Mailing List Archive For incidents@securityfocus.com Jan 2003 By Thread

• Re: Packets from 255.255.255.255(80) (was: Packet from port 80 with spoofed microsoft.com ip) Steven Dietz (Fri Jan 31 2003 - 14:43:46 EST)
• Re: klez variant?? Nick FitzGerald (Fri Jan 31 2003 - 22:19:11 EST)
• Re: Packets from 255.255.255.255(80) (was: Packet from port 80 with spoofed microsoft.com ip) Tomasz Papszun (Fri Jan 31 2003 - 15:11:13 EST)
• ZOMBIES_HTTP_GET Kee Hinckley (Fri Jan 31 2003 - 20:46:20 EST)
• RE: klez variant?? James C Slora Jr (Fri Jan 31 2003 - 16:10:20 EST)
• The Spread of the Sapphire/Slammer Worm Nicholas Weaver (Fri Jan 31 2003 - 21:09:53 EST)
• Re: Packet from port 80 with spoofed microsoft.com ip Hulio Cortez (Fri Jan 31 2003 - 16:59:25 EST)
• Re: Packet from port 80 with spoofed microsoft.com ip Pat Wilson (Fri Jan 31 2003 - 16:42:01 EST)
• Fwd: Re: Packets from 255.255.255.255(80) (was: Packet from port 80 with spoofed microsoft.com ip) Dave Laird (Fri Jan 31 2003 - 15:57:00 EST)
• RE: Packets from 255.255.255.255(80) (was: Packet from port 80 with spoofed microsoft.com ip) Joel Tyson (Fri Jan 31 2003 - 14:38:38 EST)
• RE: Packets from 255.255.255.255(80) (was: Packet from port 80 with spoofed microsoft.com ip) David Gillett (Fri Jan 31 2003 - 14:55:46 EST)
• RE: MSDE contained in... JP Vossen (Thu Jan 30 2003 - 19:56:14 EST)
• RE: klez variant?? Stephen A. Santos (Fri Jan 31 2003 - 12:27:05 EST)
• RE: Packets from 255.255.255.255(80) (was: Packet from port 80 with spoofed microsoft.com ip) Loki (Thu Jan 30 2003 - 20:58:12 EST)
• Re: Packets from 255.255.255.255(80) (was: Packet from port 80 with spoofed microsoft.com ip) Gary Flynn (Thu Jan 30 2003 - 16:12:30 EST)
• Re: Packets from 255.255.255.255(80) (was: Packet from port 80 with spoofed microsoft.com ip) Peter Triller (Thu Jan 30 2003 - 21:01:49 EST)
• Re: Packets from 255.255.255.255(80) (was: Packet from port 80 with spoofed microsoft.com ip) Russell Fulton (Thu Jan 30 2003 - 18:45:29 EST)
• Re: Packet from port 80 with spoofed microsoft.com ip zmajd fully (Thu Jan 30 2003 - 18:52:35 EST)
• RE: Packet from port 80 with spoofed microsoft.com ip Larsen, Colin (Thu Jan 30 2003 - 15:29:17 EST)
• RE: Packets from 255.255.255.255(80) (was: Packet from port 80 with spoofed microsoft.com ip) greg(at)optionsinternet.com (Thu Jan 30 2003 - 16:29:24 EST)
• klez variant?? Peter Snell (Thu Jan 30 2003 - 13:11:25 EST)
• Re: Packet from port 80 with spoofed microsoft.com ip Kurt Seifried (Thu Jan 30 2003 - 14:34:56 EST)
• Packets from 255.255.255.255(80) (was: Packet from port 80 with spoofed microsoft.com ip) Tomasz Papszun (Thu Jan 30 2003 - 13:03:51 EST)
• Re: Firewall logging port 6346 David Hickman (Thu Jan 30 2003 - 10:40:56 EST)
• Re: Packet from port 80 with spoofed microsoft.com ip Michael Rowe (Thu Jan 30 2003 - 06:22:05 EST)
• Re: Packet from port 80 with spoofed microsoft.com ip Michael Rowe (Thu Jan 30 2003 - 06:16:43 EST)
