Posts: 3072 From: Mechanicsville VA USA Status: offline
NT4 server problem - 4/22/2003 14:37:03
Hi All,
On one of our older servers we found 1 site that somehow had allowed annonymous FTP Access. We have a small problem... It allowed someone to access site & put in some directories w/ system names & illegal names with ntfs file systems we can' t see or remove. We had removed posix as part of hardening web server.
Any suggestion on how to get files off besides backup & reinstall.
This was not a problem on any other machine or site.
Thanks Erin
_____________________________
All Hail Great Spooky - Master of the Outfront Forums. He can make you or break you.
Rian
Posts: 1960 From: Lincoln, Nebraska USA Status: offline
RE: NT4 server problem - 4/22/2003 14:54:06
quote:
ORIGINAL: erinatkins It allowed someone to access site & put in some directories w/ system names & illegal names with ntfs file systems we can' t see or remove. We had removed posix as part of hardening web server.
If you can' t see them how do you know they are there..?
RE: NT4 server problem - 4/22/2003 18:49:51
This may help. Often the symptoms you describe are from hackers that " borrow" your ftp server to distribute warez and other bad stuff.
Posts: 3072 From: Mechanicsville VA USA Status: offline
RE: NT4 server problem - 4/23/2003 8:51:45
Thanks for info - I will look into both of them.
You can tell files have been added. But when you delve down further you see com folders, etc. When we try to delete it says it is not empty - but you can' t see info.
Erin
_____________________________
All Hail Great Spooky - Master of the Outfront Forums. He can make you or break you.