[OT] odd 'virus-like' behavior

Troy,

Right click on My Computer / Properties / Tools / Error Checking /
Check both options. The Server will execute this on the next reboot.

A thought came to me last night that you might try. Go to a CMD prompt
and see if you can change the attributes on the directory or files?
You could also try booting to "safe mode with command prompt" and see
if that allows more access and control.

My new thoughts.


Troy Funte wrote:

>John,
> There is no scandisk that I know if in Windows2000server. We can't rename the file, delete it, or do anything to it. When I select properties, it says it's "D:\Epic51", and has zero (0) bytes even though it is located "in" the D:\epic51 folder. If I right-click properties from a PC to a mapped drive, it says it has 6GB today (yesterday it was 8GB), which matches what's in the Epic51 folder itself. It's almost like a mirror of the Epic51 folder.
>
>Troy
>
> ----- Original Message -----
> From: John Himebaugh
> To: vantage@yahoogroups.com
> Sent: Wednesday, November 13, 2002 7:44 PM
> Subject: Re: [Vantage] [OT] odd 'virus-like' behavior
>
>
> Troy,
>
> Have you tried running scandisk to see if the FAT table is messed up.
> In the old DOS days, if this happened you had reformat the drive.
> Another thought would be to try to rename it and then see if you can
> delete it using the new name.
> .
>
> My thoughts.
>
>
>
> Troy Funte wrote:
>
> >Todd,
> > We did #1 and #2 to no avail. Rebooted the server and tried again. Still won't delete the file. I can see that I do need to lock down the Vantage directories better. Thanks.
> >
> >Troy
> >
> > ----- Original Message -----
> > From: Todd Anderson
> > To: 'vantage@yahoogroups.com'
> > Sent: Wednesday, November 13, 2002 9:15 AM
> > Subject: RE: [Vantage] [OT] odd 'virus-like' behavior
> >
> >
> > Troy,
> >
> > A few thoughts ..
> >
> > (1) On your server - on the file in question ... right click / properties /
> > security tab / ownership / "take ownership" ... then try deleting the file
> >
> > (2) Or ... from Server Manager - goto you epicor folder share - disconnect
> > every connection ... when there are no connections to the folder /share ...
> > then try deleting the file
> >
> > (3) Review your security on the entire epicor folder - with very few
> > exceptions ALL folders and files should be read only to your network. The
> > few exceptions depends on what version of Vantage you are running. I'd
> > start with making EVERYTHING read only and see what works and what doesn't.
> > Vantage support should also be able to give you a tech briefing describing
> > the specific files that need to be read write. No one on your network
> > should be able to create or copy new files into your epicor directory.
> >
> > Todd Anderson
> >
> > -----Original Message-----
> > From: Troy Funte [mailto:tfunte@...]
> > Sent: Tuesday, November 12, 2002 7:17 PM
> > To: Vantage
> > Subject: [Vantage] [OT] odd 'virus-like' behaviour
> >
> >
> > I wonder if anyone can give me some help here...
> >
> > This afternoon I went to the mapped Epic51 folder on the server. Besides
> > the usual four folders (Vantage, Progress, Vntgtrn, and Vntgsts), there were
> > also three 'new' files. Two of them were shortcuts to a particular porn
> > site. The shortcuts I could delete. The third file has no visible name. It
> > just sits there. I can't delete it. I can't rename it. I can't change
> > it's properties. From a PC mapped to the folder, if I right-click on it and
> > select properties it says that it is a folder with 8.8GB of 2100 files in 7
> > folders. This nearly matches (the size on disk bytes does not match) the
> > information you get when you select properties on the Epic51 folder.
> >
> > We ran McAfee with the latest DAT on those folders/files but it says there
> > is no virus. Does anyone have a clue what is going on and how to get rid of
> > it?
> >
> > How these files got there I suspect a virus on a user's PC. How to get rid
> > of the third file, I have no clue.
> >
> > Troy Funte
> > Liberty Electronics
> >
> >
> >
> > [Non-text portions of this message have been removed]
> >
> >
> > Useful links for the Yahoo!Groups Vantage Board are: ( Note: You must have
> > already linked your email address to a yahoo id to enable access. )
> > (1) To access the Files Section of our Yahoo!Group for Report Builder and
> > Crystal Reports and other 'goodies', please goto:
> > http://groups.yahoo.com/group/vantage/files/.
> > <http://groups.yahoo.com/group/vantage/files/.>
> > (2) To search through old msg's goto:
> > http://groups.yahoo.com/group/vantage/messages
> > <http://groups.yahoo.com/group/vantage/messages>
> > (3) To view links to Vendors that provide Vantage services goto:
> > http://groups.yahoo.com/group/vantage/links
> > <http://groups.yahoo.com/group/vantage/links>
> >
> > Your use of Yahoo! Groups is subject to the Yahoo! Terms of Service
> > <http://docs.yahoo.com/info/terms/> .
> >
> >
> >
> >
> > [Non-text portions of this message have been removed]
> >
> >
> > Useful links for the Yahoo!Groups Vantage Board are: ( Note: You must have already linked your email address to a yahoo id to enable access. )
> > (1) To access the Files Section of our Yahoo!Group for Report Builder and Crystal Reports and other 'goodies', please goto: http://groups.yahoo.com/group/vantage/files/.
> > (2) To search through old msg's goto: http://groups.yahoo.com/group/vantage/messages
> > (3) To view links to Vendors that provide Vantage services goto: http://groups.yahoo.com/group/vantage/links
> >
> > Your use of Yahoo! Groups is subject to the Yahoo! Terms of Service.
> >
> >
> >[Non-text portions of this message have been removed]
> >
> >
> >Useful links for the Yahoo!Groups Vantage Board are: ( Note: You must have already linked your email address to a yahoo id to enable access. )
> >(1) To access the Files Section of our Yahoo!Group for Report Builder and Crystal Reports and other 'goodies', please goto: http://groups.yahoo.com/group/vantage/files/.
> >(2) To search through old msg's goto: http://groups.yahoo.com/group/vantage/messages
> >(3) To view links to Vendors that provide Vantage services goto: http://groups.yahoo.com/group/vantage/links
> >
> >Your use of Yahoo! Groups is subject to http://docs.yahoo.com/info/terms/
> >
> >
> >
> >
> >
>
> --
> John Himebaugh, MIS
> InterOcean Systems, Inc.
> 3540 Aero Court
> San Diego, CA 92123
> Voice: 858.565.8400
> Fax: 858.268.9695
>
>
>
>
> Useful links for the Yahoo!Groups Vantage Board are: ( Note: You must have already linked your email address to a yahoo id to enable access. )
> (1) To access the Files Section of our Yahoo!Group for Report Builder and Crystal Reports and other 'goodies', please goto: http://groups.yahoo.com/group/vantage/files/.
> (2) To search through old msg's goto: http://groups.yahoo.com/group/vantage/messages
> (3) To view links to Vendors that provide Vantage services goto: http://groups.yahoo.com/group/vantage/links
>
> Your use of Yahoo! Groups is subject to the Yahoo! Terms of Service.
>
>
>[Non-text portions of this message have been removed]
>
>
>
>Useful links for the Yahoo!Groups Vantage Board are: ( Note: You must have already linked your email address to a yahoo id to enable access. )
>(1) To access the Files Section of our Yahoo!Group for Report Builder and Crystal Reports and other 'goodies', please goto: http://groups.yahoo.com/group/vantage/files/.
>(2) To search through old msg's goto: http://groups.yahoo.com/group/vantage/messages
>(3) To view links to Vendors that provide Vantage services goto: http://groups.yahoo.com/group/vantage/links
>
>Your use of Yahoo! Groups is subject to http://docs.yahoo.com/info/terms/
>
>
>
>
>

