Re: Someone storing their MP3s on my hard drive???

From: Don Kelloway (dkelloway_at_commodon.com)
Date: 04/25/03 

Date: Fri, 25 Apr 2003 16:22:10 GMT

"Ola Gustafsson" <Ola.Gustafsson@itc.ki.se> wrote in message
news:ufzo7xff6.fsf@itc.ki.se...
> "Don Kelloway" <dkelloway@commodon.com> writes:
>
> > It appears that your computer has become compromised and is probably
being
> > used as an FTP server. To prevent this, you have two options. The
first
> > would be to wipe the system and start over. The second and less
destructive
> > option would be to determine how the compromise occurred and correct it.
If
> > you're not personally familiar with computer forensics, you may have a
tough
> > time. Fortunately you should be able to locate someone within your
local
> > area.
>
> Personally, I would never give the second option. There is no way to know
> how many backdoors and Trojans have been put into the system.
> Especially since it appears to be a MS system the only secure option is to
> wipe.
>
> Regards
> --
> Ola Gustafsson

Without knowing how the system was compromised, it could be nothing more
than the user running FTP and having it improperly configured. Certainly
such action does not yet warrant wiping the system, but I understand and
agree with you. This is why I offer wiping the system as the first option
and as an alternative, having someone experienced with computer forensics
becoming involved. 

-- 
Best regards,
Don Kelloway
Commodon Communications
Visit http://www.commodon.com to learn about the "Threats to Your Security
on the Internet".