command-line-interfacewindowswindows-server-2012
I've got a folder with two ISO files in it and I don't need them anymore, however I can't delete the folder! I am an administrator and also the owner of the files.
When I try and delete using windows explorer the files disappear, but as soon as I refresh they return!
When I try and delete with command prompt and arguments /F and /Q I get access is denied.
Any ideas?!
Most likely the attacker has set the immutable attribute on the files and directory. This is commonly done by rootkits to make cleanup more difficult.
To confirm this, try:
lsattr /_bin
To remove the immutable attribute, use:
chattr -R -i /_bin
You'll also want to clear the a and s attributes, since these may affect your ability to remove the files.
chattr -R -i -a -s /_bin
See the chattr man page for a full explanation of what all the attributes are and what they do.
Best Answer
Like said previously, your files may be in use. You can see who use which files on your server by getting in the "managament console".
To do so, right click on the "computer" icon and then click on something like "manage" (I use French OS so I may be wrong in the translation).
Once here you must go in "Shared Files" and then "Opened Files"
Plus, be sure that your .iso files aren't mounted on your server or client. I hope this will soluce your problem.
EDIT1 : Is your Windows Server 2012 running Hyper-V ? Maybe a VM or template use your *.iso