--
John Himebaugh, MIS
InterOcean Systems, Inc.
3540 Aero Court
San Diego, CA 92123
Voice: 858.565.8400
Fax: 858.268.9695
Troy,

A few thoughts ..

(1) On your server - on the file in question ... right click / properties /
security tab / ownership / "take ownership" ... then try deleting the file

(2) Or ... from Server Manager - goto you epicor folder share - disconnect
every connection ... when there are no connections to the folder /share ...
then try deleting the file

(3) Review your security on the entire epicor folder - with very few
exceptions ALL folders and files should be read only to your network. The
few exceptions depends on what version of Vantage you are running. I'd
start with making EVERYTHING read only and see what works and what doesn't.
Vantage support should also be able to give you a tech briefing describing
the specific files that need to be read write. No one on your network
should be able to create or copy new files into your epicor directory.

Todd Anderson

-----Original Message-----
From: Troy Funte [mailto:tfunte@...]
Sent: Tuesday, November 12, 2002 7:17 PM
To: Vantage
Subject: [Vantage] [OT] odd 'virus-like' behaviour


I wonder if anyone can give me some help here...

This afternoon I went to the mapped Epic51 folder on the server. Besides
the usual four folders (Vantage, Progress, Vntgtrn, and Vntgsts), there were
also three 'new' files. Two of them were shortcuts to a particular porn
site. The shortcuts I could delete. The third file has no visible name. It
just sits there. I can't delete it. I can't rename it. I can't change
it's properties. From a PC mapped to the folder, if I right-click on it and
select properties it says that it is a folder with 8.8GB of 2100 files in 7
folders. This nearly matches (the size on disk bytes does not match) the
information you get when you select properties on the Epic51 folder.

We ran McAfee with the latest DAT on those folders/files but it says there
is no virus. Does anyone have a clue what is going on and how to get rid of
it?

How these files got there I suspect a virus on a user's PC. How to get rid
of the third file, I have no clue.

Troy Funte
Liberty Electronics



[Non-text portions of this message have been removed]


Useful links for the Yahoo!Groups Vantage Board are: ( Note: You must have
already linked your email address to a yahoo id to enable access. )
(1) To access the Files Section of our Yahoo!Group for Report Builder and
Crystal Reports and other 'goodies', please goto:
http://groups.yahoo.com/group/vantage/files/.
<http://groups.yahoo.com/group/vantage/files/.>
(2) To search through old msg's goto:
http://groups.yahoo.com/group/vantage/messages
<http://groups.yahoo.com/group/vantage/messages>
(3) To view links to Vendors that provide Vantage services goto:
http://groups.yahoo.com/group/vantage/links
<http://groups.yahoo.com/group/vantage/links>

Your use of Yahoo! Groups is subject to the Yahoo! Terms of Service
<http://docs.yahoo.com/info/terms/> .




