General discussion

Locked

How to delete non-standard files names

By alaurance ·
I have a Windows 2000 server that was hacked into and have a list of non-standard file and folder names that I cannot delete. I have tried using renamer and rmdir utilites from Microsoft but these only worked on 80% of the files. The rename folders and files are taken up 6GB of space. Does anyone know of a utility or method to delete these type of files/folders?

This conversation is currently closed to new comments.

7 total posts (Page 1 of 1)  
| Thread display: Collapse - | Expand +

All Comments

Collapse -

How to delete non-standard files names

by timwalsh In reply to How to delete non-standar ...

It's possible you don't have permission to delete them (even as administrator). However, the administrator can ALWAYS take ownership of any file. Once you (as administrator) re-take ownership, you should be able to set necessary permissions to alow you to delete these files.

Collapse -

How to delete non-standard files names

by alaurance In reply to How to delete non-standar ...

Suggestion was valid just not helpful. I had already insured that the permission were set.

Collapse -

How to delete non-standard files names

by BeerMonster In reply to How to delete non-standar ...

Hi,
Renaming folders to lpt1 or com1 etc etc is an old and irritating hackers trick. There is a utility in the win2k reskit that you can use to delete them, rm.exe - the use of this tool is covered in detail at microsoft.com/technet
search for the string Q120716

hope this helps, and I hope the hackers rot in h3ll (actually that's probably doing skilled hackers a disservice - this was almost certainly a script kiddie running a set of routines, found on a website, that they neither originated nor understand)

Collapse -

How to delete non-standard files names

by alaurance In reply to How to delete non-standar ...

Thanks for the input but I had already used the Rm.exe
utility. It was not sucessful.

Collapse -

How to delete non-standard files names

by mshavrov In reply to How to delete non-standar ...

If you have files, which you can see, but can not do anything with them (like change attributes/owner/rename/etc), only way is to manually edit NTFS partition. I had the same situation and I have used "Runtime's DiskExplorer for NTFS". I can't remember, where I have found it, but you may use any search system to find "NTFS Editor". Then open NTFS partitin and go a directory where you have these files. Write down MFT# for corrupted file entry and then edit or clean this MFT record. I just filledMFT record with "zeros". Then open properties of your partition and perform error checking (scandisk). At next reboot scandisk will check your drive and report "errors fixed". After you delete last file, you may delete directory. Deleting MFS recordfor directory with bad files will not solve a problem because at next boot it will recover directory with all corrupted files inside, so, spend time and delete all files individually (sure, you may delete all files one by one and then reboot the system). This works 100%.

Good luck.

Collapse -

How to delete non-standard files names

by alaurance In reply to How to delete non-standar ...

Thanks for the input.

Collapse -

How to delete non-standard files names

by alaurance In reply to How to delete non-standar ...

This question was closed by the author

Back to Security Forum
7 total posts (Page 1 of 1)  

Related Discussions

Related Forums