• Re: Packet from port 80 with spoofed microsoft.com ip dr john halewood (Thu Jan 30 2003 - 13:10:29 EST)
• Re: Packet from port 80 with spoofed microsoft.com ip Michael Rowe (Thu Jan 30 2003 - 06:19:25 EST)
• Re: Packet from port 80 with spoofed microsoft.com ip Rich Puhek (Thu Jan 30 2003 - 12:20:19 EST)
• HTML email bug [was: (Fwd) hi] lsi (Thu Jan 30 2003 - 09:35:51 EST)
• Re: Firewall logging port 6346 Vestal, David (Wed Jan 29 2003 - 23:02:38 EST)
• RE: Firewall logging port 6346 Christopher Wagner (Wed Jan 29 2003 - 19:02:03 EST)
• RE: MSDE contained in... Bruce McLeod (Wed Jan 29 2003 - 19:16:17 EST)
• Re: Packet from port 80 with spoofed microsoft.com ip Keith Owens (Wed Jan 29 2003 - 22:31:36 EST)
• Re: Packet from port 80 with spoofed microsoft.com ip Valdis.Kletnieks(at)vt.edu (Wed Jan 29 2003 - 23:14:19 EST)
• RE: Packet from port 80 with spoofed microsoft.com ip NESTING, DAVID M (SBCSI) (Wed Jan 29 2003 - 15:11:36 EST)
• Re: Packet from port 80 with spoofed microsoft.com ip H C (Wed Jan 29 2003 - 15:01:42 EST)
• Re: Packet from port 80 with spoofed microsoft.com ip Thiago Conde Figueiró (Wed Jan 29 2003 - 12:12:01 EST)
• Firewall logging port 6346 Jos Kirps|EducDesign (Wed Jan 29 2003 - 13:21:44 EST)
• Re: Packet from port 80 with spoofed microsoft.com ip Chris Wilkes (Wed Jan 29 2003 - 12:06:13 EST)
• Re: MSDE contained in... (MS Office ? really ?) Deus, Attonbitus (Wed Jan 29 2003 - 12:06:28 EST)
• Re: Scan UDP port 135 Michael H. Warfield (Tue Jan 28 2003 - 22:18:02 EST)
• Re: Variant or original posting to packetstormsecurity - long Helmut Springer (Wed Jan 29 2003 - 11:36:37 EST)
• Re: MSDE contained in... Johan Augustsson (Wed Jan 29 2003 - 01:56:26 EST)
• RE: MSDE contained in... Bojan Zdrnja (Wed Jan 29 2003 - 03:25:55 EST)
• Take note of products that don't "advertise" they have MSDE/SQL i ntegration. Shaw, Kevin (Tue Jan 28 2003 - 16:05:03 EST)
• RE: MSDE contained in... jeremy.ford(at)advancepcs.com (Wed Jan 29 2003 - 11:52:38 EST)
• Re: MSDE contained in... Stefan Laudat (Tue Jan 28 2003 - 19:26:31 EST)
• Packet from port 80 with spoofed microsoft.com ip Michael Rowe (Wed Jan 29 2003 - 05:46:53 EST)
• RE: MSDE contained in... Kurt (Tue Jan 28 2003 - 16:41:41 EST)
• MSDE contained in... (MS Office ? really ?) Chris Caydes (Tue Jan 28 2003 - 14:20:40 EST)
• Re: Scan UDP port 135 Russell Fulton (Tue Jan 28 2003 - 19:17:21 EST)
• Variant or original posting to packetstormsecurity - long oobs3c02(at)attbi.com (Tue Jan 28 2003 - 14:16:10 EST)
• RE: MSDE contained in... Mark E. Donaldson (Tue Jan 28 2003 - 21:25:17 EST)
• Incidents Mailing List Administrivia Jensenne Roculan (Tue Jan 28 2003 - 18:51:06 EST)
• Re: MSDE contained in... Johannes Ullrich (Mon Jan 27 2003 - 23:30:17 EST)
• MSDE contained in... Tina Bird (Mon Jan 27 2003 - 23:12:29 EST)
• Re: MSDE contained in... Davis Ray Sickmon, Jr (Tue Jan 28 2003 - 00:21:25 EST)
• Scan UDP port 135 Gkruel (Tue Jan 28 2003 - 10:28:33 EST)
• RE: SQL Sapphire Worm Analysis trent dilkie (Mon Jan 27 2003 - 12:52:05 EST)
