As I use these types of servers or "pubs" quite a lot some other things to
look for are directories named
.
~
~tmp
com1
com2
lpt1
lpt2
aux
uploads
public
tagged
all of the above with a leading spaces as well are common
other common locations are vti_pvt_
the "tagged" directory is usually empty and is just to let other "posters"
know that this server has been claimed, 99% of the time the people doing
this never harm the server and will usually leave space on the server and
remove software and films after a while so they can replace it with newer
stuff.
I have seen many sysadmins who know about the posters and allow them to use
the server under some this allows them control the use.
PS what is the IP of your server so I can see if there is anything worth
downloading before you clear it :-) (just kidding)
Mike
----- Original Message -----
From: "Russ Porosky" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Saturday, July 28, 2001 11:22 AM
Subject: RE: [IMail Forum] Unrelated question --- !!!
> Are you running an anonymous FTP server? If so, it's being tagged by
> warez engines (most likely) as a possible dropping point for files for
> others to download from web-page links. I get this sometimes on my FTP
> server as well. I don't think there's much you can do about it other
> than disabling anonymous FTP logins.
>
> -----Original Message-----
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]] On Behalf Of Gagandeep
> Singh Sapra
> Sent: Saturday, July 28, 2001 4:01 AM
> To: [EMAIL PROTECTED]
> Subject: [IMail Forum] Unrelated question --- !!!
>
>
> I have an unrelated question, I have for the past few days seen a lot of
> directories crop up in the server, (web - iis - nt4 / sp5) which have a
> lot of compressed files in them, they usually have a directory called
> tagged followed by a subdirectory called by and something..
>
> so if you reach the end of the directory chain you get something like
>
> c:\tagged\by\xyz\for\abc\stuffed\by\steffan\...
>
> wondering if any one else has seen this phenomenon on their servers.
>
> If anyone has, please tell me what is this, I am tired of deleting the
> directories. I have norton antivirus with full patch running and can't
> find a clue..
>
> Also there are times where the directory is made in the following manner
>
> mmddyyhhmmss folled by an a for mornings (usually not seen) and p for
> pm.. most of these are these.
>
> Best regards,
>
> Gagandeep
>
>
> Please visit http://www.ipswitch.com/support/mailing-lists.html
> to be removed from this list.
>
> An Archive of this list is available at:
> http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
>
>
> Please visit http://www.ipswitch.com/support/mailing-lists.html
> to be removed from this list.
>
> An Archive of this list is available at:
> http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
>
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