[Non-text portions of this message have been removed]
Todd,
We did #1 and #2 to no avail. Rebooted the server and tried again. Still won't delete the file. I can see that I do need to lock down the Vantage directories better. Thanks.

Troy

----- Original Message -----
From: Todd Anderson
To: 'vantage@yahoogroups.com'
Sent: Wednesday, November 13, 2002 9:15 AM
Subject: RE: [Vantage] [OT] odd 'virus-like' behavior


Troy,

A few thoughts ..

(1) On your server - on the file in question ... right click / properties /
security tab / ownership / "take ownership" ... then try deleting the file

(2) Or ... from Server Manager - goto you epicor folder share - disconnect
every connection ... when there are no connections to the folder /share ...
then try deleting the file

(3) Review your security on the entire epicor folder - with very few
exceptions ALL folders and files should be read only to your network. The
few exceptions depends on what version of Vantage you are running. I'd
start with making EVERYTHING read only and see what works and what doesn't.
Vantage support should also be able to give you a tech briefing describing
the specific files that need to be read write. No one on your network
should be able to create or copy new files into your epicor directory.

Todd Anderson

-----Original Message-----
From: Troy Funte [mailto:tfunte@...]
Sent: Tuesday, November 12, 2002 7:17 PM
To: Vantage
Subject: [Vantage] [OT] odd 'virus-like' behaviour


I wonder if anyone can give me some help here...

This afternoon I went to the mapped Epic51 folder on the server. Besides
the usual four folders (Vantage, Progress, Vntgtrn, and Vntgsts), there were
also three 'new' files. Two of them were shortcuts to a particular porn
site. The shortcuts I could delete. The third file has no visible name. It
just sits there. I can't delete it. I can't rename it. I can't change
it's properties. From a PC mapped to the folder, if I right-click on it and
select properties it says that it is a folder with 8.8GB of 2100 files in 7
folders. This nearly matches (the size on disk bytes does not match) the
information you get when you select properties on the Epic51 folder.

We ran McAfee with the latest DAT on those folders/files but it says there
is no virus. Does anyone have a clue what is going on and how to get rid of
it?

How these files got there I suspect a virus on a user's PC. How to get rid
of the third file, I have no clue.

Troy Funte
Liberty Electronics



[Non-text portions of this message have been removed]


Useful links for the Yahoo!Groups Vantage Board are: ( Note: You must have
already linked your email address to a yahoo id to enable access. )
(1) To access the Files Section of our Yahoo!Group for Report Builder and
Crystal Reports and other 'goodies', please goto:
http://groups.yahoo.com/group/vantage/files/.
<http://groups.yahoo.com/group/vantage/files/.>
(2) To search through old msg's goto:
http://groups.yahoo.com/group/vantage/messages
<http://groups.yahoo.com/group/vantage/messages>
(3) To view links to Vendors that provide Vantage services goto:
http://groups.yahoo.com/group/vantage/links
<http://groups.yahoo.com/group/vantage/links>

Your use of Yahoo! Groups is subject to the Yahoo! Terms of Service
<http://docs.yahoo.com/info/terms/> .




[Non-text portions of this message have been removed]


Useful links for the Yahoo!Groups Vantage Board are: ( Note: You must have already linked your email address to a yahoo id to enable access. )
(1) To access the Files Section of our Yahoo!Group for Report Builder and Crystal Reports and other 'goodies', please goto: http://groups.yahoo.com/group/vantage/files/.
(2) To search through old msg's goto: http://groups.yahoo.com/group/vantage/messages
(3) To view links to Vendors that provide Vantage services goto: http://groups.yahoo.com/group/vantage/links

Your use of Yahoo! Groups is subject to the Yahoo! Terms of Service.


[Non-text portions of this message have been removed]
Troy,

Have you tried running scandisk to see if the FAT table is messed up.
In the old DOS days, if this happened you had reformat the drive.
Another thought would be to try to rename it and then see if you can
delete it using the new name.
.

My thoughts.



Troy Funte wrote:

