LinuxQuestions.org
Share your knowledge at the LQ Wiki.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie
User Name
Password
Linux - Newbie This Linux forum is for members that are new to Linux.
Just starting out and have a question? If it is not in the man pages or the how-to's this is the place!

Notices


Reply
  Search this Thread
Old 03-23-2011, 08:53 AM   #16
Robbeh
LQ Newbie
 
Registered: Mar 2011
Posts: 16

Original Poster
Rep: Reputation: 0

Hey dude, here's what I got:


5gbfree:~# find . -type f -name "peindom*" rm -f {} \;
find: paths must precede expression: rm
Usage: find [-H] [-L] [-P] [-Olevel] [-D help|tree|search|stat|rates|opt|exec] [path...] [expression]
5gbfree:~#


I'm logged in as root
 
Old 03-23-2011, 08:56 AM   #17
Robbeh
LQ Newbie
 
Registered: Mar 2011
Posts: 16

Original Poster
Rep: Reputation: 0
Here's what I got:


5gbfree:~# find . -type f -name "peindom*" rm -f {} \;
find: paths must precede expression: rm
Usage: find [-H] [-L] [-P] [-Olevel] [-D help|tree|search|stat|rates|opt|exec] [path...] [expression]
5gbfree:~#

I'm logged in as root
 
Old 03-23-2011, 08:56 AM   #18
corp769
LQ Guru
 
Registered: Apr 2005
Posts: 5,817

Rep: Reputation: 1002Reputation: 1002Reputation: 1002Reputation: 1002Reputation: 1002Reputation: 1002Reputation: 1002Reputation: 1002
Robbeh - I know this is a bit off subject, would you care if you could send me a copy of the files of the "spammer" sites? I would love to analyze them and see what they do.

Cheers,

Josh
 
Old 03-23-2011, 08:58 AM   #19
corp769
LQ Guru
 
Registered: Apr 2005
Posts: 5,817

Rep: Reputation: 1002Reputation: 1002Reputation: 1002Reputation: 1002Reputation: 1002Reputation: 1002Reputation: 1002Reputation: 1002
Quote:
Originally Posted by Robbeh View Post
Here's what I got:


5gbfree:~# find . -type f -name "peindom*" rm -f {} \;
find: paths must precede expression: rm
Usage: find [-H] [-L] [-P] [-Olevel] [-D help|tree|search|stat|rates|opt|exec] [path...] [expression]
5gbfree:~#

I'm logged in as root
You need to remove the rest of the execute commands, as such:
Code:
find . -type f -name "peindom*"
 
Old 03-23-2011, 08:59 AM   #20
Robbeh
LQ Newbie
 
Registered: Mar 2011
Posts: 16

Original Poster
Rep: Reputation: 0
Sure,

www.5GBFree.com
login: kigwa
PW: linux

Just let me know when done

---------- Post added 03-23-11 at 01:00 PM ----------

Nothing again with that latest command, I'm afraid:


5gbfree:~# find . -type f -name "peindom*"
5gbfree:~#
 
Old 03-23-2011, 09:00 AM   #21
EricTRA
LQ Guru
 
Registered: May 2009
Location: Gibraltar, Gibraltar
Distribution: Fedora 20 with Awesome WM
Posts: 6,805
Blog Entries: 1

Rep: Reputation: 1295Reputation: 1295Reputation: 1295Reputation: 1295Reputation: 1295Reputation: 1295Reputation: 1295Reputation: 1295Reputation: 1295
Hello,

You're executing the command in your home directory. Is that where the files are created? I guess not. Either change to the directory where the do get created and launch the find command or provide the full path to where they are created in it. As such:
Code:
cd <path_to_the_files>
find . -type f -name "peindom*"
or
Code:
find <path_to_the_files> -type f -name "peindom*"
Both of the commands above will list the files on your screen if any are found.
If you want to remove them, use the same command in combination with
Code:
-exec rm -f {} \;
In full:
Code:
find <path_to_the_files> -type f -name "peindom*" -exec rm -f {} \;
from anywhere on your system, or
Code:
find . -type f -name "peindom*" -exec rm -f {} \;
if you're in the directory where the files are created (or in a subdir of that one for that matter). Hope that helps.

Kind regards,

Eric
 
Old 03-23-2011, 09:02 AM   #22
Robbeh
LQ Newbie
 
Registered: Mar 2011
Posts: 16

Original Poster
Rep: Reputation: 0
The problem is I don't know where the files are - if i did know I could remove them, but there are 8,000 user accounts, each one in a different folder so it's not possible for me to go through folder by folder to check for the files.
 
Old 03-23-2011, 09:03 AM   #23
EricTRA
LQ Guru
 
Registered: May 2009
Location: Gibraltar, Gibraltar
Distribution: Fedora 20 with Awesome WM
Posts: 6,805
Blog Entries: 1

Rep: Reputation: 1295Reputation: 1295Reputation: 1295Reputation: 1295Reputation: 1295Reputation: 1295Reputation: 1295Reputation: 1295Reputation: 1295
Quote:
Originally Posted by Robbeh View Post
Sure,

www.XXXXX.com
login: XXXX
PW:XXXXX

Just let me know when done

---------- Post added 03-23-11 at 01:00 PM ----------

Nothing again with that latest command, I'm afraid:


5gbfree:~# find . -type f -name "peindom*"
5gbfree:~#
Hi Robbeh,

Bad idea to just post login credentials on a public forum. Please remove them ASAP and in the future use PM (personal message) to send private information. To do so click on the user's name and pick your choice (mail, private message).

