RE: Backup Slow

2001-09-26 Thread Sankaranarayanan_Ganapathy

What abt LAN response ?

 --
 From: Dominick Romano[SMTP:[EMAIL PROTECTED]]
 Reply To: NT System Admin Issues
 Sent: Wednesday, September 26, 2001 9:01 PM
 To:   NT System Admin Issues
 Subject:  Backup Slow
 
 Hello, we backup our servers with a Dell DLT 7000 7 Slot Tape Drive, using
 Veritas Backup Exec. Ver. 8. For some strange reason it is taking double
 the amount of time to backup than it used to. Does anyone have any ideas?
 Thanks.
 
 Dominick Romano 
 Junior NT Administrator 
 Kravet Fabrics, Inc. 
 Tel:  516-293-2000 Ext: 637 
 Fax: 516-293-2158 
  mailto:[EMAIL PROTECTED] 
 
 Want to unsub? Do that here:
 http://www.w2knews.com/rd/rd.cfm?id=unsub
 Need a good FAQ? Try this one first:
 http://www.ultratech-llc.com/KB/
 
 

Want to unsub? Do that here:
http://www.w2knews.com/rd/rd.cfm?id=unsub
Need a good FAQ? Try this one first:
http://www.ultratech-llc.com/KB/




RE: Nimda issue

2001-09-24 Thread Sankaranarayanan_Ganapathy

HI,

 First diable TFTP by changing the line tftp 69/udp to tftp 0/udp in
services file located  drivers\etc  to avoids the spreading of virus .
 --
 From: James Costa[SMTP:[EMAIL PROTECTED]]
 Reply To: NT System Admin Issues
 Sent: Monday, September 24, 2001 12:30 PM
 To:   NT System Admin Issues
 Subject:  Nimda issue
 
 Hi guys.
 I'm new to this list.  Was wondering if anyone had a problem getting rid
 of the Nimda virus?  I use InoculateIT from Computer Associates as my
 virus scanner, with newest virus update.  I think I have a pretty secure
 machine, but that's only an opinion.  I speculate I was infected thru IIS,
 as I did not have any email with the readme.exe file, and I have already
 patched the MIME header problem.  Anyways, I noticed through my firewall
 that TFTP.EXE (Trivial FTP) was trying to gain access to the internet,
 about 32 times in the middle of the night in fact.  I did not give it
 explicit access, so it's basically in my machine and can't get out, if
 it's even still on here.  I noticed, however, from my firewall logs, that
 TFTP.EXE was trying to connect to local DSL routers, and all IP's that it
 was trying to connect to had the same first two octets, and always tried
 to connect from port 69.  I speculate this is the Nimda virus, from the
 way it is randomly scanning for more computers to infect.  TFTP.EXE is a
 listening app, I believe, that waits for a signal from RIS from a remote
 machine to re-install windows.  Has anyone had this similar problem?
 Maybe I am not clear enough, do I need to specify something?  Maybe I am
 just a monkey and you guys don't want to hear about my problems?  Well, I
 appreciate any attention in advance, and if this isn't appropriate for
 this list, do not hesitate to let me know.  Thanks.
  
 James Costa
  
 http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
 
 

http://www.sunbelt-software.com/ntsysadmin_list_charter.htm




RE: IIS disabled but proxy enabled? how to...

2001-09-19 Thread Sankaranarayanan_Ganapathy

Pls keep in mind this is a NT list before your comments,I,am also a fan of
linux but that does n't warrant such a comments in this list.

For your Information:

 Even Linux have lot of holes.



 --
 From: Rocky Stefano[SMTP:[EMAIL PROTECTED]]
 Reply To: NT System Admin Issues
 Sent: Wednesday, September 19, 2001 11:03 AM
 To:   NT System Admin Issues
 Subject:  RE: IIS disabled but proxy enabled?  how to...
 
 
 He has a point. Even a devout MS bigot has got to be pissed at the number
 of
 patches they have had to install over the last year. Not to mention how
 many
 applications don't work as advertised. If he can't do MS you're going to
 send him to a linux package?
 
 
 
 -Original Message-
 From: Kelly Borndale [mailto:[EMAIL PROTECTED]]
 Sent: September 19, 2001 1:20 AM
 To: NT System Admin Issues
 Subject: Re: IIS disabled but proxy enabled? how to...
 
 
 
 You may want to watch your attitude first off -this is an NT sys admin
 list,
 we all have jobs because we support MS products.
 