>Todd,
> We did #1 and #2 to no avail. Rebooted the server and tried again. Still won't delete the file. I can see that I do need to lock down the Vantage directories better. Thanks.
>
>Troy
>
> ----- Original Message -----
> From: Todd Anderson
> To: 'vantage@yahoogroups.com'
> Sent: Wednesday, November 13, 2002 9:15 AM
> Subject: RE: [Vantage] [OT] odd 'virus-like' behavior
>
>
> Troy,
>
> A few thoughts ..
>
> (1) On your server - on the file in question ... right click / properties /
> security tab / ownership / "take ownership" ... then try deleting the file
>
> (2) Or ... from Server Manager - goto you epicor folder share - disconnect
> every connection ... when there are no connections to the folder /share ...
> then try deleting the file
>
> (3) Review your security on the entire epicor folder - with very few
> exceptions ALL folders and files should be read only to your network. The
> few exceptions depends on what version of Vantage you are running. I'd
> start with making EVERYTHING read only and see what works and what doesn't.
> Vantage support should also be able to give you a tech briefing describing
> the specific files that need to be read write. No one on your network
> should be able to create or copy new files into your epicor directory.
>
> Todd Anderson
>
> -----Original Message-----
> From: Troy Funte [mailto:tfunte@...]
> Sent: Tuesday, November 12, 2002 7:17 PM
> To: Vantage
> Subject: [Vantage] [OT] odd 'virus-like' behaviour
>
>
> I wonder if anyone can give me some help here...
>
> This afternoon I went to the mapped Epic51 folder on the server. Besides
> the usual four folders (Vantage, Progress, Vntgtrn, and Vntgsts), there were
> also three 'new' files. Two of them were shortcuts to a particular porn
> site. The shortcuts I could delete. The third file has no visible name. It
> just sits there. I can't delete it. I can't rename it. I can't change
> it's properties. From a PC mapped to the folder, if I right-click on it and
> select properties it says that it is a folder with 8.8GB of 2100 files in 7
> folders. This nearly matches (the size on disk bytes does not match) the
> information you get when you select properties on the Epic51 folder.
>
> We ran McAfee with the latest DAT on those folders/files but it says there
> is no virus. Does anyone have a clue what is going on and how to get rid of
> it?
>
> How these files got there I suspect a virus on a user's PC. How to get rid
> of the third file, I have no clue.
>
> Troy Funte
> Liberty Electronics
>
>
>
> [Non-text portions of this message have been removed]
>
>
> Useful links for the Yahoo!Groups Vantage Board are: ( Note: You must have
> already linked your email address to a yahoo id to enable access. )
> (1) To access the Files Section of our Yahoo!Group for Report Builder and
> Crystal Reports and other 'goodies', please goto:
> http://groups.yahoo.com/group/vantage/files/.
> <http://groups.yahoo.com/group/vantage/files/.>
> (2) To search through old msg's goto:
> http://groups.yahoo.com/group/vantage/messages
> <http://groups.yahoo.com/group/vantage/messages>
> (3) To view links to Vendors that provide Vantage services goto:
> http://groups.yahoo.com/group/vantage/links
> <http://groups.yahoo.com/group/vantage/links>
>
> Your use of Yahoo! Groups is subject to the Yahoo! Terms of Service
> <http://docs.yahoo.com/info/terms/> .
>
>
>
>
> [Non-text portions of this message have been removed]
>
>
> Useful links for the Yahoo!Groups Vantage Board are: ( Note: You must have already linked your email address to a yahoo id to enable access. )
> (1) To access the Files Section of our Yahoo!Group for Report Builder and Crystal Reports and other 'goodies', please goto: http://groups.yahoo.com/group/vantage/files/.
> (2) To search through old msg's goto: http://groups.yahoo.com/group/vantage/messages
> (3) To view links to Vendors that provide Vantage services goto: http://groups.yahoo.com/group/vantage/links
>
> Your use of Yahoo! Groups is subject to the Yahoo! Terms of Service.
>
>
>[Non-text portions of this message have been removed]
>
>
>Useful links for the Yahoo!Groups Vantage Board are: ( Note: You must have already linked your email address to a yahoo id to enable access. )
>(1) To access the Files Section of our Yahoo!Group for Report Builder and Crystal Reports and other 'goodies', please goto: http://groups.yahoo.com/group/vantage/files/.
>(2) To search through old msg's goto: http://groups.yahoo.com/group/vantage/messages
>(3) To view links to Vendors that provide Vantage services goto: http://groups.yahoo.com/group/vantage/links
>
>Your use of Yahoo! Groups is subject to http://docs.yahoo.com/info/terms/
>
>
>
>
>

--
John Himebaugh, MIS
InterOcean Systems, Inc.
3540 Aero Court
San Diego, CA 92123
Voice: 858.565.8400
Fax: 858.268.9695
John,
There is no scandisk that I know if in Windows2000server. We can't rename the file, delete it, or do anything to it. When I select properties, it says it's "D:\Epic51", and has zero (0) bytes even though it is located "in" the D:\epic51 folder. If I right-click properties from a PC to a mapped drive, it says it has 6GB today (yesterday it was 8GB), which matches what's in the Epic51 folder itself. It's almost like a mirror of the Epic51 folder.

Troy

----- Original Message -----
From: John Himebaugh
To: vantage@yahoogroups.com
Sent: Wednesday, November 13, 2002 7:44 PM
Subject: Re: [Vantage] [OT] odd 'virus-like' behavior


Troy,

Have you tried running scandisk to see if the FAT table is messed up.
In the old DOS days, if this happened you had reformat the drive.
Another thought would be to try to rename it and then see if you can
delete it using the new name.
.

My thoughts.



