RE: Fxscanner and files

["Nero, Nick" <Nick.Nero () disney com>]

I have seen this a billion times in many types of hacks.  There is a
hidden character in the file name that explorer can't see so you can't
delete it. 

Go to a cmd prompt and use the 'DIR /X' command.  This will force a
compliant 8.3 filename in the shell then just do a DEL command to delete
the file by this new 8.3 name.  As long as you have rights, that should
do it.

-----Original Message-----
From: Sanjay K. Patel [mailto:sanjay.patel () rexwire com] 
Sent: Tuesday, August 05, 2003 9:35 AM
To: security-basics () security-focus com
Subject: Fxscanner and files

We found fxscanner installed on one of our box's. The anitvirus removed
it but now there is a folder called earth that we cannot remove. We have
tried to take ownership but that still does not let us delete the
folder. The error we get is file not found while deleting.

How can we force folder removal on win2k?

SKP



------------------------------------------------------------------------
---
------------------------------------------------------------------------
----



---------------------------------------------------------------------------
----------------------------------------------------------------------------