script to find and delete given files from C:\Users

Download JSON Download Python

Ratings

(0)

Release Time

02/12/2024

Downloads

223 times

Update Time

11/19/2024

Views

380 times

Share-it:

Tags

No results found.

Description
Screen Shots

RUN AS LOCALSYSTEM USER

EDIT PARAMETERS:

FileNames - give filenames that you want to find and delete in the FileNames parameter like shown below in the screenshot. type should be list.

this script has been scanned with virustotal.com and xcitium verdict cloud.

PYTHON SCRIPT FILE SHA1 VALUE - 5a217723895c1c2e97abce66dcfdf6b50d657b13

JSON FILE SHA1 VALUE - 80295c17c062283726481330528efbc62b44f4f9

Procedure's Instructions

filename = itsm.getParameter('FileNames')

import os
from subprocess import PIPE, Popen
import ctypes

class disable_file_system_redirection:
    _disable = ctypes.windll.kernel32.Wow64DisableWow64FsRedirection
    _revert = ctypes.windll.kernel32.Wow64RevertWow64FsRedirection
    def __enter__(self):
        self.old_value = ctypes.c_long()
        self.success = self._disable(ctypes.byref(self.old_value))
    def __exit__(self, type, value, traceback):
        if self.success:
            self._revert(self.old_value)
            
def ecmd(command):
    with disable_file_system_redirection():
        obj = Popen(command, shell = True, stdout = PIPE, stderr = PIPE)
    out, err = obj.communicate()
    ret=obj.returncode
    return ret,out,err

for fn in filename:
    ret,out,err = ecmd('WHERE /r C:\Users "%s"'%(fn))
    if ret==0:
        if out:
            filels = out.strip().splitlines()
            for FilePath in filels:
                os.remove(FilePath)
                print("successfully removed the file - %s"%(FilePath))
        else:
            print("couldn't find any file with the given filename - %s"%(fn))
    else:
        print("An error occured: %s"%(err))

Comments

No Comments.

script to find and delete given files from C:\Users

Comments

Leave a Comment