Nine raccoon festival Space
Today, I went to the server and found that a website was again infected with Trojans. Because it was the website on our server in Luzhou Branch, I deleted the iframe code and gave them suggestions, today, I found someone patronizing and decided to take the whole site down to see where the problem was. When I packed it, I found that a file failed to be compressed, and the file was "PRN. asp :. jpg ", this type of file is obviously disguised as jpg files to transfer asp files, when the file upload program is that simple judgment, this method is useful, intends to change the file to asp format, you can use NotePad to check which type of horse is used. The file format cannot be modified, and direct access to notepad cannot be accessed or deleted. If you have a hard nut to crack, you will not be able to delete it!
Baidu once obtained the name prn. In Windows, the following words cannot be used to name files/folders, including: "aux" "com1" "com2" "prn" "con" and "nul" because these names belong to the device name and are equivalent to a DOS device, if we name a file with these names, Windows will mistakenly think that the file has a duplicate name, so it will prompt "cannot create a file with the same name" and so on.
Of course, there are some special ways to steal the opportunity and create a folder named by these devices. For example, we execute "md C: aux \" at the command prompt \", create a folder named aux on the C drive. Although this folder can be accessed or created, it cannot be deleted because Windows does not allow devices to be deleted in this way. In the system's view, this aux folder is a device.
So, how to delete such files/folders? You only need to enter the file path and file name correctly according to the complete UNC path format, that is, the path format of the network neighbor. For example, to delete the aux folder under drive C, run: rd/s \. c: aux, rd is the command for deleting folders at the command prompt. The/s parameter indicates deleting a specified file from all subdirectories. For example, to delete the nul.exe file in the temp folder of drive C, run del \. C: empul.exe at the command prompt.
Del \. d: *** PRN. asp :. jpg method, failed, ah, rd method, remove other jpg files, then rd once, haha, success ~~, It seems that this kid is really careful. The last time he thought that the common asp horse was killed by anti-virus software, he changed his name to prn, but still failed. Of course, why did he fail, hi ~~