How to create malformed files/folders that cannot be deleted or even opened

Post time: 2012-12-01 20:31:18 Author: Anonymous I would like to comment
Sometimes in order to prevent users from randomly deleting directories, a lot of software also uses malformed folders, but some hackers also use this technique, so how should we use and prevent it, you can refer to the following methods.
How to make a folder cannot be deleted or even opened?

Take the example of creating an "abc." folder (note the dots in the file name, normally you cannot create a folder with a dotted file name) :

1. Go to the command prompt, switch the current working directory to drive D, and enter:

D:

Enter, then type:

md abc.. \

Return.

2. You will find a folder called "abc."

3. This folder cannot be opened or deleted by double-clicking, and it cannot be deleted in ordinary mode.

4. How do you put the documents in? You can COPY the file in with the copy command: copy file name d:/abd... /

5. How do I open this folder? Enter the full path and folder name in "Run", such as: D:\abc... \

6. How to delete it? On the CLI, switch the current working directory to disk D and enter:

rd /q /s abc.. \

Principle: With the illegal naming benefits of windows, this is a bug in the windows NT series of systems, in dos or win9x you can normally access the NT system to create such folders, but you can not create such folders. If the partition is in NTFS format, 9X is useless. Viruses use this bug to damage, ghost tools use this bug to back up gho files, it is very remarkable: ghost.exe can find such folders under DOS - compatible with the window NT bug.

Second, there is a folder that can be opened normally but cannot be deleted:

Create command:

md ”D:/abc / “

Delete command:

rd /q /s “D:/abc / “

Note: It is best to have quotation marks and Spaces, such as "D:/abc space/space".

Third, an invisible one:

Create command:

md D:/… /

Delete command:

rd /q /s D:/… /

Note: This folder is not visible in Explorer, but it is visible at the command prompt. Open mode: Run (win+r) enter D:/... /

Note: Use rd /s /q D:/... / command, less. Will delete all files on disk D! Be careful when typing commands!

Four, another can be opened normally can not be deleted through the resource manager:

Create command:

md “D:/ / “

Delete command:

rd /q /s “D:/ / “

Note: It is best to have quotation marks and Spaces, such as "D:/ space/space".

V. Supplementary note:

1. If you md abc... / Create an illegal folder like abc. Then create an abc folder in Explorer. The original abc. Can be opened. But you can't see the files inside. And you can delete the abc. Folder. But delete the abc. Folder. The original files will go to the abc folder built in the back. The abc folder will also become undeletable and cannot be opened. But if you type D:/abc under Run... / If so, you can still see the files inside. If the abc. Folder and the abc folder exist at the same time, you can give the abc. The folder is renamed abc folder. There are two abc folders at the same time. But if you delete one of these folders, after refreshing, it will still return abc. The folder. On the xp command line, it is easy to create such an indelible folder, but not in pure dos!

2, build a "without". With "." The "bug folder" of:

(1) Create a "." Folders such as:

md abc.. /

(2) Create a normal folder abc

(3) Normal method to delete folders with dots

(4) The abc folder left behind is also an ordinary method can not be opened, deleted, with the original abc. It's the same as the file, except the name doesn't look "."

3. Camouflage the "bug folder" :

(1) Create the abc. Folder

(2) The copy command copies files into the abc. Folder

(3) Generally build abc folder

(4) At this time, you can open abc. And abc, and the two folders seem to use the same disk space, the ordinary method copy into one folder, the other folder will have the same file. However, the files copied into the folder in step 2 will not be displayed.

(5) Both files can be deleted in the normal way, but no matter which one is deleted (abc. Or abc), the remaining folder (abc or abc.) and the abc created in step 1. With the same function, the ordinary method can not be opened, can not be deleted.

Therefore, you can create a "bug folder" with the same name as an ordinary folder (only the name looks the same), you can put some files you want to protect into it, from accidental deletion, and other problems.

6. Some interesting phenomena:

1. If you drag the file to the folder abc. Then, he will immediately generate an abc (folder with the same name), and dragged in the file is visible, but not seen previously used in the run type D:/abc... / Copy the file in. And, if used at run after dragging in the file type D:/abc... / Go inside and see. You can't see the files that were dragged in. After deleting one of the two folders with the same name, use D:/abc at run... / Look inside, still can't see the file dragged in.

2, we can first create a folder such as abc, and then set it as a hidden attribute, and then use the winrar software to name its folder abc... /. So far, the folder to achieve the general can not be deleted, hidden function. Then set the folder option to not show hidden files.

3, now just run in windows 2000 with abc... / Can not enter the folder, in xp can enter.

4, under the NTFS partition, the resource manager can not see this directory. Partitions must be in FAT32 format, NTFS cannot be created.

5, in fact, the partition inside the abc. File can be deleted, note that the file is not a folder. The method is as follows: Run the dir/x command to obtain the short name of the malformed file, and then run the del command to delete it.

7. A large number of malformed folders appear in some web server directoriesThen you need to pay attention to, this is the hacker left the back door procedures are inside, must be deleted, if you manually delete less can also, if thousands of files, you need to use batch delete procedures

Guard deformities file cleaning software free green edition
  • Tag: malformed file folder folder

Related article

Latest comments