Re: CRIME hacked web server question

From: Alan (alan@private)
Date: Mon Dec 31 2001 - 11:24:33 PST

  • Next message: Crispin Cowan: "Re: CRIME hacked web server question"

    On Monday 31 December 2001 11:53, Adam Lipson wrote:
    > I have had someone come thru and post about 3gb of files on a webserver
    > running fully patched IIS and only port 80 and ftp allowed to access it.
    
    Just running the patches is not enough to fix IIS.  You have to make sure 
    that the services are configured correctly.
    
    > The problem is the folders containing the files are names like ".   tagged
    > for nwa" and can't be deleted by windows/dos.  Does anyone know how to
    > delete these folders as I presume this may have happened to someone else on
    > the list.
    
    What file system?
    
    You could always mount the disk with a Linux recovery disc and delete them 
    using Linux.
    



    This archive was generated by hypermail 2b30 : Sun May 26 2002 - 11:38:04 PDT