• Re: SQL Sapphire Worm Analysis dr john halewood (Mon Jan 27 2003 - 12:52:07 EST)
• Re: SQL Sapphire Worm Analysis Micheal Patterson (Mon Jan 27 2003 - 12:56:04 EST)
• MS SQL server worm logs question Ian O'Brien (Mon Jan 27 2003 - 04:08:57 EST)
• wierd: udp port 0 traffic Gianni Tedesco (Mon Jan 27 2003 - 06:57:10 EST)
• Re: SQL Sapphire Worm Analysis terry white (Mon Jan 27 2003 - 00:00:55 EST)
• RE: SQL Sapphire Worm Analysis Marc Maiffret (Mon Jan 27 2003 - 01:55:09 EST)
• Re: SNMP Weirdness Carlo Ottaviani (Mon Jan 27 2003 - 07:50:36 EST)
• Re: graphical stats of new SQL worm abretten(at)kroger.com (Sun Jan 26 2003 - 23:21:13 EST)
• SQL Sapphire Worm Analysis Marc Maiffret (Sat Jan 25 2003 - 07:50:30 EST)
• Re: strange traffic kris carlier (Sat Jan 25 2003 - 09:42:27 EST)
• Re: Increased activity on UDP/1434 Dave Aitel (Sat Jan 25 2003 - 09:18:38 EST)
• Re: Increased activity on UDP/1434 Dejan (Sat Jan 25 2003 - 09:44:23 EST)
• Re: Paypal.com hosting IRC server, possible hack? dtm(at)paypal.com (Sat Jan 25 2003 - 17:13:57 EST)
• RE: strange attacks - flood udp packets from 1030 to msql Dan Perez (Sat Jan 25 2003 - 15:32:26 EST)
• internet status Tina Bird (Sun Jan 26 2003 - 14:33:37 EST)
• Re: Increased activity on UDP/1434 slswick(at)aep.com (Sat Jan 25 2003 - 09:36:51 EST)
• RE: New spam-probing wave? Danny (Sat Jan 25 2003 - 16:26:22 EST)
• Re: strange attacks - flood udp packets from 1030 to msql Víctor (Sat Jan 25 2003 - 15:11:22 EST)
• Re: strange attacks - flood udp packets from 1030 to msql Eric Nelson (Sat Jan 25 2003 - 18:01:10 EST)
• graphical stats of new SQL worm Mark J. Lastdrager (Sat Jan 25 2003 - 10:47:11 EST)
• RE: strange attacks - flood udp packets from 1030 to msql Drew, Dale (Sat Jan 25 2003 - 10:15:43 EST)
• Re: Increased activity on UDP/1434 Justin Bloom (Sat Jan 25 2003 - 09:52:13 EST)
• Re: Increased activity on UDP/1434 Sam Evans (Sat Jan 25 2003 - 09:32:36 EST)
• Re: strange traffic Thierry Zoller (Sat Jan 25 2003 - 09:40:49 EST)
• Microsoft SQL Server 2000 worm - port 1434 Carl Inglis (Sat Jan 25 2003 - 09:44:17 EST)
• Re: Increased activity on UDP/1434 Otto Dandenell (Sat Jan 25 2003 - 09:36:29 EST)
• Paypal.com hosting IRC server, possible hack? mistymountainhop(at)hushmail.com (Fri Jan 24 2003 - 00:23:54 EST)
• Re: SNMP Weirdness Christian Vogel (Thu Jan 23 2003 - 12:36:57 EST)
• Is anyone else seeing a real heavy incrase in TCP/1434? Scott C. Kennedy (Sat Jan 25 2003 - 01:28:13 EST)
• New MS SQL Server Worm H D Moore (Sat Jan 25 2003 - 04:15:40 EST)
• RE: SNMP Weirdness Thomas Ray (Fri Jan 24 2003 - 11:39:32 EST)
• Re: MS SQL WORM IS DESTROYING INTERNET BLOCK PORT 1434! Patrick Finch (Sat Jan 25 2003 - 05:09:23 EST)
• RE: SNMP Weirdness Smith, Donald  (Thu Jan 23 2003 - 14:30:12 EST)
• RE: SNMP Weirdness James C Slora Jr (Thu Jan 23 2003 - 15:00:26 EST)
• RE: Hacked web server Ryan Yagatich (Fri Jan 24 2003 - 12:24:24 EST)
• New Web Hack? incidents.nospam13(at)web-cities.net (Fri Jan 24 2003 - 12:30:07 EST)
