Tip: Run a free scan for common Windows errors ad

re: Undeletable files Friday, February 22, 2002 at 11:03 am Posted by Michael (2800 messages posted) Why don't you look at the security on those folders and see who has which permissions on them? That way you will know which account you are dealing with, and if you are the administrator, you can delete the account. On Friday, February 22, 2002 at 7:49 am, Jose Restrepo wrote: >hi. I have a win2000 server computer on the net and someone hacked it (that is resolved >now). This person saved a lot of files and folders and they are imposible to delete >using the normal ways (delete form terminal, ftp, explorer,etc). I think he put some >priviledges on the files so they are undeleitale even if I am the administrator. > How can I delete this files withut formatting my disk. Its there a way? > >Thanks a lot for your help. > >Jose Restrepo [Reply or follow-up to this message] re: Undeletable files Friday, February 22, 2002 at 11:09 am Posted by Jose Restrepo (2 messages posted) Yes. I did that. In fact it is a hidden user that used the FTP to put the files. We have changed the ownership of the files and we still get the error. This is something made by a hacker so I thinks is not that easy. Thnaks anyway. On Friday, February 22, 2002 at 11:03 am, Michael wrote: >Why don't you look at the security on those folders and see who has which permissions >on them? That way you will know which account you are dealing with, and if you are >the administrator, you can delete the account. > > >On Friday, February 22, 2002 at 7:49 am, Jose Restrepo wrote: >hi. I have a win2000 server computer on the net and someone hacked it (that is resolved >now). This person saved a lot of files and folders and they are imposible to delete >using the normal ways (delete form terminal, ftp, explorer,etc). I think he put >some >priviledges on the files so they are undeleitale even if I am the administrator. > How can I delete this files withut formatting my disk. Its there a way? > >Thanks a lot for your help. > >Jose Restrepo [Reply or follow-up to this message] re: Undeletable files Friday, February 22, 2002 at 12:03 pm Posted by Michael (2800 messages posted) I'm not sure if it is possible, but maybe the hacker made the account logon a member of a trusted domain? Perhaps you should check to see that there isn't another domain involved. Also, you could check out www.winternals.com for some NTFS tools. You may find something that allows you to delete the folders, but I think it may be expensive. On Friday, February 22, 2002 at 11:09 am, Jose Restrepo wrote: >Yes. I did that. In fact it is a hidden user that used the FTP to put the files. >We have changed the ownership of the files and we still get the error. This is something >made by a hacker so I thinks is not that easy. > >Thnaks anyway. > > > >On Friday, February 22, 2002 at 11:03 am, Michael wrote: >Why don't you look at the security on those folders and see who has which permissions >on them? That way you will know which account you are dealing with, and if you are >the administrator, you can delete the account. > > >On Friday, February 22, 2002 at 7:49 am, Jose Restrepo wrote: >hi. I have a win2000 server computer on the net and someone hacked it (that is resolved > >now). This person saved a lot of files and folders and they are imposible to delete > >using the normal ways (delete form terminal, ftp, explorer,etc). I think he put >some >priviledges on the files so they are undeleitale even if I am the administrator. > > How can I delete this files withut formatting my disk. Its there a way? > >Thanks a lot for your help. > >Jose Restrepo [Reply or follow-up to this message] re: Undeletable files Friday, February 22, 2002 at 2:53 pm Posted by Vipers (590 messages posted) You can find a tool for deletion on http://www.analogx.com/contents/download/system.htm And have you tried deletion from DOS, if you have NTFS get NTFSDos from www.sysinternals.com Hope this helped // Vipers On Friday, February 22, 2002 at 7:49 am, Jose Restrepo wrote: >hi. I have a win2000 server computer on the net and someone hacked it (that is resolved >now). This person saved a lot of files and folders and they are imposible to delete >using the normal ways (delete form terminal, ftp, explorer,etc). I think he put some >priviledges on the files so they are undeleitale even if I am the administrator. > How can I delete this files withut formatting my disk. Its there a way? > >Thanks a lot for your help. > >Jose Restrepo [Reply or follow-up to this message] re: Undeletable files Thursday, May 2, 2002 at 10:37 pm Posted by Kevin (2 messages posted) I have a similar issue, except that I cannot even right click the file. It shuts down the explorer with no error after a short pause. I have McAffe totally curent too. On Friday, February 22, 2002 at 7:49 am, Jose Restrepo wrote: >hi. I have a win2000 server computer on the net and someone hacked it (that is resolved >now). This person saved a lot of files and folders and they are imposible to delete >using the normal ways (delete form terminal, ftp, explorer,etc). I think he put some >priviledges on the files so they are undeleitale even if I am the administrator. > How can I delete this files withut formatting my disk. Its there a way? > >Thanks a lot for your help. > >Jose Restrepo [Reply or follow-up to this message] re: Undeletable files Saturday, May 4, 2002 at 10:08 pm Posted by Ken Greer (2 messages posted) My WEB server's been hacked too. The hacker left a lot of files and directories with French phrases that are undeletable. I haven't been able to find any tools that will delete the directories this hacker left. Anyone find a solution? On Friday, February 22, 2002 at 7:49 am, Jose Restrepo wrote: >hi. I have a win2000 server computer on the net and someone hacked it (that is resolved >now). This person saved a lot of files and folders and they are imposible to delete >using the normal ways (delete form terminal, ftp, explorer,etc). I think he put some >priviledges on the files so they are undeleitale even if I am the administrator. > How can I delete this files withut formatting my disk. Its there a way? > >Thanks a lot for your help. > >Jose Restrepo [Reply or follow-up to this message] re: Undeletable files Friday, July 12, 2002 at 9:19 am Posted by Ken Greer (2 messages posted) Solution!!! Found an acticle on just this subject -> http://www.dshield.org/pipermail/list/2002-January/002508.html . Basically, in a command prompt window use DIR /x to view the files under their DOS names and delete the files by their DOS names. On Saturday, May 4, 2002 at 10:08 pm, Ken Greer wrote: > >My WEB server's been hacked too. The hacker left a lot of files and directories >with French phrases that are undeletable. I haven't been able to find any tools that >will delete the directories this hacker left. Anyone find a solution? > > [Reply or follow-up to this message] Tip: Use one of the [Reply or follow-up to this message] links above to add a message to this thread Search this forum Start a new thread on a different subject Report abuse of the forum Return to the Windows 2000 Discussion Forum