iis security: For some reason all of the BIN folder in any IIS virtual servers are
being hidden automatically. I don't mean hidden from the .net
application, but simply hidden. They are visible only via FTP or
command prompt, but not explorer (regardless of folder options.)

There have been no changes made to IIS or directories in the past few
days, and it started this morning.

Any ideas as to what is going on here? Sound like a virus?

also, if the bin directory is removed, and a new one created, the new
one is instantly hidden as well.

update: ANY bin directory anywhere on the server is hidden instantly

windows 2003 server

a backdoor (hacdef) was found... so this is the result of someone with
malicious intent... so now the question is, how could they do that?

wow! so they configure the OS not to display /bin folder?
how? no idea. if you still have all the logging, firewall/proxy/IDS/event
viewer/iis/ etc log, then you can slowly analyze to see any suspicious
trace. but this would be quite tough

--
Regards,
Bernard Cheah
http://www.iis-resources.com/
http://www.iiswebcastseries.com/
http://msmvps.com/blogs/bernard/


[quoted text, click to view]

For .net framework installed web, the folder is protected.
For ftp site, I can't repro you claim. I created a 'bin' folder and I can
see it via ftp.exe and my IE

--
Regards,
Bernard Cheah
http://www.iis-resources.com/
http://www.iiswebcastseries.com/
http://msmvps.com/blogs/bernard/


[quoted text, click to view]