Troy Funte wrote:

>Todd,
> We did #1 and #2 to no avail. Rebooted the server and tried again. Still won't delete the file. I can see that I do need to lock down the Vantage directories better. Thanks.
>
>Troy
>
> ----- Original Message -----
> From: Todd Anderson
> To: 'vantage@yahoogroups.com'
> Sent: Wednesday, November 13, 2002 9:15 AM
> Subject: RE: [Vantage] [OT] odd 'virus-like' behavior
>
>
> Troy,
>
> A few thoughts ..
>
> (1) On your server - on the file in question ... right click / properties /
> security tab / ownership / "take ownership" ... then try deleting the file
>
> (2) Or ... from Server Manager - goto you epicor folder share - disconnect
> every connection ... when there are no connections to the folder /share ...
> then try deleting the file
>
> (3) Review your security on the entire epicor folder - with very few
> exceptions ALL folders and files should be read only to your network. The
> few exceptions depends on what version of Vantage you are running. I'd
> start with making EVERYTHING read only and see what works and what doesn't.
> Vantage support should also be able to give you a tech briefing describing
> the specific files that need to be read write. No one on your network
> should be able to create or copy new files into your epicor directory.
>
> Todd Anderson
>
> -----Original Message-----
> From: Troy Funte [mailto:tfunte@...]
> Sent: Tuesday, November 12, 2002 7:17 PM
> To: Vantage
> Subject: [Vantage] [OT] odd 'virus-like' behaviour
>
>
> I wonder if anyone can give me some help here...
>
> This afternoon I went to the mapped Epic51 folder on the server. Besides
> the usual four folders (Vantage, Progress, Vntgtrn, and Vntgsts), there were
> also three 'new' files. Two of them were shortcuts to a particular porn
> site. The shortcuts I could delete. The third file has no visible name. It
> just sits there. I can't delete it. I can't rename it. I can't change
> it's properties. From a PC mapped to the folder, if I right-click on it and
> select properties it says that it is a folder with 8.8GB of 2100 files in 7
> folders. This nearly matches (the size on disk bytes does not match) the
> information you get when you select properties on the Epic51 folder.
>
> We ran McAfee with the latest DAT on those folders/files but it says there
> is no virus. Does anyone have a clue what is going on and how to get rid of
> it?
>
> How these files got there I suspect a virus on a user's PC. How to get rid
> of the third file, I have no clue.
>
> Troy Funte
> Liberty Electronics
>
>
>
> [Non-text portions of this message have been removed]
>
>
> Useful links for the Yahoo!Groups Vantage Board are: ( Note: You must have
> already linked your email address to a yahoo id to enable access. )
> (1) To access the Files Section of our Yahoo!Group for Report Builder and
> Crystal Reports and other 'goodies', please goto:
> http://groups.yahoo.com/group/vantage/files/.
> <http://groups.yahoo.com/group/vantage/files/.>
> (2) To search through old msg's goto:
> http://groups.yahoo.com/group/vantage/messages
> <http://groups.yahoo.com/group/vantage/messages>
> (3) To view links to Vendors that provide Vantage services goto:
> http://groups.yahoo.com/group/vantage/links
> <http://groups.yahoo.com/group/vantage/links>
>
> Your use of Yahoo! Groups is subject to the Yahoo! Terms of Service
> <http://docs.yahoo.com/info/terms/> .
>
>
>
>
> [Non-text portions of this message have been removed]
>
>
> Useful links for the Yahoo!Groups Vantage Board are: ( Note: You must have already linked your email address to a yahoo id to enable access. )
> (1) To access the Files Section of our Yahoo!Group for Report Builder and Crystal Reports and other 'goodies', please goto: http://groups.yahoo.com/group/vantage/files/.
> (2) To search through old msg's goto: http://groups.yahoo.com/group/vantage/messages
> (3) To view links to Vendors that provide Vantage services goto: http://groups.yahoo.com/group/vantage/links
>
> Your use of Yahoo! Groups is subject to the Yahoo! Terms of Service.
>
>
>[Non-text portions of this message have been removed]
>
>
>Useful links for the Yahoo!Groups Vantage Board are: ( Note: You must have already linked your email address to a yahoo id to enable access. )
>(1) To access the Files Section of our Yahoo!Group for Report Builder and Crystal Reports and other 'goodies', please goto: http://groups.yahoo.com/group/vantage/files/.
>(2) To search through old msg's goto: http://groups.yahoo.com/group/vantage/messages
>(3) To view links to Vendors that provide Vantage services goto: http://groups.yahoo.com/group/vantage/links
>
>Your use of Yahoo! Groups is subject to http://docs.yahoo.com/info/terms/
>
>
>
>
>

--
John Himebaugh, MIS
InterOcean Systems, Inc.
3540 Aero Court
San Diego, CA 92123
Voice: 858.565.8400
Fax: 858.268.9695




Useful links for the Yahoo!Groups Vantage Board are: ( Note: You must have already linked your email address to a yahoo id to enable access. )
(1) To access the Files Section of our Yahoo!Group for Report Builder and Crystal Reports and other 'goodies', please goto: http://groups.yahoo.com/group/vantage/files/.
(2) To search through old msg's goto: http://groups.yahoo.com/group/vantage/messages
(3) To view links to Vendors that provide Vantage services goto: http://groups.yahoo.com/group/vantage/links

Your use of Yahoo! Groups is subject to the Yahoo! Terms of Service.


[Non-text portions of this message have been removed]
Dumb question, but are you sure your that file is not a "Virtual Memory" file? If it was, you could not delete it...

Jim Horton
Mol-Son, Inc.

