Myke

Honestly, Norton Ghost is absolutely horrible. I spent a good week on a project trying to ghost a corrupt laptop HD to a new one, but to no avail. What I ended up using was Acronis' MigrateEasy. The program litterally works in 1/4 of the time than Norton Ghost, not to mention the fact that it's so much easier to use. The directions on the GUI are amazingly straight forward. The best feature of MigrateEasy is that it runs outside of Windows, whereas Ghost operates within Windows. Honestly, you should check this handy software out. It is available for a free trial at http://www.acronis.com/homecomputing/products/, located at the bottom of the page (on the right). This program completely got rid of my headache with the project. Best of luck to you.

We currently have our Intranet on a Windows 2000 Server and are looking to synchronize specific files with a Novell server. The reason behind this is due to executives wanting to make changes to certain documents which are available on our Intranet. While we could simple manually move the files from the Novell server to the Windows 2000 server, we are attempting to remove the middle step. Does anyone know anything about synchronizing files between servers? If so, any help would be greatly appreciated. Thanks in advance.

Thanks for the advice. I actually just looked into a product that I think may be right up our alley, in terms of what we need to get done and the low price. It's a product called ViceVersa Plus (www.tgrmn.com/web/file_synchronization.htm). Its GUI is pretty simple once you get used to it, and its actual operations are pretty reliable and smart. For $29.95, I think it's a good deal. You can try it out for 30 days to see if it's right for you.

We're experiencing unexplained SMTP traffic originating from one of our Windows XP SP2 PCs on our network. From our monitoring the traffic, we've found that a random TCP port (usually starting in the 2100s and up to the 4300s, incrementing each time) is opened and SMTP traffic attempts to go outbound. We are not experiencing any unusual inbound traffic, though. About 30 seconds later, another TCP port (the number is slightly higher) is opened and attempts to do the same thing. After almost one minute of being opened, the port closes. This is continuously occuring while the PC is turned on and repeats each day. All virus definitions are completely updated and the PC has been scanned for viruses, which have resulted with no detections. Many have suggested that it is a variant of the Sober virus, which it is not, as we have manually scanned the registry settings and such. We have also scanned the PC for spyware using mutliple scanning programs. All unexplained outbound SMTP traffic is pointing to the same IP address (which resides in Texas). It almost seems like the PC is being used as a zombie in a DoS attack, but we have not been able to target the origin. If anyone has any information that would relate to this incident, it would be greatly appreciated. Thanks in advance! [Edited by Myke on 2005-05-25 14:34:52]

Found some more information that might help anyone who is looking for a solution with this. Our ISA server claims that the outbound traffice is SMTP. After performing an Fport and other various scanning programs, the local machine claims that the open ports are UPD and TCP, starting with 1100 and rising until the machine reboots. Once the system is turned on again, the process starts opening the ports at 1100. Hope this aids someone in helping me find an answer to this. Thanks again for the help thus far.

Yeah, we've checked the services and have found nothing that would indicate an SMTP server. The PC itself has not had an SMTP/POP2 server installed/running on it. We have, however, found some random services that were left running from previous programs that were installed, but those services have been disabled/removed from the system.

We've run two seperate AntiSpyware programs, which have found nothing suspicious. We also have a personal firewall and network firewall running, which have not caught anything either. I double checked the log, and yes, it is SMTP traffic and not SNTP. I have also used HijackThis and Fport 2.0, but have not turned up anything either. This has been going on for several months and we're getting kind of worried here. Thanks again for everyone's help so far. It's greatly appreciated