dpreynolds
asked on
Illegal file names on a Windows 2000 server
I have a 2K server that was left wide open for ftp. It has now been 'hacked' and I have about 9GB space that has disappeared to files with illegal names for the files and directories. They appear to be Mac file names. I've tried a couple of utilites to rename the files so that I can delete them. There must be a better way. I once knew the dos del command that would let me delete files with a space at the end or beginning of a file or diretory name. Any ideas?
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
you can work your way back using the commands from crazyone however if your FTP directory is like mine was (full of directories with no names, symbols and some credits to the author totally about 25+ sub directories) it will be painfully time consuming. crazyone is absolutely correct about file ownership and protection.
ASKER
Good suggestion. I actually did not get to try to solution although it should have worked. I was able to delete the files by connecting to the server with a Mac client and the files could just be deleted.
We had a couple of servers that were left open to anonymous users with write permissions enabled for the ftp server. People took advantage of the open state of the IIS boxes and imediately started to fill the drives with gigs and gigs of data, ranging from .mp3s to full length ripped dvds. The directory structure was confounding, with ascii characters, blank directories, system reserved naming, and just plain ugly hierarchy. It took me a few days of research to finally find an easy solution of deleting these files which could not be dealt with any conventional form of file removal. I tried everything - even the Microsoft solution did not work for me (suprize!).
After reading this thread (and several others) I had an Idea, tried it, and poof - all the files and directories are gone! No need for the tedious cd, ren, dir /x stuff that was so frustrating - and did not work.
Here's what I did:
Stopped the IIS services
Copied the APPS\POSIX directory from the Windows 2000 Resource Kit CD to the server
renamed c:\inetpub\ftproot to c:\inetpub\crap
moved the c:\inetpub\crap directory into the POSIX directory
Opened a command prompt and executed:
C:\POSIX\rm -r crap
POOF!!! In an instant (well, not really, it deleted over 30 Gb of data) everything was gone in that hideous directory!
After reading this thread (and several others) I had an Idea, tried it, and poof - all the files and directories are gone! No need for the tedious cd, ren, dir /x stuff that was so frustrating - and did not work.
Here's what I did:
Stopped the IIS services
Copied the APPS\POSIX directory from the Windows 2000 Resource Kit CD to the server
renamed c:\inetpub\ftproot to c:\inetpub\crap
moved the c:\inetpub\crap directory into the POSIX directory
Opened a command prompt and executed:
C:\POSIX\rm -r crap
POOF!!! In an instant (well, not really, it deleted over 30 Gb of data) everything was gone in that hideous directory!
Open a CMD.EXE window.
CD to the top of the mess.
Use: DIR /X /A to see the SHORT FILE NAMES of the files and directories there.
Use a combination of CD, RD, and DEL and the SHORT FILES names reported with DIR /X to delete your way to the bottom and then back up the tree removing the files on the way down and the directories on the way up.
Most likely there is NOT a protection issue here so you shouldn't need worry about ownership or file protections.
Also
How to Remove Files with Reserved Names in Windows
http://support.microsoft.com/default.aspx?scid=kb;en-us;120716
The Crazy One