-----Original Message-----
From: Troy Funte [mailto:tfunte@...]
Sent: Wednesday, November 13, 2002 9:35 PM
To: vantage@yahoogroups.com
Subject: Re: [Vantage] [OT] odd 'virus-like' behavior


John,
There is no scandisk that I know if in Windows2000server. We can't rename the file, delete it, or do anything to it. When I select properties, it says it's "D:\Epic51", and has zero (0) bytes even though it is located "in" the D:\epic51 folder. If I right-click properties from a PC to a mapped drive, it says it has 6GB today (yesterday it was 8GB), which matches what's in the Epic51 folder itself. It's almost like a mirror of the Epic51 folder.

Troy

----- Original Message -----
From: John Himebaugh
To: vantage@yahoogroups.com
Sent: Wednesday, November 13, 2002 7:44 PM
Subject: Re: [Vantage] [OT] odd 'virus-like' behavior


Troy,

Have you tried running scandisk to see if the FAT table is messed up.
In the old DOS days, if this happened you had reformat the drive.
Another thought would be to try to rename it and then see if you can
delete it using the new name.
.

My thoughts.



Troy Funte wrote:

>Todd,
> We did #1 and #2 to no avail. Rebooted the server and tried again. Still won't delete the file. I can see that I do need to lock down the Vantage directories better. Thanks.
>
>Troy
>
> ----- Original Message -----
> From: Todd Anderson
> To: 'vantage@yahoogroups.com'
> Sent: Wednesday, November 13, 2002 9:15 AM
> Subject: RE: [Vantage] [OT] odd 'virus-like' behavior
>
>
> Troy,
>
> A few thoughts ..
>
> (1) On your server - on the file in question ... right click / properties /
> security tab / ownership / "take ownership" ... then try deleting the file
>
> (2) Or ... from Server Manager - goto you epicor folder share - disconnect
> every connection ... when there are no connections to the folder /share ...
> then try deleting the file
>
> (3) Review your security on the entire epicor folder - with very few
> exceptions ALL folders and files should be read only to your network. The
> few exceptions depends on what version of Vantage you are running. I'd
> start with making EVERYTHING read only and see what works and what doesn't.
> Vantage support should also be able to give you a tech briefing describing
> the specific files that need to be read write. No one on your network
> should be able to create or copy new files into your epicor directory.
>
> Todd Anderson
>
> -----Original Message-----
> From: Troy Funte [mailto:tfunte@...]
> Sent: Tuesday, November 12, 2002 7:17 PM
> To: Vantage
> Subject: [Vantage] [OT] odd 'virus-like' behaviour
>
>
> I wonder if anyone can give me some help here...
>
> This afternoon I went to the mapped Epic51 folder on the server. Besides
> the usual four folders (Vantage, Progress, Vntgtrn, and Vntgsts), there were
> also three 'new' files. Two of them were shortcuts to a particular porn
> site. The shortcuts I could delete. The third file has no visible name. It
> just sits there. I can't delete it. I can't rename it. I can't change
> it's properties. From a PC mapped to the folder, if I right-click on it and
> select properties it says that it is a folder with 8.8GB of 2100 files in 7
> folders. This nearly matches (the size on disk bytes does not match) the
> information you get when you select properties on the Epic51 folder.
>
> We ran McAfee with the latest DAT on those folders/files but it says there
> is no virus. Does anyone have a clue what is going on and how to get rid of
> it?
>
> How these files got there I suspect a virus on a user's PC. How to get rid
> of the third file, I have no clue.
>
> Troy Funte
> Liberty Electronics
>
>
>
> [Non-text portions of this message have been removed]
>
>
> Useful links for the Yahoo!Groups Vantage Board are: ( Note: You must have
> already linked your email address to a yahoo id to enable access. )
> (1) To access the Files Section of our Yahoo!Group for Report Builder and
> Crystal Reports and other 'goodies', please goto:
> http://groups.yahoo.com/group/vantage/files/.
> <http://groups.yahoo.com/group/vantage/files/.>
> (2) To search through old msg's goto:
> http://groups.yahoo.com/group/vantage/messages
> <http://groups.yahoo.com/group/vantage/messages>
> (3) To view links to Vendors that provide Vantage services goto:
> http://groups.yahoo.com/group/vantage/links
> <http://groups.yahoo.com/group/vantage/links>
>
> Your use of Yahoo! Groups is subject to the Yahoo! Terms of Service
> <http://docs.yahoo.com/info/terms/> .
>
>
>
>
> [Non-text portions of this message have been removed]
>
>
> Useful links for the Yahoo!Groups Vantage Board are: ( Note: You must have already linked your email address to a yahoo id to enable access. )
> (1) To access the Files Section of our Yahoo!Group for Report Builder and Crystal Reports and other 'goodies', please goto: http://groups.yahoo.com/group/vantage/files/.
> (2) To search through old msg's goto: http://groups.yahoo.com/group/vantage/messages
> (3) To view links to Vendors that provide Vantage services goto: http://groups.yahoo.com/group/vantage/links
>
> Your use of Yahoo! Groups is subject to the Yahoo! Terms of Service.
>
>
>[Non-text portions of this message have been removed]
>
>
>Useful links for the Yahoo!Groups Vantage Board are: ( Note: You must have already linked your email address to a yahoo id to enable access. )
>(1) To access the Files Section of our Yahoo!Group for Report Builder and Crystal Reports and other 'goodies', please goto: http://groups.yahoo.com/group/vantage/files/.
>(2) To search through old msg's goto: http://groups.yahoo.com/group/vantage/messages
>(3) To view links to Vendors that provide Vantage services goto: http://groups.yahoo.com/group/vantage/links
>
>Your use of Yahoo! Groups is subject to http://docs.yahoo.com/info/terms/
>
>
>
>
>