• strange attacks - flood udp packets from 1030 to msql Uwe Dippel (Sat Jan 25 2003 - 06:51:59 EST)
• udp/1434 Jens Hektor (Sat Jan 25 2003 - 06:30:10 EST)
• Re: New spam-probing wave? Jeff Kell (Thu Jan 23 2003 - 17:47:18 EST)
• strange traffic Wim Mees (Sat Jan 25 2003 - 05:57:49 EST)
• Increased activity on UDP/1434 Dmitri Smirnov (Sat Jan 25 2003 - 02:05:03 EST)
• Re: New spam-probing wave? Pauling (Thu Jan 23 2003 - 15:12:47 EST)
• Re: SNMP Weirdness Michael Roberts (Thu Jan 23 2003 - 13:17:09 EST)
• Re: SGI.com hosts HACKED and being abused by scriptkiddies on IRC. Matthew Wells (Thu Jan 23 2003 - 20:42:21 EST)
• RE: mIRC Zombie, port 445 Michael LaSalvia (Thu Jan 23 2003 - 12:56:42 EST)
• Re: mIRC Zombie, port 445 Andreas Str|m (Wed Jan 22 2003 - 04:49:18 EST)
• Re: mIRC Zombie, port 445 Sami Rautiainen (Wed Jan 22 2003 - 10:15:39 EST)
• Re: mIRC Zombie, port 445 Tino Didriksen (Wed Jan 22 2003 - 12:22:29 EST)
• Re: Odd Shares showing up on workstations H C (Tue Jan 21 2003 - 18:13:16 EST)
• Re: Openbsd 3.2 wtmp delay and named backdoor f.johan.beisser (Mon Jan 20 2003 - 16:21:53 EST)
• Re: Openbsd 3.2 wtmp delay and named backdoor Valdis.Kletnieks(at)vt.edu (Mon Jan 20 2003 - 00:34:51 EST)
• RE: mIRC Zombie, port 445 Michael LaSalvia (Wed Jan 22 2003 - 09:45:41 EST)
• Re: mIRC Zombie, port 445 Jeff Bollinger (Wed Jan 22 2003 - 08:04:49 EST)
• Re: mIRC Zombie, port 445 pj(at)esec.dk (Wed Jan 22 2003 - 16:20:24 EST)
• SNMP Weirdness Keith Pachulski (Mon Jan 20 2003 - 14:10:15 EST)
• Re: Openbsd 3.2 wtmp delay and named backdoor Crist J. Clark (Mon Jan 20 2003 - 17:33:32 EST)
• New spam-probing wave? Patrick Oonk (Tue Jan 21 2003 - 10:08:02 EST)
• RE: Hacked web server Jason Coombs (Mon Jan 20 2003 - 20:52:39 EST)
• unusual http access in proxy log Martin K. Lee - XML Consulting (Thu Jan 23 2003 - 01:09:58 EST)
• Re: Openbsd 3.2 wtmp delay and named backdoor Jose Nazario (Mon Jan 20 2003 - 21:17:06 EST)
• Re: Hacked web server John Pugh (Mon Jan 20 2003 - 21:38:26 EST)
• mIRC Zombie, port 445 Tino Didriksen (Sat Jan 18 2003 - 21:03:38 EST)
• Re: Strange Apache logs - maybe DDOS? Axel Beckert (Sun Jan 19 2003 - 02:37:42 EST)
• RE: IRC -> smtp worm? Scott Phelps (Thu Jan 09 2003 - 14:43:49 EST)
• Odd Shares showing up on workstations J Jewitt (Thu Jan 16 2003 - 11:02:11 EST)
• Re: Curious "spam" (or broken viral payload)... John Washington (Thu Jan 09 2003 - 01:38:23 EST)
• SGI.com hosts HACKED and being abused by scriptkiddies on IRC. Zehra Erseymen (Tue Jan 14 2003 - 19:36:35 EST)
• Re: Hacked web server Ryan Yagatich (Fri Jan 17 2003 - 13:53:05 EST)
• Openbsd 3.2 wtmp delay and named backdoor Eric Weaver (Wed Jan 15 2003 - 09:19:52 EST)
• RE: Hacked web server Michael LaSalvia (Mon Jan 13 2003 - 10:28:42 EST)
• Re: Hacked web server sunzi (Tue Jan 14 2003 - 08:28:48 EST)
• Re: Hacked web server Michael Katz (Sun Jan 12 2003 - 21:20:12 EST)
• Re: Virus? Trojan? James C. Slora Jr. (Sun Jan 12 2003 - 21:28:15 EST)