 There are plenty of free proxy servers and web servers.  Check out
 http://www.debian.org/ or any Linux site, as well.
 
 -K
 - Original Message -
 From: Matthew Western [EMAIL PROTECTED]
 To: NT System Admin Issues [EMAIL PROTECTED]
 Sent: Wednesday, September 19, 2001 12:23 AM
 Subject: IIS disabled but proxy enabled? how to...
 
 
  Hi People,
  We like the rest of the world are getting annoyed at microsnot.  How do
 i
  disable all web server IIS junk and keep the MX proxy enabled?  if i
 disable
  the IIS in services it kills proxy too...  i've already broken one proxy
  trying to do this.
  regards
  Matthew
 
 
 
  http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
 
 
 
 
 http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
 
 
 http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
 

http://www.sunbelt-software.com/ntsysadmin_list_charter.htm




W32/Nimda.A@mm

2001-09-19 Thread Sankaranarayanan_Ganapathy

Hi,

 Is any one having link for the any tool to remove W32/Nimda.A@mm worm.


shankar


http://www.sunbelt-software.com/ntsysadmin_list_charter.htm




RE: W32/Nimda.A@mm

2001-09-19 Thread Sankaranarayanan_Ganapathy

I need a tool like a FixSircam Version1.0 which was released by Symantec 

 --
 From: Stuart
 Pittwood[SMTP:[EMAIL PROTECTED]]
 Reply To: NT System Admin Issues
 Sent: Wednesday, September 19, 2001 4:57 PM
 To:   NT System Admin Issues
 Subject:  RE: W32/Nimda.A@mm
 
 Sophos and trend scanmail can remove this as I'm sure most of the AV
 software will be able to
 
 Stu
 
 -Original Message-
 From: Sankaranarayanan_Ganapathy [mailto:[EMAIL PROTECTED]]
 Sent: 19 September 2001 11:41
 To: NT System Admin Issues
 Subject: W32/Nimda.A@mm
 
 
 Hi,
 
  Is any one having link for the any tool to remove W32/Nimda.A@mm worm.
 
 
 shankar
 
 
 http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
 
 
 http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
 

http://www.sunbelt-software.com/ntsysadmin_list_charter.htm




RE: IIS disabled but proxy enabled? how to...

2001-09-19 Thread Sankaranarayanan_Ganapathy

My point is this is a  NTlist not an Linux list,where you have to give what
NT deserves,If you don't like my comment ignore it.

 --
 From: Rocky Stefano[SMTP:[EMAIL PROTECTED]]
 Reply To: NT System Admin Issues
 Sent: Wednesday, September 19, 2001 6:47 PM
 To:   NT System Admin Issues
 Subject:  RE: IIS disabled but proxy enabled?  how to...
 
 
 Yeah yeah stop crying. I run openbsd. Try hacking that with apache running
 on it. I use tons of MS software. I like a lot of it. I am simply stating
 what a lot of MS people hate to admit.
 
 
 
 -Original Message-
 From: Sankaranarayanan_Ganapathy [mailto:[EMAIL PROTECTED]]
 Sent: September 19, 2001 6:07 AM
 To: NT System Admin Issues
 Subject: RE: IIS disabled but proxy enabled? how to...
 
 
 
 Pls keep in mind this is a NT list before your comments,I,am also a fan of
 linux but that does n't warrant such a comments in this list.
 
 For your Information:
 
  Even Linux have lot of holes.
 
 
 
  --
  From:   Rocky Stefano[SMTP:[EMAIL PROTECTED]]
  Reply To:   NT System Admin Issues
  Sent:   Wednesday, September 19, 2001 11:03 AM
  To: NT System Admin Issues
  Subject:RE: IIS disabled but proxy enabled?  how to...
 
 
  He has a point. Even a devout MS bigot has got to be pissed at the
 number
  of
  patches they have had to install over the last year. Not to mention how
  many
  applications don't work as advertised. If he can't do MS you're going to
  send him to a linux package?
 
 
 
  -Original Message-
  From: Kelly Borndale [mailto:[EMAIL PROTECTED]]
  Sent: September 19, 2001 1:20 AM
  To: NT System Admin Issues
  Subject: Re: IIS disabled but proxy enabled? how to...
 
 
 
  You may want to watch your attitude first off -this is an NT sys admin
  list,
  we all have jobs because we support MS products.
 
  There are plenty of free proxy servers and web servers.  Check out
  http://www.debian.org/ or any Linux site, as well.
 
