My NT 4.0 sp5 BDC Server has been compromised. A group of illegal software distributors has tried to turn my IIS 4.0 ftp site into a distribution point for their pirated software. I discovered the files uploaded a few days ago and have since modified the security on the site to allow access only from local clients. Reviewing the ftp log, I find where they created the directors and uploaded the files. My problem now is I am unable to delete the folders or individual files. I receive messages from Explorer that I cannont delete the folder access is denied. If I try to delete a different folder they created I get another message stating the parameter is incorrect. Another error states that it cannot find the file specified. I have tried from the command prompt, but access is denied to any of the folders. I believe this has something to do with the naming process when the folders were created. Here is a snippet from the log: sent /com1+/scanbybigboss/tag/by/-bigboss-+/for+fred’s.t&co/mouarfff/UppedBy#Alladin#/Les+?vad?s/Les+?vad?s.r12. Any thoughts or ideas??
Thanks for any help
Ken Wolf, MCSE(NT4), MCP+I
