Delete lpt1.css. asp or com8.index. asp files

Delete lpt1.css. asp or com8.index. asp files

Generally, files such as lpt1.css. asp or com8.index. asp are webshells created by hackers using the system to Retain file names. In Windows, the following words cannot be used to name files or folders:

Aux | prn | con | nul | com1 | com2 | com3 | com4 | com5 | com6 | com7 | com8 | com9 | lpt1 | lpt2 | lpt3 | lpt4 | lpt5 | lpt6 | lpt7 | lpt8 | lpt9
However, you can use the copy command in cmd:

D: \ wwwroot> copy rootkit. asp \. \ D: \ wwwroot \ lpt6.80sec. asp must be preceded \\.\
1 file has been copied.
D: \ wwwroot> dir

<DIR>.
<DIR> ..
42,756 aux. asp
9,083 index. asp
42,756 rootkit. asp

This type of files cannot be deleted on the graphic interface, but can only be deleted on the command line:
D: \ wwwroot> del \. \ D: \ wwwroot \ lpt6.80sec. asp
However, in IIS, such files can be successfully parsed. The principle of "undead botnets" in Webshell is here.

To delete a directory:

Delete: Enter rd x: \ your folder name .. \/s/q at the command prompt, and press Enter.

For example, D: \ wwwroot> rd/s D: \ wwwroot