INTELLIGENT WORK FORUMS
FOR COMPUTER PROFESSIONALS

Log In

Come Join Us!

Are you a
Computer / IT professional?
Join Tek-Tips Forums!
  • Talk With Other Members
  • Be Notified Of Responses
    To Your Posts
  • Keyword Search
  • One-Click Access To Your
    Favorite Forums
  • Automated Signatures
    On Your Posts
  • Best Of All, It's Free!

*Tek-Tips's functionality depends on members receiving e-mail. By joining you are opting in to receive e-mail.

Posting Guidelines

Promoting, selling, recruiting, coursework and thesis posting is forbidden.

Jobs

Can't delete hacker placed folders / files

Can't delete hacker placed folders / files

(OP)

my ftp nt server was hacked.  a series of folders were created with files that can not be deleted.  I tried from within windows and tried delete and rmdir doc commands

RE: Can't delete hacker placed folders / files

i assume you was logged in as administrator when you tried?

RE: Can't delete hacker placed folders / files

I have the same problem with windows XP.  I am always logged on to the administrator user and I cant delete folders from my hard drive.  The only way I could delete folders is by using DOS command rmdir.  Please help me.

RE: Can't delete hacker placed folders / files

You can delete these files using NTFS. You need to delete it using its
"short name".  Try using the command DIR /X in the directory where the
file is located to get its "short name" which will be something like
"~1, see http://support.microsoft.com/default.aspx?scid=kb;EN-US;Q101654

Then delete the directory using the short name C:\del "~1
or the rmdir command

RE: Can't delete hacker placed folders / files

i was hacked also.
some one tar a bunch of files into folders like
\lpt1 \com1 \ .. etc.
you can see the full path filenames with either NT defrag
or NT Backup.
a Microsoft Support rep recommended trying
del "\\.\e:\ps2\lpt1 \com1 \junk.tar"

that did not work either.

somebody help me.  i'm still stuck.





RE: Can't delete hacker placed folders / files


Get Delete fxp files:

at http://www.jrtwine.com/

This app will delete that stuff.

KP

Red Flag This Post

Please let us know here why this post is inappropriate. Reasons such as off-topic, duplicates, flames, illegal, vulgar, or students posting their homework.

Red Flag Submitted

Thank you for helping keep Tek-Tips Forums free from inappropriate posts.
The Tek-Tips staff will check this out and take appropriate action.

Reply To This Thread

Posting in the Tek-Tips forums is a member-only feature.

Click Here to join Tek-Tips and talk with other members!

Resources

Close Box

Join Tek-Tips® Today!

Join your peers on the Internet's largest technical computer professional community.
It's easy to join and it's free.

Here's Why Members Love Tek-Tips Forums:

Register now while it's still free!

Already a member? Close this window and log in.

Join Us             Close