Ftp

disaster-master's picture

She has: 2,154 posts

Joined: May 2001

Geeze!!! I feel like I have been bombarded with viruses lately. I was uploading via WS_FTP just a while ago and just stopped. I reconnected and was going back to my files that are on the left hand side of the FTP screen and none of my files where there. BUT there was something new just below C:\Program Files\WS_FTP. That new suspicious thing was
"ruW. And I just noticed that it is on the right hand side too just below my web site files.

I looked in my windows explorer files and didn't see this "ruW thing and am not really sure what has taken place. I searched the WS_FTP site and couldn't find anything on it. Nortons has a ruw and ruw2 virus listed and i am protected against both. The Symnatec site has the ruw virus listed but says thay have no info on it.

I just installed IE 6.0 today and I am running the Sygate Personnal Firewall as well as Nortons. Anybody have any idea what may be going on here?

I was gonna do a screen shot but now I can't access my files from FTP.

disaster-master's picture

She has: 2,154 posts

Joined: May 2001

Ok i have my FTP working now but that ruw is still there. Here is the screen shot.

http://www.virtualgraphiti.net/ruw.gif

They have: 677 posts

Joined: Mar 1999

Since its on the hosts' side, maybe they have it, have you tried emailing them?

Keegan's picture

They have: 300 posts

Joined: Aug 2001

http://www.symantec.com/avcenter/venc/dyn/8731.html

possibility?

Try the online virus check

Keegan

mairving's picture

They have: 2,256 posts

Joined: Feb 2001

Quote: Originally posted by Grandmaster
Since its on the hosts' side, maybe they have it, have you tried emailing them?

It's not on the hosts end since they are running a 'nix' server.

How did this show up on FTP?

Mark Irving
I have a mind like a steel trap; it is rusty and illegal in 47 states

disaster-master's picture

She has: 2,154 posts

Joined: May 2001

I have already seen the info on the Symantec site. It wasn't any help.

Quote: How did this show up on FTP?

That is what I was hoping that someone could tell me here.

Keegan's picture

They have: 300 posts

Joined: Aug 2001

It is possible to move files over without realizing it, and it is very easy to hide files. You might try enabling view all files.

Internet Explorer

Tools Folder Options View

Then show all files. Then do a search on hard disks for ruw

If you find a bunch, delete them.

disaster-master's picture

She has: 2,154 posts

Joined: May 2001

I didn't find anything like that BUT my FTP just went haywire again and now instead of having "ruW" it says "roW".
Maybe it is Usama Bin Laden and the Taliban trying to send a massage. I think I will try contacting IPswitch.

disaster-master's picture

She has: 2,154 posts

Joined: May 2001

I hate to keep talking to myself here but just on the chance that someone may notice this post....

'ruW came back and visited last night.
*DM throws her mouse across the room*
Don't know where "roW went. Must have gotten bored.

This is the wierdest thing. FTP stops responding while ruW and roW switch places....AGAIN

Busy's picture

He has: 6,151 posts

Joined: May 2001

Is there anything in the ruw or row folder? (on either side) can you delete the folder, or rename it ?

disaster-master's picture

She has: 2,154 posts

Joined: May 2001

No there is nothing in them. Cannot rename or delete them.

When I click and highlight the one on the remote site(left) side it says at the bottom in red,
"550 "ruW: No such file or directory."

Think this one is a lost cause.

They have: 677 posts

Joined: Mar 1999

Try emailing norton maybe?

disaster-master's picture

She has: 2,154 posts

Joined: May 2001

Yes, I did that. Waiting on response but my guess is that they will tell me to contact the FTP people and the FTP people will tell me to contact Nortons....back and forth....back and forth...
uhmmmm!

disaster-master's picture

She has: 2,154 posts

Joined: May 2001

Just like I thought. Symnatec sent one of those generic response letters. ARG!!!

*DM kicks her Nortons CD box across the room and anything else remotely related to Symnatec*

Busy's picture

He has: 6,151 posts

Joined: May 2001

Could always ask Mcafee lol

Doesnt symantec have a free phone help line ?

disaster-master's picture

She has: 2,154 posts

Joined: May 2001

MYSTERY of 'ruW and 'roW SOLVED!!!!!
:jump:
I tried to access my administration panel for my VPS last night and it said that I was out of memory. I knew that this wasn't possible so I e mailed my support tech. Here is their reply:

Quote: You should no longer receive anymore out of memory messages. I have removed the files that someone uploaded to your server, at one point in time anonymous FTP was open and we had people uploading files to the VPS' thus causing all of these memory errors. No one can login anonymously anymore. If you experience any additional problems accessing your control panel, please let us know.

They have: 8 posts

Joined: Nov 2001

have you tried http://sophos.com

Want to join the discussion? Create an account or log in if you already have one. Joining is fast, free and painless! We’ll even whisk you back here when you’ve finished.