  -K
  - Original Message -
  From: Matthew Western [EMAIL PROTECTED]
  To: NT System Admin Issues [EMAIL PROTECTED]
  Sent: Wednesday, September 19, 2001 12:23 AM
  Subject: IIS disabled but proxy enabled? how to...
 
 
   Hi People,
   We like the rest of the world are getting annoyed at microsnot.  How
 do
  i
   disable all web server IIS junk and keep the MX proxy enabled?  if i
  disable
   the IIS in services it kills proxy too...  i've already broken one
 proxy
   trying to do this.
   regards
   Matthew
  
  
  
   http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
  
  
 
 
  http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
 
 
  http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
 
 
 http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
 
 
 http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
 

http://www.sunbelt-software.com/ntsysadmin_list_charter.htm




RE: SirC32 lots of them viruses found

2001-09-17 Thread Sankaranarayanan_Ganapathy

The type of files that can be scanned can be configured can be configured in
Inoculan

 --
 From: Geoff Waycik[SMTP:[EMAIL PROTECTED]]
 Reply To: NT System Admin Issues
 Sent: Monday, September 17, 2001 9:41 PM
 To:   NT System Admin Issues
 Subject:  RE: SirC32 lots of them viruses found
 
 I had several servers with the same problem using Inoculan for Exchange
 Server.  The problem was that only certain file types are scanned (.exe,
 .com, .bat, etc. . .) and on my servers .lnk and .pif were not scanned,
 two
 file type of which Sircam tries to send viruses as.
 
 -Original Message-
 From: Said Samman [mailto:[EMAIL PROTECTED]]
 Sent: Monday, September 17, 2001 11:22 AM
 To: NT System Admin Issues
 Subject: SirC32 lots of them viruses found
 
 
 
 I'm getting Lots of SirC32.exe viruses found on win98 and W2K stations
 
 File Path: C:\RECYCLED\SirC32.exe
 
 Also many of those .tmp infected files on my Norton AntiVirus Corporate
 Edition Server
 installed on NT4 SP6a
 
 File Path: C:\WINNT\Temp\APQ115.tmp
 File Path: C:\WINNT\Temp\APQ75.tmp
 File Path: C:\WINNT\Temp\APQ17E.tmp
 
 I looked everywhere and can't find any particular reason for repeated
 infections
 
 My mail server is protected by a mail scanner
 
 
 Did anybody see this before.
 
 
 Said Samman
 [EMAIL PROTECTED]
 416.966.4000
 
 
 
 
 http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
 
 
 http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
 

http://www.sunbelt-software.com/ntsysadmin_list_charter.htm




RE: SirC32 lots of them viruses found

2001-09-17 Thread Sankaranarayanan_Ganapathy

Have you installed NTdriverupdate for Inoculan particularly for NT platform.


 --
 From: Horst Hinz[SMTP:[EMAIL PROTECTED]]
 Reply To: NT System Admin Issues
 Sent: Monday, September 17, 2001 10:28 PM
 To:   NT System Admin Issues
 Subject:  RE: SirC32 lots of them viruses found
 
 You can set which files to scan, I've set mine to scan for all file types.
 My problem is that inoculam stops working all the time on my server and I
 need to reboot the server to make it work again... what a pain in the but
 this software is.
 
 -Original Message-
 From: Geoff Waycik [mailto:[EMAIL PROTECTED]]
 Sent: Monday, September 17, 2001 9:12 AM
 To: NT System Admin Issues
 Subject: RE: SirC32 lots of them viruses found
 
 
 I had several servers with the same problem using Inoculan for Exchange
 Server.  The problem was that only certain file types are scanned (.exe,
 .com, .bat, etc. . .) and on my servers .lnk and .pif were not scanned,
 two
 file type of which Sircam tries to send viruses as.
 
 -Original Message-
 From: Said Samman [mailto:[EMAIL PROTECTED]]
 Sent: Monday, September 17, 2001 11:22 AM
 To: NT System Admin Issues
 Subject: SirC32 lots of them viruses found
 
 
 
 I'm getting Lots of SirC32.exe viruses found on win98 and W2K stations
 
 File Path: C:\RECYCLED\SirC32.exe
 
 Also many of those .tmp infected files on my Norton AntiVirus Corporate
 Edition Server
 installed on NT4 SP6a
 
 File Path: C:\WINNT\Temp\APQ115.tmp
 File Path: C:\WINNT\Temp\APQ75.tmp
 File Path: C:\WINNT\Temp\APQ17E.tmp
 
 I looked everywhere and can't find any particular reason for repeated
 infections
 
 My mail server is protected by a mail scanner
 
 
 Did anybody see this before.
 
