RE: CRIME hacked web server question

From: Adam Lipson (AdamL@private)
Date: Mon Dec 31 2001 - 13:00:22 PST

  • Next message: toby@private: "Re: CRIME hacked web server question"

    the file system is NTFS, what util should I mount this with in Linux.  I
    thought that you could only mount NTFS as read only with Linux.
    
    Thanks!
    Adam
    
    -----Original Message-----
    From: Alan [mailto:alan@private]
    Sent: Monday, December 31, 2001 11:25 AM
    To: Adam Lipson; 'crime@private'
    Subject: Re: CRIME hacked web server question
    
    
    On Monday 31 December 2001 11:53, Adam Lipson wrote:
    > I have had someone come thru and post about 3gb of files on a webserver
    > running fully patched IIS and only port 80 and ftp allowed to access it.
    
    Just running the patches is not enough to fix IIS.  You have to make sure 
    that the services are configured correctly.
    
    > The problem is the folders containing the files are names like ".   tagged
    > for nwa" and can't be deleted by windows/dos.  Does anyone know how to
    > delete these folders as I presume this may have happened to someone else
    on
    > the list.
    
    What file system?
    
    You could always mount the disk with a Linux recovery disc and delete them 
    using Linux.
    



    This archive was generated by hypermail 2b30 : Sun May 26 2002 - 11:38:07 PDT