Re: FTP
From: TDM (tdm3_at_verizon.net)
Date: 03/05/04
- Next message: Steven L Umbach: "Re: Backing out Complex passwords enabled in Domain Group policy."
- Previous message: R J: "NT backup on DVD/RW ?"
- In reply to: Craig: "Re: FTP"
- Next in thread: Jeff Cochran: "Re: FTP"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Fri, 5 Mar 2004 06:26:03 -0800
A common security compromise is to use an unsecure machine
for file storage/transfer. I too guess that you have been compromised
based on what you have stated.
You mention you are going to nuke the server anyway so this may
be a moot point, but try going to a command shell. Drill down
to the folder that contains the files in question, then view the old
dos 8.3 shortname with "dir /x". Then delete the file using
the shortname. This has worked for me on occasion when the
file names have funky chars.
TDM
"Craig" <anonymous@discussions.microsoft.com> wrote in message
news:726401c40231$481e87f0$a401280a@phx.gbl...
> I don't see any 3rd party ftp programs onthere and the
> customer has no clue what even ftp means.. I tried to get
> to the ports that are open but I cannot get through to the
> server, so unless they got into the router somehow and
> changed something in there.. I don't know ?? Any help
> would be great.. BTW they (whoever put these files on
> here) are using 22 GIG or HD space for thier stuff..
> Mostly movies.. I will be hanging another drive on the
> server and copying it across to there and then formatting
> the hard drive... That is the only way I can see how to
> get rid of it..
> Again any help would be great on how someone got in.
>
> Craig
>
>
> >-----Original Message-----
> >Hi Craig,
> >
> >If the Windows FTP server is not running, it is possible
> >the customer is running a 3rd party FTP server.
> >
> >Normally, blocking port 21 from incoming traffic would
> >disable all FTP access to the computer, but it is also
> >possible that a 3rd party FTP server package could be
> >configured to listen on a different port. You can try to
> >FTP to their computer through one of the ports that is
> >still open to see if this is the case.
> >
> >As for the files you can't delete, I've had this problem
> >before, too. It happens because the filenames contain
> >characters that are filtered by Windows Explorer (most
> >commonly, a space at the end of this filename). The
> >easiest way to delete these is to use a dedicated FTP
> >client (CuteFTP, WSFTP, etc.), log into the machine, and
> >delete them with the FTP client. Barring that, you'd
> >have to write a small program that uses an OS API
> >function directly to delete the files. Another
> >possibility might be to try moving them to a floppy drive
> >with explorer, then formatting the floppy. I'm not sure
> >if that would work, but it might since Explorer lets you
> >move the files between directories.
> >
> >Hope this helps,
> >
> >- Chris
> >
> >.
> >
- Next message: Steven L Umbach: "Re: Backing out Complex passwords enabled in Domain Group policy."
- Previous message: R J: "NT backup on DVD/RW ?"
- In reply to: Craig: "Re: FTP"
- Next in thread: Jeff Cochran: "Re: FTP"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