 
 Said Samman
 [EMAIL PROTECTED]
 416.966.4000
 
 
 
 
 http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
 
 
 http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
 
 http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
 

http://www.sunbelt-software.com/ntsysadmin_list_charter.htm




OT:Advance Part of Marines land in Pakistan

2001-09-15 Thread Sankaranarayanan_Ganapathy

Reports of US troops landing in Pakistan are seenin Indian and Pakistan
Media .See the link for details

http://www.hinduonnet.com/holnus/01151603.htm



http://www.sunbelt-software.com/ntsysadmin_list_charter.htm




RE: NewYork Terrorist Attack

2001-09-11 Thread Sankaranarayanan_Ganapathy

Most possible culprit could be Osma bin laden afghan based terrorist,bcoz of
the kind of resources used or  it could be any one from within America

 --
 From: Phillips, Glen[SMTP:[EMAIL PROTECTED]]
 Reply To: NT System Admin Issues
 Sent: Tuesday, September 11, 2001 9:18 PM
 To:   NT System Admin Issues
 Subject:  RE: NewYork Terrorist Attack
 
 Apparently some Palestinian organisation has claimed responsibility. The
 Islamic groups have denied it all.
  
  
   -Original Message-
   From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED]]
   Sent: Tuesday, 11 September 2001 16:43
   To: NT System Admin Issues
   Subject: RE: NewYork Terrorist Attack
 
 
   You can't retaliate for the sake of retaliating.  It could be
 Americans.  
   -Original Message-
   From: David James [mailto:[EMAIL PROTECTED]]
   Sent: Tuesday, September 11, 2001 8:45 AM
   To: NT System Admin Issues
   Subject: RE: NewYork Terrorist Attack
 
 
   I don't mean to promote war, but we as a country HAVE to
 retaliate to this...
   F00k the 3rd world countries that harbor terrorists...
   -Original Message-
   From: Mal Sasalu [mailto:[EMAIL PROTECTED]]
   Sent: Tuesday, September 11, 2001 10:33 AM
   To: NT System Admin Issues
   Subject: RE: NewYork Terrorist Attack
 
 


   I watched over the television. The structures of
 both north and south towers of WTO came down with a huge blast and now
 they are basically a heap of rubble.
   -Original Message-
   From: Rogers, Jeff L (OM)
 [mailto:[EMAIL PROTECTED]]
   Sent: Tuesday, September 11, 2001 9:30 AM
   To: NT System Admin Issues
   Subject: RE: NewYork Terrorist Attack

   Could you confirm either more or less whether the
 structures are basically now grade level? 
   -Original Message- 
   From: Roman Bogdanov [ mailto:[EMAIL PROTECTED]] 
   Sent: Tuesday, September 11, 2001 10:24 
   To: NT System Admin Issues 
   Subject: RE: NewYork Terrorist Attack 

   Im about 40 blocks from the towers and we were all
 told we can go home 
   but all the bridges and subways are closed so here i
 am trying to figure 
   out a way to get to brooklyn. 
   Roman Bogdanov 
   Head of IT Support 
   Jnana Technologies Corp. 
   www.jnana.com 
   212-560-9151 ext. 202 
   212-560-9066 fax 

   -Original Message- 
   From: Richard Newton Jr. [
 mailto:[EMAIL PROTECTED]] 
   Sent: Tuesday, September 11, 2001 11:24 AM 
   To: NT System Admin Issues 
   Subject: RE: NewYork Terrorist Attack 

   Us in Jersey City, NJ (just across the water) were
 evacuated and sent 
   home. 
   Its going to be a long day for all. 
   -Original Message- 
   From: Jeff Pace [ mailto:[EMAIL PROTECTED]] 
   Sent: Tuesday, September 11, 2001 11:26 AM 
   To: NT System Admin Issues 
   Subject: RE: NewYork Terrorist Attack 

   and it doesn't seem to be over yet. 
   Jeff 
   -Original Message- 
   From: Andrew Baker [ mailto:[EMAIL PROTECTED]] 
   Sent: Tuesday, September 11, 2001 8:19 AM 
   To: NT System Admin Issues 
   Subject: RE: NewYork Terrorist Attack 

   This is an incredibly tragic day. 
   Probably the most tragic for the US since the
 assassination of JFK 
 
   - ASB 
 

   -Original Message- 
   From: Richard McMahon [
 mailto:[EMAIL PROTECTED]] 
   Sent: Tuesday, September 11, 2001 11:07 AM 
   To: NT System Admin Issues 
   Subject: NewYork Terrorist Attack 

   Check out this link. 
   