• Re: Hacked web server Tibor Biro (Sun Jan 12 2003 - 18:43:08 EST)
• RE: Virus? Trojan? Nick FitzGerald (Sun Jan 12 2003 - 18:39:18 EST)
• Hacked web server Rogelio Vidaurri Courcelle (Fri Jan 10 2003 - 15:39:59 EST)
• RE: Virus? Trojan? James C Slora Jr (Fri Jan 10 2003 - 10:39:45 EST)
• Re: Curious "spam" (or broken viral payload)... GertJan Hagenaars (Wed Jan 08 2003 - 22:04:14 EST)
• Re: Curious "spam" (or broken viral payload)... Mark (Wed Jan 08 2003 - 20:39:06 EST)
• Re: /sumthin Revisited noconflic (Wed Jan 08 2003 - 02:04:45 EST)
• Any known exploit for the samba 2.2.2-2.2.6 encrypted password vuln? Neulinger, Nathan (Wed Jan 08 2003 - 17:33:13 EST)
• RE: /sumthin Revisited Rob Keown (Tue Jan 07 2003 - 18:40:21 EST)
• RE: /sumthin Revisited Jonathan A. Zdziarski (Tue Jan 07 2003 - 17:35:41 EST)
• Re: Possible google hack rsavage(at)nandomedia.com (Tue Jan 07 2003 - 17:28:37 EST)
• Re: /sumthin Revisited Michael Katz (Tue Jan 07 2003 - 18:01:10 EST)
• RE: /sumthin Revisited Jonathan A. Zdziarski (Tue Jan 07 2003 - 17:31:49 EST)
• RE: /sumthin Revisited Jonathan A. Zdziarski (Tue Jan 07 2003 - 17:25:44 EST)
• Re: /sumthin Revisited Sverre H. Huseby (Tue Jan 07 2003 - 17:12:23 EST)
• Re: Root password changed Lisa Casey (Tue Jan 07 2003 - 14:36:45 EST)
• Possible google hack Johnson, April (Tue Jan 07 2003 - 14:13:30 EST)
• Re: /sumthin Revisited Sverre H. Huseby (Tue Jan 07 2003 - 16:31:43 EST)
• Re: Root password changed Joe Kattner (Mon Jan 06 2003 - 15:36:56 EST)
• Re: /sumthin Revisited Chris Norris (Tue Jan 07 2003 - 05:34:10 EST)
• RE: /sumthin Revisited Wolf, Glenn (Mon Jan 06 2003 - 15:02:35 EST)
• Re: Root password changed Adam Bultman (Mon Jan 06 2003 - 15:38:44 EST)
• Re: Subseven 2.2 Server? dataspy (Mon Jan 06 2003 - 16:04:58 EST)
• Re: Root password changed sysadmin (Mon Jan 06 2003 - 15:33:34 EST)
• Re: /sumthin Revisited Chris Barford (Mon Jan 06 2003 - 16:35:23 EST)
• Re: Root password changed Chris Barford (Mon Jan 06 2003 - 16:31:01 EST)
• RE: Root password changed Michael LaSalvia (Mon Jan 06 2003 - 15:18:43 EST)
• Re: Root password changed james (Mon Jan 06 2003 - 15:48:16 EST)
• RE: PDL anti-spam blacklist Jonathan A. Zdziarski (Mon Jan 06 2003 - 15:20:03 EST)
• RE: Mysterious "Support" account created on Win2k server Michael LaSalvia (Sat Jan 04 2003 - 10:35:06 EST)
• RE: PDL anti-spam blacklist James Friesen (Fri Jan 03 2003 - 19:13:54 EST)
• Root password changed RCS (Fri Jan 03 2003 - 23:01:03 EST)
• RE: PDL anti-spam blacklist Brian Taylor (Sat Jan 04 2003 - 21:11:30 EST)
• /sumthin Revisited Noam Eppel (Sat Jan 04 2003 - 19:14:49 EST)
• Subseven 2.2 Server? Nick Jacobsen (Sat Jan 04 2003 - 00:11:21 EST)
• Re: Thanks everyone! RE: MS IIS 5 server is hacked leaving undeletable folders and files Nick Jacobsen (Fri Jan 03 2003 - 21:58:38 EST)
• RE: Mysterious "Support" account created on Win2k server kyle(at)kylelai.com (Fri Jan 03 2003 - 14:43:09 EST)
