try this from the posted website

I guess I should tell you how to remove the folder now eh? To delete this
folder, all you have to do is open a DOS prompt and type in
"RD[spacebar]YOU[ALT + 255]SUCK". If you try to use a space instead of the
ASCII code, it will not work. You must remove the folder with the exact
manner that the folder was created. 


-Tony

-----Original Message-----
From: Schatz, Daniel [mailto:[EMAIL PROTECTED]]
Sent: Thursday, October 18, 2001 7:57 AM
To: NT 2000 Discussions
Subject: RE: Server hacked... need to get rid of a folder


Might this help you by any chance ?
http://www.littlewhitedog.com/reviews_other_00015.asp

> -----Original Message-----
> From: Phin Pope [mailto:[EMAIL PROTECTED]]
> Sent: Thursday, October 18, 2001 4:37 PM
> To: NT 2000 Discussions
> Subject: RE: Server hacked... need to get rid of a folder
> 
> 
> I have tried everything including hexediting but can't find 
> the folder name
> in the NTFS MFT... but the rest of the disk scans fine and the NTFS
> partition appears fine apparently to all disk scanning.
> 
> The filenames are not the error, the error is in the folder 
> name (i sound
> like a microsoft error message now)
> 
> There are no trojans running that the virus protection has 
> picked up and the
> system has sealed up properly after we applied our standard 
> security which
> the user refused to follow. The firewall is now blocking all 
> requests that
> come from wanadoo.fr (whose RIPE listing said "for hacking 
> problems, please
> contact [EMAIL PROTECTED]", which is comforting really!!)
> 
> We are under the impression that it was a way of getting free 
> bandwidth,
> which we then charged the client for, so we're not out of pocket!! :)
> 
> Phin
> 
> -----Original Message-----
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]]On Behalf Of Adam Smith
> Sent: 18 October 2001 15:19
> To: NT 2000 Discussions
> Subject: RE: Server hacked... need to get rid of a folder
> 
> 
> 
> > Did you try the erase /s on it?
> 
> The 'ERASE' command does not delete directories, only the files
> contained within it.
> 
> This will provide a temporary fix to the problem where the directory
> contains too much data.
> 
> If you encounter errors with ERASE not being able to read the contents
> of the directory, then the 'DEL', 'RM', 'DELTREE' and any 
> other commands
> will not be able to read it either.  This means it is a file system
> problem.
> 
> Back in the days of FAT, we used to run CHKDSK and SCANDISK 
> which would
> detect and repair corrupt file and directory entries in the FAT.  This
> is an NTFS partition, I assume.  Have you run a Scandisk to check the
> disk/FAT integrity?
> 
> Regards,
> 
> 
> 
> Adam Smith
> IT Officer
> SAGE Automation Ltd
> 
> [EMAIL PROTECTED]
> http://www.sageautomation.com
> 
> ԿԬ
> 
> 
> 
> 
> 
> ************** Email Confidentiality Clause **************
> The information contained within this email and its 
> attachments is intended
> for the named recipients only. It may contain privileged and 
> confidential
> information. If you are not the intended recipient, you must not copy,
> distribute or take any action in reliance on it. If you have 
> received this
> email in error, please return it to the originator advising 
> of the error and
> delete all copies of it from your system.
> 
> 
> 
> ------
> You are subscribed as [EMAIL PROTECTED]
> Archives: http://www.swynk.com/sitesearch/search.asp
> To unsubscribe send a blank email to [EMAIL PROTECTED]
> 
> 
> NOTE: The information contained in this e-mail is intended 
> for the named recipients only, it may be privileged and 
> confidential.  If you are not the intended recipient, you 
> must not copy distribute or take any action in reliance upon 
> it. No warranties or assurances are made in relation to the 
> safety and content of this e-mail and any attachments.  No 
> liability is accepted for any consequences arising from it.
> 
> ------
> You are subscribed as [EMAIL PROTECTED]
> Archives: http://www.swynk.com/sitesearch/search.asp
> To unsubscribe send a blank email to [EMAIL PROTECTED]
> 


"This communication is intended solely for the addressee and is confidential
and not for third party unauthorised distribution."

------
You are subscribed as [EMAIL PROTECTED]
Archives: http://www.swynk.com/sitesearch/search.asp
To unsubscribe send a blank email to [EMAIL PROTECTED]

------
You are subscribed as [email protected]
Archives: http://www.swynk.com/sitesearch/search.asp
To unsubscribe send a blank email to [EMAIL PROTECTED]

Reply via email to