 

RE: Afgan

2001-09-11 Thread Sankaranarayanan_Ganapathy

This is one of the civil wars were US sowed the seeds of terrorism at
afghanistan  for its fight against Communism.After the harvest is reaped
,The same fields have now  become full of weeds like OSMA BIN LADEN as a
result of  which now there are  more destruction to the US, Russia
(Chechenya) China(Xinjiang),EGYPT(Lowers parts of Nile
Valley),INDIA(Kashmir) with the weeds now spreading to the nieghbouring
fields of Pakistan . CHINA,RUSSIA and the other CIS states(Called Shanghai
Five) have formed a group to fight against Taliban which is one of the trees
propping  these weeds.India  along with shangai group is now trying to prop
UP Northern Alliance in afgahnisthan headed by AhmedShah Masood an Moderate
democratic  against the fight with Taliban after an Indian  plane was
hijacked last year from Kathmandu.Peshawar in pakistan is now the important
centre for all the major terrorist groups around the world actively
supported by Pakistan Intelligence agencies ISI * in bid to make India
bleeding.


   US turned blind eye for the following facts

ISI is known as  Inter Services Intelligence brain child of CIA  for it's
fight against USSR in afghanisthan which operates independent of Pakistan
goverment with it's own unaccounted  secret budget and by drug money got
peddeling drugs from Afghanistan .
 
US was unhappy that the  countries like China  Russia coming together for
the fight against Terrorism and turned a blind eye to the request from those
countries.


Threatening against INDIA when it tried to carry air strikes in the
terrorist camps in pakistan which are used by terrorist group for their
activities in India.
 
   Everyone gets wise with Experience.


If the attack is carried out by bin laden ,then there is a possibility that
nationals from pakistan or Arab nations may be involved.


 
 --
 From: Decker, Jeff[SMTP:[EMAIL PROTECTED]]
 Reply To: NT System Admin Issues
 Sent: Wednesday, September 12, 2001 4:58 AM
 To:   NT System Admin Issues
 Subject:  RE: Afgan
 
 Just a civil war.  The US had nothing to do with it. 
 
 -Original Message- 
 From: David N. Precht [ mailto:[EMAIL PROTECTED]] 
 Sent: Tuesday, September 11, 2001 6:30 PM 
 To: NT System Admin Issues 
 Subject: RE: Afgan 
 
 
 Confirmed ? 
 
 -Original Message- 
 From: [EMAIL PROTECTED] [ mailto:[EMAIL PROTECTED]] 
 Sent: Tuesday, September 11, 2001 18:10 
 To: NT System Admin Issues 
 Subject: RE: Afgan 
 
 
 
 I also heard a radio report that Baghdad and Belgrade are under attack. 
 
 
 
 Gordon Olson 
 golson@rsd-tTo: NT System Admin Issues 
 c.com 
 [EMAIL PROTECTED] 
  cc: 
 09/11/2001   Subject: RE: Afgan 
 03:01 PM 
 Please 
 respond to 
 NT System 
 Admin Issues 
 
 
 
 
 anyone else see anything? 
  -Original Message- 
  From: Kevin Miller [ mailto:[EMAIL PROTECTED]] 
  Sent: Tuesday, September 11, 2001 3:05 PM 
  To: NT System Admin Issues 
  Subject: Afgan 
 
  I am seeing missile fire in afghan on CNN?? what do we know? 
  http://www.sunbelt-software.com/ntsysadmin_list_charter.htm 
 http://www.sunbelt-software.com/ntsysadmin_list_charter.htm 
 
 
 
 
 http://www.sunbelt-software.com/ntsysadmin_list_charter.htm 
 
 
 
 _ 
 
 Do You Yahoo!? 
 