--
John Himebaugh, MIS
InterOcean Systems, Inc.
3540 Aero Court
San Diego, CA 92123
Voice: 858.565.8400
Fax: 858.268.9695




Useful links for the Yahoo!Groups Vantage Board are: ( Note: You must have already linked your email address to a yahoo id to enable access. )
(1) To access the Files Section of our Yahoo!Group for Report Builder and Crystal Reports and other 'goodies', please goto: http://groups.yahoo.com/group/vantage/files/.
(2) To search through old msg's goto: http://groups.yahoo.com/group/vantage/messages
(3) To view links to Vendors that provide Vantage services goto: http://groups.yahoo.com/group/vantage/links

Your use of Yahoo! Groups is subject to the Yahoo! Terms of Service.


[Non-text portions of this message have been removed]



Useful links for the Yahoo!Groups Vantage Board are: ( Note: You must have already linked your email address to a yahoo id to enable access. )
(1) To access the Files Section of our Yahoo!Group for Report Builder and Crystal Reports and other 'goodies', please goto: http://groups.yahoo.com/group/vantage/files/.
(2) To search through old msg's goto: http://groups.yahoo.com/group/vantage/messages
(3) To view links to Vendors that provide Vantage services goto: http://groups.yahoo.com/group/vantage/links

Your use of Yahoo! Groups is subject to http://docs.yahoo.com/info/terms/
I'm actually not sure of anything. But I would think that is would have a more logical name than " ". When I right-click properties it says its a folder "D:\Epic51", even though it's IN the D:\Epic51 folder. Also, from the server, it shows Zero (0) bytes in size. From a PC mapped to Epic51 is shows that it is 6 GB in size, which is also the size of the Epic51 folder -- almost like a mirror of the Epic51 folder (off by a few bytes).

Troy Funte
Liberty Electronics

----- Original Message -----
From: Jim Horton
To: vantage@yahoogroups.com
Sent: Thursday, November 14, 2002 7:46 AM
Subject: RE: [Vantage] [OT] odd 'virus-like' behavior


Dumb question, but are you sure your that file is not a "Virtual Memory" file? If it was, you could not delete it...

Jim Horton
Mol-Son, Inc.

-----Original Message-----
From: Troy Funte [mailto:tfunte@...]
Sent: Wednesday, November 13, 2002 9:35 PM
To: vantage@yahoogroups.com
Subject: Re: [Vantage] [OT] odd 'virus-like' behavior


John,
There is no scandisk that I know if in Windows2000server. We can't rename the file, delete it, or do anything to it. When I select properties, it says it's "D:\Epic51", and has zero (0) bytes even though it is located "in" the D:\epic51 folder. If I right-click properties from a PC to a mapped drive, it says it has 6GB today (yesterday it was 8GB), which matches what's in the Epic51 folder itself. It's almost like a mirror of the Epic51 folder.

Troy

----- Original Message -----
From: John Himebaugh
To: vantage@yahoogroups.com
Sent: Wednesday, November 13, 2002 7:44 PM
Subject: Re: [Vantage] [OT] odd 'virus-like' behavior


Troy,

Have you tried running scandisk to see if the FAT table is messed up.
In the old DOS days, if this happened you had reformat the drive.
Another thought would be to try to rename it and then see if you can
delete it using the new name.
.

My thoughts.



Troy Funte wrote:

