Hacked, can't delete folders/files

[Dirk-Thomas Brown]

New client had FTP enabled incorrectly has gigs of uploaded data in the ftp
root. System now secured patched etc... but forgot how to delete these
ruthless Folders/files...

Tried Del, RD and RMDIR... vaguely recall a utility I used years ago...

Anyone lead me in the right direction?

TIA
Dirk-Thomas

 

[Dirk-Thomas Brown]

Can't means I tried RD etc... I get "The directory name is invalid" The
parameter is incorrect" "The system can not find the file specified:" Yes
Dirs have reserved names like LPT1, COM1 and some folders with no name.

As mentioned I recall a utility or shareware app that took care of this.

Dirk-Thomas

 

[Ray at]

Do these files have reserved names like LPT1, etc.? If so, you can delete
them at the command prompt by entering:

del \\.\C:\PathToFiles\filename
or
rd \\.\C:\PathToDirs\DirName

Ray at home

 

[Don]

Don't know if this will help, but someone suggested this for a related
problem:


Use dir /x to get the DOS 8.3 version of the file/folder name.

Use the DOS 8.3 name to delete the offending file/folder.


Apparently special characters are sometimes used which makes direct deletion
of the offending file/folder impossible without knowing how the exact name
(i.e. including special characters) used to create it.

HTH.

Don

 

[Dirk-Thomas Brown]

As stated did that no go.

Dirk-Thomas

Do these files have reserved names like LPT1, etc.? If so, you can delete
them at the command prompt by entering:

del \\.\C:\PathToFiles\filename
or
rd \\.\C:\PathToDirs\DirName

Ray at home

 

[Dirk-Thomas Brown]

Did that also "no go" same errors as previously noted.

Dirk-Thomas

try this

http://support.microsoft.com/default.aspx?scid=kb;en-us;120716

--
Regards

"Without any doubt, the greatest human invention is the beer...
well, I know that the wheel also is a great invention,
but the wheel does not taste so well with a barbecue."

Francisco Bedolla Ramirez
Mexico City, The Most Polluted City in the World
W2K SP3

 

[Dave]

Frank,

Did you try to overwrite the huge files with a small .txt file and then
delete?

Dave

found this

Comment from tmdgod Date: 02/23/2003 09:33PM PST
We had a couple of servers that were left open to anonymous users with
write permissions enabled for the ftp server. People took advantage of the
open state of the IIS boxes and imediately started to fill the drives with
gigs and gigs of data, ranging from .mp3s to full length ripped dvds. The
directory structure was confounding, with ascii characters, blank
directories, system reserved naming, and just plain ugly hierarchy. It took
me a few days of research to finally find an easy solution of deleting these
files which could not be dealt with any conventional form of file removal. I
tried everything - even the Microsoft solution did not work for me
(suprize!).

After reading this thread (and several others) I had an Idea, tried
it, and poof - all the files and directories are gone! No need for the
tedious cd, ren, dir /x stuff that was so frustrating - and did not work.

Here's what I did:

Stopped the IIS services
Copied the APPS\POSIX directory from the Windows 2000 Resource Kit CD
to the server
renamed c:\inetpub\ftproot to c:\inetpub\crap
moved the c:\inetpub\crap directory into the POSIX directory
Opened a command prompt and executed:
C:\POSIX\rm -r crap

POOF!!! In an instant (well, not really, it deleted over 30 Gb of
data) everything was gone in that hideous directory!

from
http://www.experts-exchange.com/Operating_Systems/Win2000/Q_20442103.html


--

Francisco Bedolla
Mexico
W2k AS SP3
487286

: 18/07/2003

 

[Dirk-Thomas Brown]

Frank, thanks for the POSIX tip.

Got the POSIX tools, still will not delete. I receive the same errors, see
further up in thread.

FYI: There is NO data in the folders anymore though (that's a good thing)
but I can NOT get ride of the folders!

Any other suggestions, anyone?

Dirk-Thomas

found this

Comment from tmdgod Date: 02/23/2003 09:33PM PST
We had a couple of servers that were left open to anonymous users with
write permissions enabled for the ftp server. People took advantage of the
open state of the IIS boxes and imediately started to fill the drives with
gigs and gigs of data, ranging from .mp3s to full length ripped dvds. The
directory structure was confounding, with ascii characters, blank
directories, system reserved naming, and just plain ugly hierarchy. It took
me a few days of research to finally find an easy solution of deleting these
files which could not be dealt with any conventional form of file removal. I
tried everything - even the Microsoft solution did not work for me
(suprize!).

After reading this thread (and several others) I had an Idea, tried
it, and poof - all the files and directories are gone! No need for the
tedious cd, ren, dir /x stuff that was so frustrating - and did not work.

Here's what I did:

Stopped the IIS services
Copied the APPS\POSIX directory from the Windows 2000 Resource Kit CD
to the server
renamed c:\inetpub\ftproot to c:\inetpub\crap
moved the c:\inetpub\crap directory into the POSIX directory
Opened a command prompt and executed:
C:\POSIX\rm -r crap

POOF!!! In an instant (well, not really, it deleted over 30 Gb of
data) everything was gone in that hideous directory!

from
http://www.experts-exchange.com/Operating_Systems/Win2000/Q_20442103.html


--

Francisco Bedolla
Mexico
W2k AS SP3
487286

: 18/07/2003