 Get your free @yahoo.com address at http://mail.yahoo.com 
 
 
 
 
 http://www.sunbelt-software.com/ntsysadmin_list_charter.htm 
 
 http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
 
 

http://www.sunbelt-software.com/ntsysadmin_list_charter.htm




RE: Removal of computer accts

2001-09-05 Thread Sankaranarayanan_Ganapathy

Is there is any option by tweaking the registry.Invalid accts are those
which are not used over a period of time(customizable)

 --
 From: Andrew Baker[SMTP:[EMAIL PROTECTED]]
 Reply To: NT System Admin Issues
 Sent: Wednesday, September 05, 2001 7:56 PM
 To:   NT System Admin Issues
 Subject:  RE: Removal of computer accts
 
 What would you consider an Invalid account, and what would happen if it
 was
 removed (automatically) by mistake?
 
 You could always script something with NETDOM
 
  
 - ASB
  
 
 
 -Original Message-
 From: Sankaranarayanan_Ganapathy [mailto:[EMAIL PROTECTED]]
 Sent: Wednesday, September 05, 2001 10:21 AM
 To: NT System Admin Issues
 Subject: Removal of computer accts
 
 
 Hi,
 
   Is any one in the list aware of any methods for the removal of invalid
 computer accounts from the servermanager  automatically other than
 manually
 deleting the same from the server manager in an NT4.0 domain environment.
 
 
 Thanks in advance.
 
 
 
 http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
 

http://www.sunbelt-software.com/ntsysadmin_list_charter.htm




RE: STRANGE undeletable directory

2001-08-17 Thread Sankaranarayanan_Ganapathy

Is perl is installed on the said IIS server then there is a possibility.

shankar


 --
 From: Bunting, Jeff[SMTP:[EMAIL PROTECTED]]
 Reply To: NT System Admin Issues
 Sent: Friday, August 17, 2001 8:01 PM
 To:   NT System Admin Issues
 Subject:  RE: STRANGE undeletable directory
 
 No, you misunderstood; I'm not trying to remove a directory.  I was trying
 to figure out *how* they are created.  If you look at the log xylog
 posted:
 
 07:55:14 217.128.73.112 [11]MKD com1.scanned.by.zog+++/+++/ 257
 
 it appears an anonymous FTP user created this directory.  I was
 experimenting on a couple of machines here but couldn't get them to create
 a
 directory that starts with com1.  Jason showed me how to do it from a
 command line, but that doesn't work via FTP.  I tried some variations on
 it
 but haven't hit on anything yet.
 
 Jeff
 
 -Original Message-
 From: Kevin Lundy [mailto:[EMAIL PROTECTED]]
 Sent: Friday, August 17, 2001 10:20 AM
 To: NT System Admin Issues
 Subject: RE: STRANGE undeletable directory
 
 
 Did you try the POSIX utility rm.exe from the resource kit?
 
 If you don't solve it soon, I've got a coworker who has solved it in the
 past with an old utility.  I'll ask him when he gets in later.
 
 -Original Message-
 From: Bunting, Jeff [mailto:[EMAIL PROTECTED]]
 Sent: Friday, August 17, 2001 10:10 AM
 To: NT System Admin Issues
 Subject: RE: STRANGE undeletable directory
 
 
 Thanks!  I'd tried several variations but hadn't come up with that one
 yet.
 Have you got a trick to do it via FTP?
 
 Jeff
 
 -Original Message-
 From: Hodson, Jason [mailto:[EMAIL PROTECTED]]
 Sent: Friday, August 17, 2001 9:58 AM
 To: NT System Admin Issues
 Subject: RE: STRANGE undeletable directory
 
 
 md \\.\c:\com1
  
 to remove:
  
 rd \\.\c:\com1
 
 -Original Message-
 From: Bunting, Jeff [mailto:[EMAIL PROTECTED]]
 Sent: Friday, August 17, 2001 9:36 AM
 To: NT System Admin Issues
 Subject: RE: STRANGE undeletable directory
 
 
 That is interesting; I can't seem to be able to create a directory that
 starts with com1 by any normal means.
 -Original Message-
 From: xylog [mailto:[EMAIL PROTECTED]]
 Sent: Thursday, August 16, 2001 5:16 PM
 To: NT System Admin Issues
 Subject: Re: STRANGE undeletable directory
 
 
 Just FYI these log entries are from a Windows 2KS running IIS 5.0
 
 xylog
 - Original Message - 
 From: Bunting, Jeff 
 To: NT System Admin Issues 
 Sent: Thursday, August 16, 2001 4:34 PM
 Subject: RE: STRANGE undeletable directory
 
 
 This is what I was talking about earlier when it was suggested the server
 was hacked because of the funny directory names.  I was speculating there
 might be a way to create those directories with the normal permissions
 given
 to the anonymous account in a write enabled directory.  The original post
 about the server with the aux directory could very well have been
 hacked,
 I just wasn't sure if the presence of those directories in a public FTP
 folder was enough evidence to jump to that conclusion without looking at
 the
 logs.
 
