myterious folder

[Rob Bresnik Mobile PC DR.]

Hello...my windows xp machine is used as an FTP server (port 21) and i have
a folder called "datasafe" on the c: drive. i basically back up some files
from a remote location to this folder. in this folder, i found this
mysterious folder with all of the following subdirectories:

C:\Datasafe\ \ \ \com3\**** \com1\ScanneD \com9\by
\com7\Crack02\com1\TaGGeD \com5\by \com7\for raid-rush-board\com2\
\with Neo1907´s PuB-tAgGeR \com2\uPPed \aux\BY \com8\by die_zarte\com6

anyone know what this is? it obviously looks someone hacked in
there...can't delete any of the directories as it says "cannot read from the
source disk".

how do i get rid of this? does anyone know what this is from?

 

[Mark]

Hello...my windows xp machine is used as an FTP server (port 21) and I have
a folder called "datasafe" on the c: drive. I basically back up some files
from a remote location to this folder. in this folder, I found this
mysterious folder with all of the following subdirectories:

C:\Datasafe\ \ \ \com3\**** \com1\ScanneD \com9\by
\com7\Crack02\com1\TaGGeD \com5\by \com7\for raid-rush-board\com2\
\with Neo1907´s PuB-tAgGeR \com2\uPPed \aux\BY \com8\by die_zarte\com6

anyone know what this is? it obviously looks someone hacked in
there...can't delete any of the directories as it says "cannot read from the
source disk".

how do i get rid of this? does anyone know what this is from?

You have been tagged by a hacker through your port 21. The folder cannot
be deleted because it is usually set to +r+s+h (readonly/system/hidden).
Reset the folder's attributes and delete the entire folder. Scan for
viruses and get yourself a good firewall.

(c:

 

[Mark]

Hello...my windows XP machine is used as an FTP server (port 21) and I have
a folder called "datasafe" on the c: drive. I basically back up some files
from a remote location to this folder. in this folder, I found this
mysterious folder with all of the following subdirectories:

C:\Datasafe\ \ \ \com3\**** \com1\ScanneD \com9\by
\com7\Crack02\com1\TaGGeD \com5\by \com7\for raid-rush-board\com2\
\with Neo1907´s PuB-tAgGeR \com2\uPPed \aux\BY \com8\by die_zarte\com6

anyone know what this is? it obviously looks someone hacked in
there...can't delete any of the directories as it says "cannot read from the
source disk".

how do I get rid of this? does anyone know what this is from?

Here are some tips on removing the folders:
http://www.experts-exchange.com/Storage/Q_20546577.html

 

[Rob Bresnik Mobile PC DR.]

Here are some tips on removing the folders:
http://www.experts-exchange.com/Storage/Q_20546577.html

Thanks Mark, I am using the SP2 firewall with XP...that isn't sufficient to
keep hackers out of port 21?

 

[Mark]

Thanks Mark, I am using the SP2 firewall with XP...that isn't sufficient to
keep hackers out of port 21?

One would think so, but maybe you have a "worm" on the machine that has
opened the port. If your ftp was set to allow users to login and upload
files then your door was open to this kind of attack. In any case you
have been tagged by a hacker.

You can go to either of these two sites and scan your computer for port
vulnerability.

Sygate Tech:
http://scan.sygatetech.com/

Gibson Research:
https://www.grc.com/x/ne.dll?bh0bkyd2