Re: Remove t@gged directories

From: Richard J (no_spam@please.com)
Date: 11/21/02

  • Next message: Willy Denoyette [MVP]: "Re: Help needed for COM security on .Net"
    From: "Richard J" <no_spam@please.com>
    Date: Thu, 21 Nov 2002 16:26:38 +0100
    
    

    No need. Just use Posix tools and syntax to remove them. I did it, long time
    ago, but forgot to bookmark the site where I got the info.

    a snippet from a security thread on
    http://www.der-keiler.de/Mailing-Lists/securityfocus

    gave the following (which will give u a few clues where to look for more)

    Hope it helps /Rick, Malmo University

    ***********

    As for your unopenable file, try putting the name of file in quotes:

    C:\>echo Hello > "Tagged By Ca$e"

    C:\>type "Tagged By Ca$e"
    Hello

    C:\>

    If you find other directories that contain 'weird' filenames, try DIR
    /X. This will add an addition column which provides the 8.3 name of the
    file or directory, use this name to reference your files. If the file
    names contain POSIX reserved names such as com1, prn, etc you will have
    to refer to such files using "del \\.\c:\com1" format. On a side note,
    DIR /Q will display the owner of the file/directory, this is helpful
    when trying to determine which account was compromised. (i.e.
    IUSR_<computer_name> == IIS Vuln, Administrator == IIS, SQL, etc, user1
    == weak password, etc.)
    *****************