Hola (the malicious VPN) in C: Program Files says it's open in another location when I try to manually delete it. Is it still running on my PC?

VPN
1

While just doing some tidying work in my folders I see that I still have Hola as a file in my C: drive. I removed the extensions and uninstalled the program using the audios-hola.org tutorials about a year ago when all the hubub started happening here on reddit.

Checking my browsers (Chrome and firefox) neither of them have the extension. Also when checking my programs in the Add/Remove program section of the control panel Hola does’t show up. All I have is this file.

The question I have is why is it saying the file is being used if all the parts that make it work are removed?

Also, running Windows 10.

2

Use an application like lock hunter or unlocker to find out which process has a lock on the directory. Then, find it in the task manager and right - click > open file location. From there, kill the process, delete it, then delete the folder in program Files.

3

Still in the registry as a system file?

4

I used lock hunter! It worked! thank you!

5

Even 9 years later this still helped! Thank you very much!

6

Might be. But I’ve found since Vista, Windows can just lock a file or folder and I’m not too sure why. I’ve had empty folders with both view system and protected enabled so I knew nothing was in it, and it would stay locked. It’s far from common, but it just seems to happen.

7

I am not sure exactly where the registry is or how to observe it.

Right clicking the file and selecting properties tells me the type is a file folder.

8

Sounds like a job for Safe Mode and Unlocker.

Goodbye!

9

It’s a big database that has all the information windows and many installed program/app needs to be able to function together. It set’s folder attributes, locations, and a lot more.

https://en.wikipedia.org/wiki/Windows_Registry

While it could have some bearing on a file/folder being locked, I’m more inclined to think Windows locking files/folders that shouldn’t be is more hiccups in protocols meant to protect the NTFS so you don’t end up with a corrupt file system.

10

whoa, dude, not taking your pills?

11

I don’t like no locked folder myself.

12

Okay. I’ll take it from your last response structure that your ESL which explains the “Goodbye!”. Just a FYI if you weren’t ESL the post before your last one would come off as a bit dismissive and aggressive due to the exclamation point.

https://en.wikipedia.org/wiki/Exclamation_mark

13

TIL:ESL

But the exclamation is pointed at the FR$%^# folder that WILL DIE!

14

Got ya, lol, my mistake.