• RE: Mysterious "Support" account created on Win2k server kyle(at)kylelai.com (Fri Jan 03 2003 - 16:45:46 EST)
• Thanks everyone! RE: MS IIS 5 server is hacked leaving undeletable folders and files Don Phillipe (Fri Jan 03 2003 - 15:00:34 EST)
• RE: Mysterious "Support" account created on Win2k server H C (Fri Jan 03 2003 - 14:10:34 EST)
• RE: Mysterious "Support" account created on Win2k server Michiel Overtoom (Fri Jan 03 2003 - 13:55:28 EST)
• Re: Mysterious "Support" account created on Win2k server Floydman (Fri Jan 03 2003 - 13:35:39 EST)
• RE: Mysterious "Support" account created on Win2k server kyle(at)kylelai.com (Fri Jan 03 2003 - 12:19:12 EST)
• RE: PDL anti-spam blacklist Brian Taylor (Thu Jan 02 2003 - 23:07:24 EST)
• RE: Mysterious "Support" account created on Win2k server Matthew Cole (Fri Jan 03 2003 - 07:26:43 EST)
• RE: Abnormally high Sub-Seven attack rate increase H C (Thu Jan 02 2003 - 20:17:12 EST)
• Re: What constitutes authorized server access? - was Re: RPAT - Realtime Proxy Abuse Triangulation Russell Fulton (Thu Jan 02 2003 - 17:18:35 EST)
• Re: RPAT - Realtime Proxy Abuse Triangulation Stephen J. Friedl (Thu Jan 02 2003 - 16:14:48 EST)
• Re: RPAT - Realtime Proxy Abuse Triangulation Stephen P. Berry (Thu Jan 02 2003 - 16:08:50 EST)
• RE: Mysterious "Support" account created on Win2k server Ed Street (Thu Jan 02 2003 - 16:07:00 EST)
• Re: Mysterious "Support" account created on Win2k server Scott Fendley (Thu Jan 02 2003 - 16:03:03 EST)
• Mysterious "Support" account created on Win2k server Ostfeld, Thomas (Thu Jan 02 2003 - 15:33:54 EST)
• Re: PDL anti-spam blacklist jlewis(at)lewis.org (Thu Jan 02 2003 - 14:49:55 EST)
• Re: MS IIS 5 server is hacked leaving undeletable folders and files James Turner (Thu Jan 02 2003 - 12:41:57 EST)
• Re: What constitutes authorized server access? - was Re: RPAT - Realtime Proxy Abuse Triangulation Kevin Reardon (Thu Jan 02 2003 - 13:25:52 EST)
• RE: MS IIS 5 server is hacked leaving undeletable folders and files Richard Donovan (Thu Jan 02 2003 - 12:44:43 EST)
• RE: Abnormally high Sub-Seven attack rate increase James C Slora Jr (Thu Jan 02 2003 - 13:38:32 EST)
• Re: Abnormally high Sub-Seven attack rate increase Jeff Kell (Thu Jan 02 2003 - 12:08:30 EST)
• Re: PDL anti-spam blacklist Mark (Thu Jan 02 2003 - 13:33:15 EST)
• RE: PDL anti-spam blacklist Christopher Wagner (Thu Jan 02 2003 - 13:17:09 EST)
• RE: What constitutes authorized server access? - was Re: RPAT - Realtime Proxy Abuse Triangulation Christopher X. Candreva (Thu Jan 02 2003 - 13:10:16 EST)
• RE: MS IIS 5 server is hacked leaving undeletable folders and files Willsey, Rob (CCI-Omaha) (Thu Jan 02 2003 - 12:33:28 EST)
• RE: MS IIS 5 server is hacked leaving undeletable folders and fil es David Vincent (Thu Jan 02 2003 - 12:31:58 EST)
• Re: MS IIS 5 server is hacked leaving undeletable folders and files Duncan Hill (Thu Jan 02 2003 - 12:39:09 EST)
• NC_S_ISLCK? Shirley, Ed (Wed Jan 01 2003 - 11:30:30 EST)