 I did some experimenting and found I can't create the
 com1.scanned.by.zog+++/+++/ directory under IIS5.  Perhaps it can be
 done
 in IIS4?  I'm running Serv-U FTP on all of the IIS4 machines so I can't
 test
 it there.  The +++COM2 and null.upload are legal though and can be
 deleted by normal means.
 
 On a related note, I've been getting some of the same people connecting to
 my server, some warez guys from France.  I was watching their activity
 closely for awhile because they don't have download permissions from the
 uploads directory yet they continued to upload files which didn't make a
 lot
 of sense to me.  I saw attempts at downloading, but nothing to indicate
 they
 were successful or coming in by other means, so I've just started banning
 their ip ranges because I'm tired of cleaning up all of the garbage on the
 ftp site.
 
 Jeff
 -Original Message-
 From: xylog [mailto:[EMAIL PROTECTED]]
 Sent: Thursday, August 16, 2001 3:08 PM
 To: NT System Admin Issues
 Subject: Fw: STRANGE undeletable directory
 
 
 OK here is one with the undeletable directory. The last one was just
 plain
 dirs:
 
 #Fields: time c-ip cs-method cs-uri-stem sc-status 
 07:53:08 217.128.73.112 [10]USER anonymous 331
 07:53:08 217.128.73.112 [10]PASS [EMAIL PROTECTED] 230
 07:53:32 217.128.73.112 [11]USER anonymous 331
 07:53:32 217.128.73.112 [11]PASS [EMAIL PROTECTED] 230
 07:54:29 217.128.73.112 [11]MKD Tagged+By+Gru+++/+++/ 257
 07:54:42 217.128.73.112 [11]MKD Tagged+By+Gru+++/+++Board/ 257
 07:55:14 217.128.73.112 [11]MKD com1.scanned.by.zog+++/+++/ 257
 NOTICE com1
 07:55:31 217.128.73.112 [11]MKD com1.scanned.by.zog+++/+++COM2/ 257
 COM2
 07:55:54 217.128.73.112 [11]MKD null.upload.by.derfy+++/+++/ 257
 dont know what this null thingy is
 07:56:11 217.128.73.112 [11]MKD null.upload.by.derfy+++/+++COM1/ 257
 07:56:29 217.128.73.112 [11]MKD 

RE: Very slow logon with Multiple Nics

2001-08-16 Thread Sankaranarayanan_Ganapathy

You can do so by NIC teaming which has to be supported by the Driver of that
card.

 --
 From: Ray Zorz[SMTP:[EMAIL PROTECTED]]
 Reply To: NT System Admin Issues
 Sent: Thursday, August 16, 2001 6:38 PM
 To:   NT System Admin Issues
 Subject:  RE: Very slow logon with Multiple Nics
 
 Isn't there a way to combine Nics for load balancing and/or better
 throughput? I forget the term for that. 
 
 -Original Message- 
 From: Kevin Miller [ mailto:[EMAIL PROTECTED]] 
 Sent: Thursday, August 16, 2001 9:00 AM 
 To: NT System Admin Issues 
 Subject: RE: Very slow logon with Multiple Nics 
 
 
 Why on Earth do you have 4 nics? That would be a much better way to 
 start, 
 
 Kevinm 
 ~~~ 
 All spelling and Factual errors are the fault of Bob Barker 
 ~~~ 
 please respond back to rent this ad space for your needs 
 
 
 -Original Message- 
 From: Timothy Lowery [ mailto:[EMAIL PROTECTED]] 
 Sent: Thursday, August 16, 2001 5:56 AM 
 To: NT System Admin Issues 
 Subject: Very slow logon with Multiple Nics 
 
 
 Doing a small Windows 2000 installation with 4 servers.  2 of the 
 servers have 4 NICs installed.  Haven't done any tweaking beyond 
 dropping the OS on the machines.  The two machines with the multiple 
 cards take almost an hour for the logon process to complete.  What could 
 be causing this problem? 
 
 Please email any response to [EMAIL PROTECTED]  My access to the 
 Internet is somewhat limited in the field, but I can get my email. 
 
