RE: Attacked by UNIX Rootkit
From: Scott (scott_chan@ahm.honda.com)
Date: 08/02/02
- Next message: PP: "Hacked into ftp"
- Previous message: Martin Smith: "Re: IIS Connections question"
- In reply to: Jonathan C. Bandelier: "RE: Attacked by UNIX Rootkit"
- Next in thread: Paul Lynch: "Re: Attacked by UNIX Rootkit"
- Reply: Paul Lynch: "Re: Attacked by UNIX Rootkit"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
From: "Scott" <scott_chan@ahm.honda.com> Date: Fri, 2 Aug 2002 12:59:07 -0700
Hi JonBan,
Thanks for your input. I have just tried the methods
suggested by the article. For those folders with no name,
I can take the ownership of it from Windows Explorer. Can
we do it from Command prompt? If so, what is the command
for changing ownership?
Thanks
Scott
>-----Original Message-----
>Here an extract from Evolt Website, the link
>
(http://www.evolt.org/article/Recovering_from_Anonymous_FTP
_Abuse/18/20609)
>is currently down, so I pasted that from the cache:
>
>You can't remove these files directly through Windows.
You will need to go
>through the command prompt to delete files. From the
command prompt, go to
>the affected directories. Now, and here is the trick, use
the dir command
>with the /x switch (dir /x). The /x switch is rarely
used, but it produces
>the 8.3 DOS name for every file and directory name longer
than eight
>characters (like "My Documents" shows up as "MYDOCU~1").
>
>Now that you know the name of the directory that DOS
understands, you can
>delete the directory. I've had so-so success with doing a
recursive
>directory delete (rd /S WHATEVER) as sometimes DOS will
trip over the
>subdirectories. If you cannot recursively delete the
entire directory, you
>will have to manually traverse the entire directory tree
and delete the
>contents manually (which can be very time-consuming,
depending on how much
>junk the abusers put on your server).
>
>JonBan
>
>This posting is provided "AS IS" with no warranties, and
confers no rights.
>You assume all risk for your use.
>© 2001 Microsoft Corporation. All rights reserved.
>
>.
>
- Next message: PP: "Hacked into ftp"
- Previous message: Martin Smith: "Re: IIS Connections question"
- In reply to: Jonathan C. Bandelier: "RE: Attacked by UNIX Rootkit"
- Next in thread: Paul Lynch: "Re: Attacked by UNIX Rootkit"
- Reply: Paul Lynch: "Re: Attacked by UNIX Rootkit"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|