DonationCoder.com Software > Post New Requests Here

IDEA: File lister

<< < (2/2)

belkira:
an AHK script to list every file in the given directory and all it's sub directorys. So if you want to know every file on your C drive tell it to search C:\.
It also tells you when the file was created and last modified as well as its file size. It is setup to dump the data into an excel format for easier reading.


--- ---
;
; AutoHotkey Version: 1.x
; Language:       English
; Platform:       Win9x/NT
; Author:         A.N.Other <[email protected]>
;
; Script Function:
; Template script (you can customize this template by editing "ShellNew\Template.ahk" in your Windows folder)
;

#NoEnv ; Recommended for performance and compatibility with future AutoHotkey releases.
SendMode Input ; Recommended for new scripts due to its superior speed and reliability.
; FileDelete %A_Desktop%\%A_UserName%_Files.csv
IfNotExist, %A_Desktop%\%A_UserName%_Files.xls
{
FileAppend,
(
Path`tFile Name`tExtension`tTime Created`tTime Modified`tFile Size (bytes)`n
),%A_Desktop%\%A_UserName%_Files.xls
}
Else
FileList =
FileSelectFolder, SearchFolder,,0,Select the folder to scan
SearchFolder := RegExReplace(SearchFolder, "\\$")  ; Removes the trailing backslash, if present.
Loop, %SearchFolder%\*.*,, 1
    FileList = %FileList%%A_LoopFileDir%`t%A_LoopFileName%`t%A_LoopFileExt%`t%A_LoopFileTimeCreated%`t%A_LoopFileTimeModified%`t%A_LoopFileSize%`n
Sort, FileList  ; Sort by date.
Loop, parse, FileList, `n
{
    if A_LoopField =  ; Omit the last linefeed (blank item) at the end of the list.
        continue
    StringSplit, FileItem, A_LoopField, %A_Tab%  ; Split into two parts at the tab char.
    FormatTime, Created, %FileItem4%, MM/dd/yyyy ; 'at' h:mm tt
FormatTime, Modified, %FileItem5%, MM/dd/yyyy ; 'at' h:mm tt
FileAppend,
(
%FileItem1%`t%FileItem2%`t%FileItem3%`t%Created%`t%Modified%`t%FileItem6%`n
),%A_Desktop%\%A_UserName%_Files.xls

}
msgbox Done!

BinderDundat:
Looks like a winner!  I have determined that it was a false alarm, but a tool for comparing file listings (I'll let excel find the differences) is a great way to discover hidden rootkit files.  Thanks again!

PhilB66:
Check out FileMap. Also mentioned in this thread:
https://www.donationcoder.com/forum/index.php?topic=734.msg4425#msg4425

f0dder:
A simple file list isn't enough though, you'll also need to enumerate NTFS alternate streams...

Navigation

[0] Message Index

[*] Previous page