>Todd,
> We did #1 and #2 to no avail. Rebooted the server and tried again. Still won't delete the file. I can see that I do need to lock down the Vantage directories better. Thanks.
>
>Troy
>
> ----- Original Message -----
> From: Todd Anderson
> To: 'vantage@yahoogroups.com'
> Sent: Wednesday, November 13, 2002 9:15 AM
> Subject: RE: [Vantage] [OT] odd 'virus-like' behavior
>
>
> Troy,
>
> A few thoughts ..
>
> (1) On your server - on the file in question ... right click / properties /
> security tab / ownership / "take ownership" ... then try deleting the file
>
> (2) Or ... from Server Manager - goto you epicor folder share - disconnect
> every connection ... when there are no connections to the folder /share ...
> then try deleting the file
>
> (3) Review your security on the entire epicor folder - with very few
> exceptions ALL folders and files should be read only to your network. The
> few exceptions depends on what version of Vantage you are running. I'd
> start with making EVERYTHING read only and see what works and what doesn't.
> Vantage support should also be able to give you a tech briefing describing
> the specific files that need to be read write. No one on your network
> should be able to create or copy new files into your epicor directory.
>
> Todd Anderson
>
> -----Original Message-----
> From: Troy Funte [mailto:tfunte@...]
> Sent: Tuesday, November 12, 2002 7:17 PM
> To: Vantage
> Subject: [Vantage] [OT] odd 'virus-like' behaviour
>
>
> I wonder if anyone can give me some help here...
>
> This afternoon I went to the mapped Epic51 folder on the server. Besides
> the usual four folders (Vantage, Progress, Vntgtrn, and Vntgsts), there were
> also three 'new' files. Two of them were shortcuts to a particular porn
> site. The shortcuts I could delete. The third file has no visible name. It
> just sits there. I can't delete it. I can't rename it. I can't change
> it's properties. From a PC mapped to the folder, if I right-click on it and
> select properties it says that it is a folder with 8.8GB of 2100 files in 7
> folders. This nearly matches (the size on disk bytes does not match) the
> information you get when you select properties on the Epic51 folder.
>
> We ran McAfee with the latest DAT on those folders/files but it says there
> is no virus. Does anyone have a clue what is going on and how to get rid of
> it?
>
> How these files got there I suspect a virus on a user's PC. How to get rid
> of the third file, I have no clue.
>
> Troy Funte
> Liberty Electronics
>
>
>
> [Non-text portions of this message have been removed]
>
>
> Useful links for the Yahoo!Groups Vantage Board are: ( Note: You must have
> already linked your email address to a yahoo id to enable access. )
> (1) To access the Files Section of our Yahoo!Group for Report Builder and
> Crystal Reports and other 'goodies', please goto:
> http://groups.yahoo.com/group/vantage/files/.
> <http://groups.yahoo.com/group/vantage/files/.>
> (2) To search through old msg's goto:
> http://groups.yahoo.com/group/vantage/messages
> <http://groups.yahoo.com/group/vantage/messages>
> (3) To view links to Vendors that provide Vantage services goto:
> http://groups.yahoo.com/group/vantage/links
> <http://groups.yahoo.com/group/vantage/links>
>
> Your use of Yahoo! Groups is subject to the Yahoo! Terms of Service
> <http://docs.yahoo.com/info/terms/> .
>
>
>
>
> [Non-text portions of this message have been removed]
>
>
> Useful links for the Yahoo!Groups Vantage Board are: ( Note: You must have already linked your email address to a yahoo id to enable access. )
> (1) To access the Files Section of our Yahoo!Group for Report Builder and Crystal Reports and other 'goodies', please goto: http://groups.yahoo.com/group/vantage/files/.
> (2) To search through old msg's goto: http://groups.yahoo.com/group/vantage/messages
> (3) To view links to Vendors that provide Vantage services goto: http://groups.yahoo.com/group/vantage/links
>
> Your use of Yahoo! Groups is subject to the Yahoo! Terms of Service.
>
>
>[Non-text portions of this message have been removed]
>
>
>Useful links for the Yahoo!Groups Vantage Board are: ( Note: You must have already linked your email address to a yahoo id to enable access. )
>(1) To access the Files Section of our Yahoo!Group for Report Builder and Crystal Reports and other 'goodies', please goto: http://groups.yahoo.com/group/vantage/files/.
>(2) To search through old msg's goto: http://groups.yahoo.com/group/vantage/messages
>(3) To view links to Vendors that provide Vantage services goto: http://groups.yahoo.com/group/vantage/links
>
>Your use of Yahoo! Groups is subject to http://docs.yahoo.com/info/terms/
>
>
>
>
>

--
John Himebaugh, MIS
InterOcean Systems, Inc.
3540 Aero Court
San Diego, CA 92123
Voice: 858.565.8400
Fax: 858.268.9695




Useful links for the Yahoo!Groups Vantage Board are: ( Note: You must have already linked your email address to a yahoo id to enable access. )
(1) To access the Files Section of our Yahoo!Group for Report Builder and Crystal Reports and other 'goodies', please goto: http://groups.yahoo.com/group/vantage/files/.
(2) To search through old msg's goto: http://groups.yahoo.com/group/vantage/messages
(3) To view links to Vendors that provide Vantage services goto: http://groups.yahoo.com/group/vantage/links

Your use of Yahoo! Groups is subject to the Yahoo! Terms of Service.


[Non-text portions of this message have been removed]



Useful links for the Yahoo!Groups Vantage Board are: ( Note: You must have already linked your email address to a yahoo id to enable access. )
(1) To access the Files Section of our Yahoo!Group for Report Builder and Crystal Reports and other 'goodies', please goto: http://groups.yahoo.com/group/vantage/files/.
(2) To search through old msg's goto: http://groups.yahoo.com/group/vantage/messages
(3) To view links to Vendors that provide Vantage services goto: http://groups.yahoo.com/group/vantage/links

Your use of Yahoo! Groups is subject to http://docs.yahoo.com/info/terms/



Useful links for the Yahoo!Groups Vantage Board are: ( Note: You must have already linked your email address to a yahoo id to enable access. )
(1) To access the Files Section of our Yahoo!Group for Report Builder and Crystal Reports and other 'goodies', please goto: http://groups.yahoo.com/group/vantage/files/.
(2) To search through old msg's goto: http://groups.yahoo.com/group/vantage/messages
(3) To view links to Vendors that provide Vantage services goto: http://groups.yahoo.com/group/vantage/links

Your use of Yahoo! Groups is subject to the Yahoo! Terms of Service.


[Non-text portions of this message have been removed]