Re: UTILITY TO DELETE HACKED DIRECTORY

From: Guy Lee (ghlj@bigfoot.com)
Date: 10/22/02


From: ghlj@bigfoot.com (Guy Lee)
Date: 22 Oct 2002 07:48:08 -0700


Found an easier way to delete the files/subdirs. Do the following
(assuming you're running Win2k or XP):

1) stop the FTP service
2) open a command prompt (cmd.exe)
3) change directory to the parent subdir of ftproot (default is
"inetpub")
4) type "del *.* /s/q" press enter
5) type "rd /s/q ftproot" press enter
6) type "md ftproot"

Finished.

===========================
===========================

ghlj@bigfoot.com (Guy Lee) wrote in message news:<2bb19460.0210170458.6d48399c@posting.google.com>...
> I had this happen to me and this is how I fixed it:
>
> 1) stop the FTP service
> 2) open a command prompt (cmd.exe)
> 3) change directory to the root of ftp (ftproot)
> 4) then for each directory you want to delete, do a "dir /x". This
> will show the 8.3 name and then you can either "deltree" (Windows 9x
> command) or "rm" (POSIX command) the directory.
>
> Unfortunately, you'll need to remove all child subdirectories before
> you can remove a parent.
>
> Good luck.
>
>
>
> "neo [mvp outlook]" <neo@mvps.org> wrote in message news:<O3Xt0ZHbCHA.2424@tkmsftngp09>...
> > http://support.microsoft.com/default.aspx?scid=kb;en-us;Q120716
> >
> > "Alain CAVROT" <ac1@halcyonds.com> wrote in message
> > news:5b5a01c26c4f$06c78370$2ae2c90a@phx.gbl...
> > > My server has been hacked (common) via the FTP port.
> > > OK I have secured the FTP access
> > > But directories hacked are impossible to delete
> > > Here is a sample of the directory names
> > > E:\HDSFTP\Public\ \ \ \ \ \ \ \xP \-= rE TaGgEd bY eXeQdA
> > > =- \com4\com3\com2
> > > Do someone know an utility than can access / delete that
> > > kind of dir.
> > >
> > > Thanks
> > >
> > > Alain



Relevant Pages

  • Re: ftp fails at command prompt
    ... I am having trouble with FTP service from a command prompt. ... Copyright 1985-2003 Microsoft Corp. ...
    (microsoft.public.inetserver.iis.ftp)
  • ftp fails at command prompt
    ... I am having trouble with FTP service from a command prompt. ... Copyright 1985-2003 Microsoft Corp. ...
    (microsoft.public.inetserver.iis.ftp)
  • Re: Hidden file in ftproot
    ... I couldn't delete it from the command prompt even if I ... ftproot and reformatted. ... it was, in fact, a file or a folder. ... >MS Exchange Hosting: ...
    (microsoft.public.inetserver.iis.security)
  • Re: Hidden file in ftproot
    ... > I couldn't delete it from the command prompt even if I ... > ftproot and reformatted. ... > it was, in fact, a file or a folder. ... >>MS Exchange Hosting: ...
    (microsoft.public.inetserver.iis.security)
  • Re: Hidden file in ftproot
    ... >I couldn't delete it from the command prompt even if I ... I got an access denied message. ... >ftproot and reformatted. ... Paul ...
    (microsoft.public.inetserver.iis.security)

Quantcast