navigation
a webmaster learning community
     Home    Register     Search      Help      Login    
FrontPage Alternative
Sponsors

Shopping Cart Software
Ecommerce software integrated into Frontpage, Dreamweaver and Golive templates. No monthly fees and available in ASP and PHP versions.

Website Templates
We also have a wide selection of Dreamweaver, Expression Web and Frontpage templates as well as webmaster tools and CSS layouts.

Frontpage website templates
Creative Website Templates for FrontPage, Dreamweaver, Flash, SwishMax

Search Forums
 

Advanced search
Recent Posts

 Todays Posts
 Most Active posts
 Posts since last visit
 My Recent Posts
 Mark posts read

 

anyone know what the _vti_prv ?

 
View related threads: (in this forum | in all forums)

Logged in as: Guest
Users viewing this topic: none
Printable Version 

All Forums >> Web Development >> Server Issues >> anyone know what the _vti_prv ?
Page: [1]
 
gjhdigital

 

Posts: 47
Joined: 4/7/2002
From: Hialeah FL USA
Status: offline

 
anyone know what the _vti_prv ? - 6/17/2003 14:13:56   
Anyone know how and where this comes from ?:
_vti_prv

This all of a sudden starting showing up in ALL of my websites and it pointed a directory in my c drive called " msweb" and inside that was a file named cxx.exe

Now all of the IIS services, cycle repeatedly on and off 7 to 8 times and then stays running for another 5 hours or so.

Anyone know ?

thanks
Richard Dudley

 

Posts: 668
Joined: 8/22/2002
From: Butler, PA
Status: offline

 
RE: anyone know what the _vti_prv ? - 6/17/2003 23:43:44   
All of the _vti directories are used by IIS to store information about the folders or the objects contained within them (think of vti meaning " virtual terminal information" ) or to stash some sort of functionality.

If it' s showing up now, you either upgraded server, or you changed a setting to show the hidden files and folders. It' s always been there if you' ve been using an MS server and FP.

No idea what' s up with the IIS services.

_____________________________

I need to change my avatar--the puppy is full grown now!

(in reply to gjhdigital)
Doug G

 

Posts: 1189
Joined: 12/29/2001
From: SoCal
Status: offline

 
RE: anyone know what the _vti_prv ? - 6/18/2003 1:36:04   
Take a look in your logs for a hack. This folder shouldn' t be there, afaik. Someone in a MS IIS group said they saw a new user with admin privileges added the same time this folder & file was mysteriously created on their server.

There was a recent webdav flaw published, perhaps this is a new exploit.

I have never heard of _vti_prv and I don' t think it' s a legitimate FP folder.

You might find this thread interesting

http://groups.google.com/groups?hl=en&lr=&ie=UTF-8&threadm=bt2kevg4adn3pakplhejfttvk1h6qktco6%404ax.com&rnum=2&prev=/groups%3Fhl%3Den%26lr%3D%26ie%3DISO-8859-1%26q%3D_vti_prv%26sa%3DN%26tab%3Dwg

_____________________________

======
Doug G
======

(in reply to gjhdigital)
gjhdigital

 

Posts: 47
Joined: 4/7/2002
From: Hialeah FL USA
Status: offline

 
RE: anyone know what the _vti_prv ? - 6/18/2003 9:45:56   
Thanks Doug G,
that link you gave me is actually one of our IT guys here searching this out also !

There was a " localuser" account created on the exact time that folder was created and no one here created that localuser account so I' m pretty sure it was a hack job.

So far there' s nothing out there on this _vti_prv directory


thanks again,
Greg

(in reply to gjhdigital)
Page:   [1]

All Forums >> Web Development >> Server Issues >> anyone know what the _vti_prv ?
Page: [1]
Jump to: 1





New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts