[thelist] Files being overwritten by encrypted garbage

[CDitty]

Are you running Cold Fusion? There was a security update recently about 
being able to overwrite files and set them to 0 length.

CDitty

At 04:16 PM 7/23/2001 -0400, you wrote:
>Hi :)
>
>I am running a Win2K server with IIS 5.0 and files keep getting 
>overwritten by encrypted garbage and some of them lose all their size 
>going down to 0 KB.
>
>Here's an example of the code from an overwritten .html file:
>
>INDX(   %1E.    .       (   à.  è.      . . r Á..   f           É‘    . h X
>    ¢‘    . ÐüüAÙßÀ.0P¬Æ-ÌÀ.ˆ}|“â.Á.´÷¢cB.Á.0.      /.              ..d e 
> v i o u s . w a v Ê‘    . p Z     ¢‘    . °T.BÙßÀ.°WGÇ-ÌÀ.ð.†“â.Á.´÷¢cB.Á.0.
>    /.              ..d i f f r n c e . w a v       Ë‘    . p 
> Z     ¢‘    . ¬.BÙßÀ.`jÊÇ-ÌÀ.X“â.Á.´÷¢cB.Á.0.      /.              ..d 
> i r e p e r l . w a v       Ì‘    . p Z     ¢‘    . 
> p“%BÙßÀ.Àû;É-ÌÀ.Üg§“â.Á.´÷¢cB.Á.0.
>/.              ..d o n t c o m p . w a v       Í‘    . h T     ¢‘    . 
>@Ä3BÙßÀ.TäÊ-ÌÀ.º¡Á“â.Á.´÷¢cB.Á.0.      /.                      .d o u b t 
>. w a v
>    Α    . p Z     ¢‘    .  .BBÙßÀ.àß”Ë-ÌÀ."+Ë“â.Á.´÷¢cB.Á.0.      /.
>        ..d r e a d f u l . w a v       Ï‘    . p Z     ¢‘    .
>tPBÙßÀ.°š       Ì-ÌÀ.ÂPñ“â.Á..Z¥cB.Á.0.      /.              ..d s n t c o 
>m p . w a v       Б    . h X     ¢‘    . àéYBÙßÀ. âèÍ-ÌÀ.F( 
>”â.Á..Z¥cB.Á.0.      /.              ..d u l l j o b . w a v Ñ‘    . h 
>V     ¢‘    . ÀAhBÙßÀ. .±Î-ÌÀ.æM/”â.Á..Z¥cB.Á.0.      /.
>.d u . e s s . w a v   Ò‘    . h 
>V     ¢‘    .  ™vBÙßÀ.ÀM4Ï-ÌÀ.j%G”â.Á..Z¥cB.Á.0.      /.
>.e n e r g y . w a v   Ó‘    . p Z     ¢‘    . €€‚BÙßÀ. 
>s:Ð-ÌÀ.îü^”â.Á..Z¥cB.Á.0.      /.              ..e v i l c o n t . w a v
>   Ô‘    . p Z     ¢‘    . `ؐBÙßÀ. ë×Ð-ÌÀ.Ž"
”â.Á..Z¥cB.Á.0.      /.
>       ..e x c u s e m e . w a v       Õ‘    . p Z     ¢‘    . 
> @¿œBÙßÀ.@*bÑ-ÌÀ..H«”â.Á..Z¥cB.Á.0.      /.              ..f l e s h b l d 
> . w a v       Ö‘    . p Z     ¢‘    .  ¦¨BÙßÀ.à.·Ò-ÌÀ.­Ñ´”â.Á..Z¥cB.. 0.
>/.              ..f l y n g s c r . w a v       ב    . p Z     ¢‘    .
>´BÙßÀ.мÓ-ÌÀ..©Ì”â.Á.l¼§cB.Á.0.      /.              ..f o o l p r o f . 
>w a v       Ø‘    . h X     ¢‘    . 
>àsÀBÙßÀ.žrÔ-ÌÀ.‚2Ö”â.Á.l¼§cB.Á.0.      /.              ..g h a s t l y . 
>w a v Ù‘    . h X     ¢‘    . ÀZÌBÙßÀ.@@óÔ-ÌÀ..
>î”â.Á.l¼§cB.Á.0.      /.              ..g h o s t l y . w a v Ú‘    . p Z
>  ¢‘    .  ²ÚBÙßÀ.P™»Õ-ÌÀ.Šá.•â.Á.l¼§cB.Á.0.      /.              ..g o o 
> d c h a r .
>
>
>Could this be a virus??
>Thanks for any help
>Jill Chmielewski
>
>p.s.  Running McAfee hasn't picked up any viruses.
>
>_________________________________________________________________
>Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp
>
>
>---------------------------------------
>For unsubscribe and other options, including
>the Tip Harvester and archive of TheList go to:
>http://lists.evolt.org Workers of the Web, evolt !