Attacked by UNIX Rootkit

From: Scott (scott_chan@ahm.honda.com)
Date: 08/02/02 

From: "Scott" <scott_chan@ahm.honda.com>
Date: Fri, 2 Aug 2002 10:38:27 -0700

I have Win 2000 Adv Server using IIS to host multiple web
sites and a FTP server. I suspect that the server has
been attacked by Rootkit recently (Please see attached
image). Under the ftproot folder, there is a
folder "~tmp" and under that there is a folder with no
name. I can't delete those folder. May I know how to
clean Rootkit attack in Win 2000 machine? The ip address
is 208.179.174.150 and I have shut down the ftp server for
now. But I need to run FTP server in that machine in the
long run.

Thanks

Relevant Pages

  • www.CeBeans.com - new program listings - Jan 5 2009
    ... This program allows a student to use a folder on a secure remote FTP server ... You can view the files on the PocketPC ... points and next round when you knock him down and free man every round after ...
    (microsoft.public.pocketpc)
  • Re: EWF RAM, Compact Flash and log files
    ... >> What are all of the changes required to effectively run the EWF RAM ... Default Shared Documents Folder if standalone and not on a domain. ... change the default content location, not just the logfor IIS FTP Server, ... Can / should this be done without a HDD? ...
    (microsoft.public.windowsxp.embedded)
  • www.CeBeans.com - new program listings - Nov 3 2008
    ... interface for each day you have a folder on the FTP server. ... public or private folder of a secure remote FTP server. ... you knock it past him and 100 bonus and next round when you knock it past ...
    (microsoft.public.pocketpc)
  • Re: Receive Location FTP Adapter unable to delete source files
    ... Check the permissions for your user login on the Folder, ... > I had the same problem when connecting to an external FTP server. ... When they changet to use Windows Server 2000, ...
    (microsoft.public.biztalk.general)
  • Re: FTP versus a DLink DI-604 Router
    ... the folder you're trying to use must be set to Passive mode. ... > I configure my ftp Server software setting it to use this adress. ... > given to my router. ...
    (comp.security.firewalls)