Re: Corrupted Directories, Intrusions, and Nimda Oh MY

From: Mike Lewinski (mikeat_private)
Date: Thu Nov 08 2001 - 21:29:54 PST

  • Next message: Dave Dittrich: "Analysis of SSH crc32 compensation attack detector exploit"

    > I have managed to get one of the
    > directories removed but the other ones contained tons of locked files,
    > weird directory structures that make the system think that the files nor
    > directory dont exist, plus permission problems... Anyone got a tool that
    > will allow me to just delete the directory and all the subdirectories
    > this stuff is in?
    
    "dir /X" will allow you to learn the MS-DOS 8.3 directory name, and then all
    other standard commands will work on it. See this:
    
    http://dshield.org/pipermail/dshield/2001-September/001447.html
    
    Mike
    
    
    ----------------------------------------------------------------------------
    This list is provided by the SecurityFocus ARIS analyzer service.
    For more information on this free incident handling, management 
    and tracking system please see: http://aris.securityfocus.com
    



    This archive was generated by hypermail 2b30 : Fri Nov 09 2001 - 08:51:13 PST