Kind regards,

Eric

Last edited by EricTRA; 03-23-2011 at 09:08 AM.
 
Old 03-23-2011, 09:06 AM   #24
Robbeh
LQ Newbie
 
Registered: Mar 2011
Posts: 16

Original Poster
Rep: Reputation: 0
You've quoted the password so I can't remove them, but it's a site that I'm happy to be public because it's a public site which I can remove.

It seems like what I want to achieve isn't possible. Thanks all for trying to help though.
 
Old 03-23-2011, 09:06 AM   #25
EricTRA
LQ Guru
 
Registered: May 2009
Location: Gibraltar, Gibraltar
Distribution: Fedora 20 with Awesome WM
Posts: 6,805
Blog Entries: 1

Rep: Reputation: 1295Reputation: 1295Reputation: 1295Reputation: 1295Reputation: 1295Reputation: 1295Reputation: 1295Reputation: 1295Reputation: 1295
Quote:
Originally Posted by Robbeh View Post
The problem is I don't know where the files are - if i did know I could remove them, but there are 8,000 user accounts, each one in a different folder so it's not possible for me to go through folder by folder to check for the files.
Hi,

It's a website, right? Then run the command from the document root of your webserver. If your server hasn't been compromised and is set up correctly then that should take care of them. If you provide some more information about what application/webserver you're using we could provide more dedicated help.

Kind regards,

Eric
 
Old 03-23-2011, 09:06 AM   #26
corp769
LQ Guru
 
Registered: Apr 2005
Posts: 5,817

Rep: Reputation: 1002Reputation: 1002Reputation: 1002Reputation: 1002Reputation: 1002Reputation: 1002Reputation: 1002Reputation: 1002
Yes, please remove that before your server gets compromised. And as far as finding the files, navigate to the top level directory where all of the user accounts are located, and execute it there.
 
Old 03-23-2011, 09:09 AM   #27
EricTRA
LQ Guru
 
Registered: May 2009
Location: Gibraltar, Gibraltar
Distribution: Fedora 20 with Awesome WM
Posts: 6,805
Blog Entries: 1

Rep: Reputation: 1295Reputation: 1295Reputation: 1295Reputation: 1295Reputation: 1295Reputation: 1295Reputation: 1295Reputation: 1295Reputation: 1295
Hello,

Sorry about literally quoting your post including the password. In my haste to help you I forgot to 'comment' it.

Kind regards,

Eric
 
Old 03-23-2011, 09:09 AM   #28
Robbeh
LQ Newbie
 
Registered: Mar 2011
Posts: 16

Original Poster
Rep: Reputation: 0
LOL that site can't be compromised, it's a PUBLIC site. Anyway it seems to worry you all so I've deleted that website along with that username/PW.

I'm obviously not making the situation as clear as I ought for you to be able to understand it for which I apologise. There are about 8,000 sites all hosted in different folders all over the server so I can't run a command in each and every website root - as there are 8,000.

Let's just leave it - thanks though
 
Old 03-23-2011, 09:16 AM   #29
corp769
LQ Guru
 
Registered: Apr 2005
Posts: 5,817

Rep: Reputation: 1002Reputation: 1002Reputation: 1002Reputation: 1002Reputation: 1002Reputation: 1002Reputation: 1002Reputation: 1002
Quote:
Originally Posted by Robbeh View Post
LOL that site can't be compromised, it's a PUBLIC site. Anyway it seems to worry you all so I've deleted that website along with that username/PW.

I'm obviously not making the situation as clear as I ought for you to be able to understand it for which I apologise. There are about 8,000 sites all hosted in different folders all over the server so I can't run a command in each and every website root - as there are 8,000.

Let's just leave it - thanks though
Well since you have root access, giving any sort of credentials to internally access the server is bad enough for a cracker to gain the type of access needed. Trust me on that..... And public or private, it's the fact that you gave out credentials.... But back to the command - I understand that you have a lot of accounts, but I know that you will have a top level directory for each user account. You need to run the find command from that top level directory, since find searches recursively by default.
 
Old 03-23-2011, 09:20 AM   #30
Robbeh
LQ Newbie
 
Registered: Mar 2011
Posts: 16

Original Poster
Rep: Reputation: 0
I didn't post the user of any user who has access to anything other than what a member of the public has.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Need help creating a script to delete part of a filename Scorpuk Linux - Newbie 2 07-28-2008 11:19 AM
Trying to delete a filename with special characters Harry Seldon Linux - General 11 03-20-2007 02:31 PM
How to delete wierd filename from my server? DaveNET Linux - General 3 06-27-2006 02:39 PM
change uploaded files from filename.avi to filename.avi.html like www.rapidshare.de latheesan Linux - Newbie 3 06-16-2005 05:33 AM
Files delete from SAMBA server klmn1 Linux - General 2 04-17-2004 03:34 AM


All times are GMT -5. The time now is 12:36 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration