Discussion Locked

Folders just appear in a server.

0 helpful
2 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

I have a Windows 2000 server which has IIS installed it contains live web pages. I keep getting random folders in the root of c: without installing anything some folders names are
. No file name (empty)
2. .tagged.
3. .tm
4. com1
5. prn.hsp.divxstation
1. .tmp
2. eps
3. h#
4. hello
5. system (size 285MB)
6. tagged

Is there something that I am overlooking?

2 replies

by lordinfidel

If your webroot is on the root drive, 10 to 1 odds you have been hacked.

Especially if you still have .htr .ida, .idq mappings.

Can we say directory traversal anyone?

If you are not sure how to secure a IIS machine let me know and I will post some guidelines that I use across the board with all of my IIS boxes.

This discussion is closed to new replies.