I have an Internet/internet email server that the C: drive was filled with files of unknown origin. These files filled up the drive to the point that my proxy service stopped and all in and outbound Internet email stopped. The files ranged in sizefrom 25 Megs to 27 Megs. All were named with a .tfn extension, with the number changing for each of the 27 files that I found (t1f, t2f, t3f etc). I did a search on Technet using the .tfn as the search criteria and it came back with information onDenial of service. Is that what happened and if so how can I tell where the break-in came from? I saved some of the files just in case.
