Well - here's the thing. If you did in fact have some sort of TROJAN on that box - - I would recommend scrubbing the disk and building the disk back from scratch. I KNOW it's a pain, especially if you have a lot of things loaded on that box. But if you don't I guarantee you (maybe not tomorrow - maybe not until 6 months from now) you will have problems again.
The rebuild will also replace your HOSTS/LMHOSTS to the original state. That being said - - - -if you don't want to do it - - you host file simply correlates an IP address to the UNC of a box on your network The entries would look like this: 201.124.152.24 boxname 201.124.152.27 boxname 201.124.152.124 boxname Of course the IPs and names would be specific to YOUR IP range and names -- - and if you don't know - you must include the TAB SPACE between the IP and the name -----Original Message----- From: Chris J. Popp [mailto:[EMAIL PROTECTED]] Sent: Friday, December 20, 2002 12:28 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Windows 2000 TCP problem! Sorry, my typo on ETC So, how do I recreate those? And should I have that there so I can FTP and get rid of these errors? Thanks, Chris -----Original Message----- From: Craig Cerino [mailto:[EMAIL PROTECTED]] Sent: Friday, December 20, 2002 10:33 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Windows 2000 TCP problem! The ETC ( not ECT dir inside the DRIVERS folder holds your HOSTS HOSTS.SAM LMHOST LMHOSTS.SAM YES you need the directory and contents if you utilize HOSTS and LMHOSTS at all -----Original Message----- From: Chris J. Popp [mailto:[EMAIL PROTECTED]] Sent: Friday, December 20, 2002 11:27 AM To: [EMAIL PROTECTED] Subject: [ActiveDir] Windows 2000 TCP problem! I'm getting an error in a FTP program on a Windows 2000 Pro machine. Request 5 Done. StatusCode = 500 LastResponse was : '500 ESocketException: connect: WSocketResolveProto: Cannot convert protocol 'tcp'' Error = 500 (500 ESocketException: connect: WSocketResolveProto: Cannot convert protocol 'tcp') All I could find on this was that there should be a dir at winnt\system32\drivers\ect The ect dir is gone. Had a trojan horse on that system that when I removed it, removed the dir. The question is, what can be done to repair the damage? Do I just create a dir? Are there files that should be there? Do I need to remove and reinstall software? I have uninstalled and reinstalled TCP/IP to no avail. Thanks, Chris List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
