🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: alt.comp.virus
Article #447

Help: NT File has been moved or removed???

#447
From: Allisan Tucker
Date: Tue, 03 Jun 1997 00:00
52 lines
3488 bytes
My Harddrive has a hole in it � Can you help
Help: NT File has been moved or removed???

We are running WinNT 4.0 SP1 i386 and are having the weirdest of problems.
Folders are being wiped out for no know reason, one minute they are there �
then they are not.  At first you can see the folders listed in the tree,
but when you tap on it, you get the message "File has been moved or
removed"

History
May 29 10:00 first reported case of lost directories
May 29 14:00 2nd & 3rd reported cases of lost directories
May 29 16:00 MS called � they said it was a virus
May 29 17:30 Tried to update McAfee Net Shield � McAfee's directory
disappears
May 29 20:00 Load and run McAfee NetShield � find only concept virus.  But
one file is not accessible, as the path name is too long.  Its name is made
up of 50+ "Z"s followed by 50+ "R"s
May 30 2:00 Called McAfee who tell me that my symptoms did not sound like
any virus that they know of.
May 30 3:30 Called Dr Solomon who confirmed McAfee's report.
May 30 5:00 MS said to run chkdsk to see if any problems were found and
fixed.  Some issues were found, but no clear relation discovered.
May 30 8:00 Data restored from tape
Jun 2 14:00 More files missing

Our system config:
1.	AST Manhattan Server with 1 P90 processor
2.	3 Seagate Hawk 2 GB & 2 Quantum 2 GB arrayed on a hot swap NCR SCSI
controller.
3.	48 MB Memory ECC � AST (IBM) proprietary
4.	The file server also running a 110 user cc:Mail post-office and spooling
for three printers (HP4 off LPT1 and HP5P & HP Deskjet500 via TCP/IP print
services)
5.	Server is a BDC with single line RAS access via a second PC.
6.	NAC is a 3com900 PCI
7.	Protocol � NetBEUI
8.	Network also has WAN connection to Corp and various other offices & LAN
connection to a Novel 4.1 domain.
9.	We have 60 active users (connecting Win95 for file sharing)

Security includes:
1.	McAfee NetShield
2.	No application install or running on the server.
3.	Access limited to PC Support team only
4.	Password change monthly
5.	Software disk striping with parity on shared NTFS directory that is 80%
compressed
6.	Free space is keep at 100mb or greater (usually about 250mb)
7.	Very limited floppy drive access
8.	No access to root directories
Technical Details
Message-ID: <01bc6fce$724371a0$7b0ff5cf@tor-st0>
Path: arc1-ca.pugleaf.net!unknown!not-for-mail

Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII
X-Google-Thread: fa2c1,8060c42a76a3837,start
X-Google-Attributes: gidfa2c1,public
X-Google-Thread: fb9cd,8060c42a76a3837,start
X-Google-Attributes: gidfb9cd,public
X-Google-Thread: fa335,8060c42a76a3837,start
X-Google-Attributes: gidfa335,public
X-Google-Thread: f782f,8060c42a76a3837,start
X-Google-Attributes: gidf782f,public
X-Google-Thread: f977f,8060c42a76a3837,start
X-Google-Attributes: gidf977f,public
X-Google-Thread: 112912,8060c42a76a3837,start
X-Google-Attributes: gid112912,public
X-Google-Thread: 115e93,8060c42a76a3837,start
X-Google-Attributes: gid115e93,public
X-Google-Thread: fcd68,8060c42a76a3837,start
X-Google-Attributes: gidfcd68,public
From: "Allisan Tucker" <tks_st@pathcom.com>
Subject: Help: NT File has been moved or removed???
Date: 1997/06/03
Message-ID: <01bc6fce$724371a0$7b0ff5cf@tor-st0>
X-Deja-AN: 245906094
Organization: A poorly-installed InterNetNews site
Newsgroups: alt.comp.virus,comp.os.ms-windows.nt,comp.os.ms-windows.nt.admin.misc,comp.os.ms-windows.nt.admin.networking,comp.os.ms-windows.nt.admin.networks,comp.os.ms-windows.nt.admin.security,comp.os.ms-windows.nt.misc,cz.comp.windows.nt,fj.os.windows-nt