No, it's only a win 2k workstation (laptop) Mark ----- Original Message ----- From: "Jim Harrison" <jim@xxxxxxxxxxxx> To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx> Sent: Thursday, October 30, 2003 8:46 AM Subject: [isalist] Re: Offtopic, but someone might know > http://www.ISAserver.org > > This wouldn't be an FTP server, would it? > One key to being WAREZ'd is that your FTPRoot (or other FTP-serving folder) suddenly fills with really odd folder and file names. > > As William pointed out, a virus might also be your problm. > I believe it was Nimda (still in the wild, BTW) that created files in the temp folder with "`" in the name. > > Jim Harrison > MCP(NT4, W2K), A+, Network+, PCG > http://isaserver.org/Jim_Harrison/ > http://isatools.org > Read the help / books / articles! > > > On Wed, 29 Oct 2003 21:18:23 -0500 > "Mark Strangways" <strangconst@xxxxxxxxxx> wrote: > http://www.ISAserver.org > > I am noticing files that seem to appear in various folders they are always > named "~" , and with no extension. > I have in the past tried to find if they where related to a virus, but I > have found no links. > I am up to date with Norton Corporate Antivirus and it does not see any viri > (is that the correct pluralization ?). > OS is win 2000 current SP's and updates. > > Any idea's or BTDT's on this problem ? > > Thanks to all in advance, > Mark S > > > ------------------------------------------------------ > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp > ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ > ------------------------------------------------------ > Other Internet Software Marketing Sites: > Leading Network Software Directory: http://www.serverfiles.com > No.1 Exchange Server Resource Site: http://www.msexchange.org > Windows Security Resource Site: http://www.windowsecurity.com/ > Network Security Library: http://www.secinf.net/ > Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com > ------------------------------------------------------ > You are currently subscribed to this ISAserver.org Discussion List as: jim@xxxxxxxxxxxx > To unsubscribe send a blank email to $subst('Email.Unsub') > > ^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^* > > All mail from this domain is virus-scanned with RAV. > www.ravantivirus.com > > ^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^* > > > ------------------------------------------------------ > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp > ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ > ------------------------------------------------------ > Other Internet Software Marketing Sites: > Leading Network Software Directory: http://www.serverfiles.com > No.1 Exchange Server Resource Site: http://www.msexchange.org > Windows Security Resource Site: http://www.windowsecurity.com/ > Network Security Library: http://www.secinf.net/ > Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com > ------------------------------------------------------ > You are currently subscribed to this ISAserver.org Discussion List as: strangconst@xxxxxxxxxx > To unsubscribe send a blank email to $subst('Email.Unsub')