Windows Server 2003 Hacked - Files Being Uploaded

Posted by jreedinc on Server Fault See other posts from Server Fault or by jreedinc
Published on 2010-04-03T06:29:34Z Indexed on 2010/04/03 6:43 UTC
Read the original article Hit count: 380

Filed under:

Blank directories are being created on my Windows Server 2003 virtual server with sub directories that are weird (for example: "88ÿ ÿ ÿÿþþ þþ13þ"). It looks like they are uploading bootlegged DVDs and pirated software. All of my bandwidth and file space is being eaten up.

Could this be a shared permissions issue? Where should I look to further investigate this?

My security permissions for the directory that is being hit are as followed: Administrators - ALL GRANTED IIS_WPG - Read & Execute, List Folder Contents, Read Internet Guest - DENY SYSTEM - ALL GRANTED Users - Read & Execute, List Folder Contents, Read

My Event Viewer is showing many Logon/Logoff with NO IP?

Windows Server 2003 Hacked - Files Being Uploaded

Posted by jreedinc on Stack Overflow See other posts from Stack Overflow or by jreedinc
Published on 2010-04-03T06:29:34Z Indexed on 2010/04/03 6:33 UTC
Read the original article Hit count: 380

Filed under:

Windows

|

server

|

2003

Blank directories are being created on my Windows Server 2003 virtual server with sub directories that are weird (for example: "88ÿ ÿ ÿÿþþ þþ13þ"). It looks like they are uploading bootlegged DVDs and pirated software. All of my bandwidth and file space is being eaten up.

Could this be a shared permissions issue? Where should I look to further investigate this?

My security permissions for the directory that is being hit are as followed: Administrators - ALL GRANTED IIS_WPG - Read & Execute, List Folder Contents, Read Internet Guest - DENY SYSTEM - ALL GRANTED Users - Read & Execute, List Folder Contents, Read

My Event Viewer is showing many Logon/Logoff with NO IP?

Developer IT