Re: Script

From: Radoslav Dejanoviæ (radoslav.dejanovic@zagreb.hr)
Date: 08/14/01 

Message-ID: <004e01c12490$c03d7bf0$6e080b0a@glupson>
From: "Radoslav Dejanoviæ" <radoslav.dejanovic@zagreb.hr>
To: "Rich Richenberg" <rich.richenberg@peregrine.com>, <SECURITY-BASICS@securityfocus.com>
Subject: Re: Script
Date: Tue, 14 Aug 2001 09:14:26 +0200

> Does anyone have a basic C or perl script that looks for a file? I need a
> template to create check for the flcss.exe file the funlove virus leaves
on
> systems.

cd c:\
dir flcss.exe /s > c:\infected.txt
cd d:\
dir flcss.exe /s >> c:\infected.txt
cd e:\
dir flcss.exe /s >> c:\infected.txt

and so on...

this is a simple check routine, you can put it into a batch file and run it
overnight.
It will collect all directories where the file is present, together with
the size and the
timestamp. Be careful if you're running it as plain user on NT and 2000, it
won't search
trough entire directory structure (permissions!).
At the end, you'll have infected.txt file in your C: root dir, with the
results.
This one is quick, dirty and big I/O hog, so it is better to run it in a
night shift.
After you have the .txt file, you can parse it in whatever language you
like, or do it manually. :-)

Relevant Pages

  • Active Directory and Perl advice
    ... I am being asked to create a perl script to migrate AD accounts from one machine to another and also migrate their files and directory structure. ... Tim ...
    (perl.beginners)
  • Re: OT: Quick Linux question (fairly urgent)
    ... The name didn't ring a bell (people kept alt.digitser secret from me) so ... This means if I change the page template, ... one file and re-run the "make site" Perl script again. ... was this routine outputted static HTML that I could host anywhere -- ...
    (uk.games.video.misc)
  • Re: variable interpolation and file read
    ... However the contents of $line can't be known by the perl script ... create a template with placeholders in it, ... split on either side of $myvalue and then eval ... A word of advice: Before you consider taking PG's advice on *anything*, ...
    (comp.lang.perl.misc)
  • calling a server-side perl script from within VBA
    ... I need to call a server-side perl script provided by someone else from ... within my VBA code (in a Word template). ...
    (microsoft.public.word.vba.general)
  • Anyone have the perl unpack template for wtmp?
    ... I'm trying to write a perl script that will parse the contents of the wtmp ... I've looked through the utmp headers and can't quite get the unpack ... template or see what I've done wrong with my template? ...
    (comp.sys.hp.hpux)