• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 135
  • Last Modified:

Hacker created some directories that cannot be deleted

Hi Everyone,
A new customer has a Windows 2000 Server machine hosting a company website. At some point in the past, someone hacked into the system and created some directories that the customer could not delete. If an attempt was made to delete them from within windows, an error "Unable to find the specified files...." would occur, even after the Hidden attribute was removed.

Through a DOS prompt I was able to remove most of the offending directories using RD /S. However their is one directory tree that this will not work for. It is structured like this (I am going from memory here): FTP\ \  \  \LPT2\LPT2 etc..

This directory is reported as being 0kb in size. In DOS, I have not been able to view or alter attributes of the folders with names made up of empty spaces, or RD /S because they don't show up. At the same time, I have not been able to remove the parent directory because it is not empty, and RD /S does not work. What to do?

All help appreciated,
Bill
0
westone
Asked:
westone
1 Solution
 
jkrCommented:
The problem is that the directories resemble "reserved names"- See http://support.microsoft.com/default.aspx?scid=kb;en-us;120716 ("How to Remove Files with Reserved Names in Windows")
0
 
westoneAuthor Commented:
Thanks, I wasn't familiar with that use of RD.
0

Featured Post

Free Tool: ZipGrep

ZipGrep is a utility that can list and search zip (.war, .ear, .jar, etc) archives for text patterns, without the need to extract the archive's contents.

One of a set of tools we're offering as a way to say thank you for being a part of the community.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now