find worms that have same name *.exe with the directory ???

b-RAM · 01-11-2010, 08:25 PM

Hi all, is there any way to find and delete the worm with extension .exe files but the name is same with the directory.
Ex:
/home/master/
/home/master/master.exe
/g.xls
so that worm name is master.exe with located under directory master, as i know sometimes the sizes of bytes is different.

Need advices please,

Thank's a lot

TB0ne · 01-11-2010, 08:53 PM

Quote:

Originally Posted by b-RAM

Hi all, is there any way to find and delete the worm with extension .exe files but the name is same with the directory.
Ex:
/home/master/
/home/master/master.exe
/g.xls
so that worm name is master.exe with located under directory master, as i know sometimes the sizes of bytes is different.

Need advices please,

Thank's a lot

Read the man pages for the find and rm commands. For example, to find all .exe files under /home and delete them:

Code:

rm `find /home -name *.exe`

note those are backticks (to the left of the 1 key), not single-quotes.

PTrenholme · 01-11-2010, 09:17 PM

Can't you just ignore them? The .exe extension is meaningless on Linux and UNIX systems. (And, for what it's worth, almost any other modern operating system.)

itsbrad212 · 01-11-2010, 09:31 PM

Why would you need to bother with .exe files. Your on linux now

Read it
http://tinyurl.com/yd3sm3w

TB0ne · 01-11-2010, 10:08 PM

Quote:

Originally Posted by itsbrad212

Why would you need to bother with .exe files. Your on linux now

Read it
http://tinyurl.com/yd3sm3w

True, but the OP may be trying to eliminate them on a Samba share. The drive may be Linux, but the other systems using it may be Windows.

b-RAM · 01-11-2010, 11:54 PM

Thank's for all your replies, i had know about to find -name *.exe with the size usually i know for that worm the problem is the sizes of that worm exe files not same at all, if i just using find the exe files so the other exe files on my home directory will be wiped out by command
so i, and for TB0ne you're right it's in samba share so sometimes it's affect the windows client. ^^

Thank's a lot and need advices please. ^^

Elemecca · 01-12-2010, 12:17 AM

Searching for a file with the same name as its parent directory is rather outside the scope of the shell globs supported by 'find -name'. Find's regular expression support, however, can handle it just fine. Try the command below.

Code:

find /path/to/share -regex '.*/\([^/]+\)/\1.exe' -print0 | xargs -0 rm

Here's the breakdown of that regex:
.*    matches as much as it can of anything
/     matches a literal '/'
\(    opens a capture group
[^/]+ matches one or more characters that are not '/'
\)    closes the capture group
/     matches a literal '/'
\1    matches whatever was matched by the capture group
.exe  matches literal ".exe"

chrism01 · 01-12-2010, 12:28 AM

You do know about the

-type f

option to find ?
http://linux.die.net/man/1/find

b-RAM · 01-12-2010, 12:42 AM

Hi Chrism01, -type f is it for regular file isn't it ? (correct me if i'm wrong ^^), yeah i've used it when try to check if there's still that exe files:
find /home/* -type f -name *.exe -size 42710c -exec rm -f '{}' \;
but sometimes the sizes different so if i don't use -size i'm afraid it will be deleted all files exe on my samba share, and thank's a lot Elemecca for explaination it's very useful enlightment ^^.

Regards,
b-RAM

itsbrad212 · 01-12-2010, 03:11 PM

Quote:

Originally Posted by TB0ne

True, but the OP may be trying to eliminate them on a Samba share. The drive may be Linux, but the other systems using it may be Windows.

Ahhh. Never thought of that. How many .exe's is he looking at deleting?

chrism01 · 01-12-2010, 05:45 PM

The trick is to come up with a clear set of rules that define the list of files to be eliminated, otherwise you'd have to do it by hand. Don't think I'd use -size, but it depends what you system looks like.
You might need to write a short script, not just a one-liner.

lupusarcanus · 01-12-2010, 06:12 PM

Quote:

Originally Posted by PTrenholme

Can't you just ignore them? The .exe extension is meaningless on Linux and UNIX systems. (And, for what it's worth, almost any other modern operating system.)

HaHa. I caught that. Nice One.

MTK358 · 01-12-2010, 06:55 PM

Quote:

Originally Posted by itsbrad212

Why would you need to bother with .exe files. Your on linux now

Read it
http://tinyurl.com/yd3sm3w

Good link, but why do you use tinyurl? It doesn't let me see the real URL in the fist place, and then forces me to wait through an ad on a creepy website before I get to the page.