General discussion

Locked

IIIS Breach

By Vick Vega ·
Does any one encoutered a problem where on the IIS server been uploaded a lot of files because "Anonymous" can write to the default directory.
The question is HOW to remove those files if I have phisycal access to the IIS server?????

This conversation is currently closed to new comments.

4 total posts (Page 1 of 1)  
| Thread display: Collapse - | Expand +

All Comments

Collapse -

IIIS Breach

by mshavrov In reply to IIIS Breach

What is the problem? Stop IIS service (MMC Console or Services), start Windows Explorer, find directory named InetPub on C: or drive and delete these files. Another question is if your files is locked or in use (in case of virus). In this case you should close all applications, stop all Services you can (in Control Panel) and then try to delete files. Also you may need to install Antivirus software on this machine.
In worth case you should copy REQUIRED files to another partition (or to another server) and reformat this partition in Disk Administrator.

Good luck.

Collapse -

IIIS Breach

by Vick Vega In reply to IIIS Breach

I receive access denied error for any action I'm trying to do with the files.

Collapse -

IIIS Breach

by mshavrov In reply to IIIS Breach

I will repeat my suggestions with some "extensons": 1. Stop all IIS services. 2. Take ownership on these files 3. Check / Modify access rights 4. Try to delete it 5. If not successfull try to stop service "Protected Storage" and try to delete again.In this condition (when this service is stopped) system removes all locks from files.

Good luck.

Collapse -

IIIS Breach

by Vick Vega In reply to IIIS Breach

I receive access denied error for any action I'm trying to do with the files.
- Even taking ownership.
The message sais : Can't read from disk.

Any chkdsk and such didn't helped.

Back to Security Forum
4 total posts (Page 1 of 1)  

Related Discussions

Related Forums