Re: A Mailicious looking hack

From: the man who knew too much (ding_at_bat.com)
Date: 10/31/03 

Date: Fri, 31 Oct 2003 08:13:21 -0500

Steve Jankelowitz wrote:

> Hi
>
> I wonder if anyone can shed some light on the following:
>
> A server kept crashing, the hardware is pretty old so it was obvoiusly the
> 1st thing that was looked at. The box is running Windows NT 4. It turned
> out that the hardware is fine. but we found directories containing
> encrypted files as well as suspicious files in the Windows directories.
> We can not delete these directories. It looks to me as if someone has
> hacked into the box and is using it as a gateway, probably for something
> illegal.
>
> Has anyone encountered this problem and if so, what can I do to fix it.
>
> Regards
> Steve

get ahold of a recent copy of linux or freebsd installation disk, place it
in the cdrom drive & reboot 

-- 
microsoft windows is only secure under these conditions
1. not allowed to connect to the internet
2. not letting anyone have access to the cdrom or floppy 
drive when unattended
Quantcast