 Thanks, 
 
 tim 
 
 http://www.sunbelt-software.com/ntsysadmin_list_charter.htm 
 
 
 http://www.sunbelt-software.com/ntsysadmin_list_charter.htm 
 
 http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
 
 

http://www.sunbelt-software.com/ntsysadmin_list_charter.htm




RE: Very slow logon with Multiple Nics

2001-08-16 Thread Sankaranarayanan_Ganapathy

yes ,we need to have the same

shankar

 --
 From: Kevin Miller[SMTP:[EMAIL PROTECTED]]
 Reply To: NT System Admin Issues
 Sent: Thursday, August 16, 2001 10:05 PM
 To:   NT System Admin Issues
 Subject:  RE: Very slow logon with Multiple Nics
 
 But the teaming is something that you had have third part drivers for
 from the nic builder right?
 
 Kevinm
 ~~~
 All spelling and Factual errors are the fault of Bob Barker
 ~~~
 please respond back to rent this ad space for your needs
 
 
 -Original Message-
 From: Spencer Kent [mailto:[EMAIL PROTECTED]] 
 Sent: Thursday, August 16, 2001 6:36 AM
 To: NT System Admin Issues
 Subject: RE: Very slow logon with Multiple Nics
 
 
 You can implement this in W2K. I have 2 NICS in all
 my production servers. They are teamed but could be
 configured as fault tolerant.
 Kent
 
 --- Ray Zorz [EMAIL PROTECTED] wrote:
  ok. Just throwing it out as a possible explanation
  why they have 4 nics,
  although I would think some of these solutions would
  work by now in w2k:
   
 
 http://www.win2000mag.com/Articles/Index.cfm?ArticleID=3957
 
 http://www.win2000mag.com/Articles/Index.cfm?ArticleID=3957
  
  
  -Original Message-
  From: Kevin Miller
  [mailto:[EMAIL PROTECTED]]
  Sent: Thursday, August 16, 2001 9:10 AM
  To: NT System Admin Issues
  Subject: RE: Very slow logon with Multiple Nics
  
  
  That is generally a hardware based solution. it is
  not really supported with
  win2k software.
   
   
  Kevinm
  ~~~
  All spelling and Factual errors are the fault of Bob
  Barker
  ~~~
  please respond back to rent this ad space for your
  needs
  
  -Original Message-
  From: Ray Zorz [mailto:[EMAIL PROTECTED]]
  Sent: Thursday, August 16, 2001 6:09 AM
  To: NT System Admin Issues
  Subject: RE: Very slow logon with Multiple Nics
  
  
  
  Isn't there a way to combine Nics for load balancing
  and/or better
  throughput? I forget the term for that.
  
  -Original Message-
  From: Kevin Miller [
  mailto:[EMAIL PROTECTED]
  mailto:[EMAIL PROTECTED] ] 
  Sent: Thursday, August 16, 2001 9:00 AM 
  To: NT System Admin Issues 
  Subject: RE: Very slow logon with Multiple Nics 
  
  
  Why on Earth do you have 4 nics? That would be a
  much better way to
  start, 
  
  Kevinm
  ~~~ 
  All spelling and Factual errors are the fault of Bob
  Barker 
  ~~~ 
  please respond back to rent this ad space for your
  needs 
  
  
  -Original Message-
  From: Timothy Lowery [
  mailto:[EMAIL PROTECTED]
  mailto:[EMAIL PROTECTED] ] 
  Sent: Thursday, August 16, 2001 5:56 AM 
  To: NT System Admin Issues 
  Subject: Very slow logon with Multiple Nics 
  
  
  Doing a small Windows 2000 installation with 4
  servers.  2 of the
  servers have 4 NICs installed.  Haven't done any
  tweaking beyond 
  dropping the OS on the machines.  The two machines
  with the multiple 
  cards take almost an hour for the logon process to
  complete.  What could 
  be causing this problem? 
  
  Please email any response to [EMAIL PROTECTED]  My
  access to the
  Internet is somewhat limited in the field, but I can
  get my email. 
  
  Thanks,
  
  tim
  
 
 http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
 
 http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
   
  
  
 
 http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
 
 http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
   
  
 
 http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
  
  
 
 http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
  
  
  
  
 
 http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
  
  
 
 
 __
 Do You Yahoo!?
 Make international calls for as low as $.04/minute with Yahoo! Messenger
 http://phonecard.yahoo.com/
 
 http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
 
 
 http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
 

http://www.sunbelt-software.com/ntsysadmin_list_charter.htm