option "Wipe swap file". You have this option enabled. BCWipe could not wipe the file, but it started wiping of the swap file, because the option is ON.

thesecretmanTopic starter

  • Member
  • *
  • Offline Offline
  • Posts: 4
Re: Cannot delete BCArchive file after creating it
« Reply #3 on: November 24, 2009, 04:04:40 PM »
Only those two as stand alone. I am saving the BCArchives inside a TrueCrypt container.

Jetico

  • Jetico Support Engineer
  • *
  • Offline Offline
  • Posts: 611
Re: Cannot delete BCArchive file after creating it
« Reply #2 on: November 24, 2009, 06:17:11 AM »
Have you installed the whole BestCrypt packet or BCWipe and BCArchive as standalone programs?

thesecretmanTopic starter

  • Member
  • *
  • Offline Offline
  • Posts: 4
Cannot delete BCArchive file after creating it
« Reply #1 on: November 23, 2009, 01:53:42 PM »
When I try to delete a BCArchive file it tells me I cannot do that.

Then I try a stronger approach, such as BCWipe which tells me the following:
Error code 32
Status: The file is locked by the system

If I click yes or no the BCWipe process automatically starts to wipe the Swap file???? At the same time it tells me that the file will be deleted on system startup. That is very good and everything, the problem is just that the BCArchive file is inside a container, thus it cannot be deleted as the path for it will be closed when Windows starts up.

So how do I get rid of the files, since I cannot delete them on the fly? And most importantly, why are they even in use by the system when they are only archive files?
 

* Permissions
You can't post new topics.
You can't post replies.
You can't post attachments.
You can't modify your posts.
 BBCode Enabled
Smilies Enabled
[img] Enabled
HTML Disabled


Except where otherwise stated, all content Copyright © 2006 - 2010 Smokey Services™ -- All rights reserved

Surf Smokey's with confidence: all external links in posts are checked and rated by WOT - Web of Trust
Security Knowledge-, Alert- & News Center and Comprehensive Microsoft Windows Information & Download Center
Board- and databases search functions and the download of post attachments are only available to registered board members

    


==>Think your PC is infected? Click here for OTL Log Analysis and Malware Removal Assistance<==


Smokey's Security Forums provide full qualified OTL Log Analysis & Cleaning Services
OTL (formerly OTListIt2) by OldTimer is a sophisticated, comprehensive log analysis tool to clean PCs with malicious content

Microsoft Security Info & Alert Center - most recent, real-time released Microsoft Security Bulletins, Alerts, Advisories and Vulnerabilities:
<div style="background-color: none transparent;"><a href="http://www.rsspump.com/?web_widget/rss_widget" title="rss widget">Rss widget</a></div>