[HLUG] help

[John Hedges]

On Tue, Feb 07, 2006 at 12:36:34AM +0000, David Shorthouse wrote:
> Hello all I have an issue were someone has logged onto my ftp server.
> 
> I dont normally have it running outside my router but forgot to turn it off...
> 
> 15:23:46 85.14.64.86 [3]USER anonymous 331
> 15:23:46 85.14.64.86 [3]PASS billgates at microsoft.com 230
> 15:23:46 85.14.64.86 [3]MKD /++++++/+ 257
> 15:23:46 85.14.64.86 [3]MKD /++++++/+++++++com/+ 257
> 15:23:46 85.14.64.86 [3]MKD /++++++/+++++++com/+++scan+by+swteam+++/+ 257 
> 15:23:46 85.14.64.86 
> [3]MKD /++++++/+++++++com/+++scan+by+swteam+++/+++tagg+by+swteam+++/+ 257
> 15:23:47 85.14.64.86 
> [3]MKD /++++++/+++++++com/+++scan+by+swteam+++/+++tagg+by+swteam+++/+++for+swteam+++/+ 
> 257 
> 15:23:47 85.14.64.86 
> [3]MKD /++++++/+++++++com/+++scan+by+swteam+++/+++tagg+by+swteam+++/+++for+swteam+++/here 
> 257
> 18:02:51 85.14.64.86 [4]USER anonymous 331 
> 18:02:51 85.14.64.86 [4]PASS billgates at microsoft.com 230
> 18:02:59 85.14.64.86 [4]created [test] 226
>  18:02:59 85.14.64.86 [4]RNFR [test] 350
> 18:02:59 85.14.64.86 [4]RNTO [test]+/+/ 250
> 18:03:10 85.14.64.86 
> [4]sent /++++++/+++++++com/+++scan+by+swteam+++/+++tagg+by+swteam+++/+++for+swteam+++/here/[test]+ 
> 226 
> 
> The Problem i have is i cant delete [test] & I cant delete any of the 
> directories... this is on a windoz machine... Any one know how I can revert 
> this back.. so i can delete the dir... I have tried putting in a linux live 
> disk to delete the dir but it wont have it... HELP!!! any one have experience 
> with FTP raw commands?
> 
> Cheers
> 
> Dave
> Just to let you know I am aware this happened because I had everybody has full 
> rights on the ftp directory... FIXED

Hi Dave

Did you escape the characters in the file/directory names using the live
disc - something like 

# rm -rf \+\+\+\+\+\+

or

# rm \[test]\

The same might work with ftp clients - not sure though.

Cheers

John