I was browsing through my FTP server, when I noticed that ( possibly ) every directory has a file called photo.scr in it. Am I infected? If you need the address, my server is at ftp://220.127.116.11
( edit )
The server is using Microsoft Windows XP Media Center Edition, SP3.
FTP program is IIS.
( edit 2 )
Last night ( 1/31/18 ) there was a random FTP connection from host firstname.lastname@example.org? I didn't remember the IP address, but I remember whois traced it back to servers.com...
Edited by fyshstyx, 01 February 2018 - 09:16 AM.