Re: Trouble uninstalling IIS - Hacker problems
From: Karl Levinson [x y] mvp (jamescagney90210@excite.com)
Date: 12/08/02
- Next message: Karl Levinson [x y] mvp: "Re: Restricting web page access"
- Previous message: Anthony: "Re: How do I remove files after Warez on FTP?"
- In reply to: Pennyjelly: "Trouble uninstalling IIS - Hacker problems"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
From: "Karl Levinson [x y] mvp" <jamescagney90210@excite.com> Date: Sun, 8 Dec 2002 09:27:27 -0500
Have you tried removing IIS via Start, Settings, Control Panel, Add remove
programs, Add remove Windows components? If so, what error message do you
get?
I'm surprised Norton let this attacker in, it could be that your firewall is
configured to leave ports open which should be closed, check the
configuration or ask at the free www.sarc.com support group for Norton how
to fix this.
Besides this, there are other things you should consider doing to try to
prevent being compromised again:
http://securityadmin.info/faq.htm#iislogs2 [some info on reading your IIS
logs for signs of attack]
http://securityadmin.info/faq.htm#iislogs
http://securityadmin.info/faq.htm#hacked [ways to look for signs of
hacking]
http://securityadmin.info/faq.htm#re-secure [how to re-secure your computer
after being hacked]
http://securityadmin.info/faq.htm#harden [how to harden your computer]
"Pennyjelly" <Pennyjelly@yahoo.com> wrote in message
news:03b601c29e98$c40eb130$8bf82ecf@TK2MSFTNGXA05...
> I am new to this.....so, I hope I can explain the problem
> correctly.
>
> Basically.......HELP! I can not delete the IIS files. I
> can not download the Microsoft patches - my system
> freezes. A hacker at 206.204.10.201 has broken into my new
> Norton firewall. A trojan horse program has written
> javascript to MY DOCUMENTS files (see below)...
> I really need to delete the IIS, but my PC freezes when I
> try to uninstall.
> Can someone please help me.
>
> SAMPLE SCRIPT written on my practice javascript files at
> www.pennyjelly.com
>
> script language="JavaScript"
>
>
> function SymError()
> {
> return true;
> }
>
> window.onerror = SymError;
>
> var SymRealWinOpen = window.open;
>
> function SymWinOpen(url, name, attributes)
> {
> return (new Object());
> }
>
> window.open = SymWinOpen;
>
>
--- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.423 / Virus Database: 238 - Release Date: 11/25/2002
- Next message: Karl Levinson [x y] mvp: "Re: Restricting web page access"
- Previous message: Anthony: "Re: How do I remove files after Warez on FTP?"
- In reply to: Pennyjelly: "Trouble uninstalling IIS - Hacker problems"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
