Re: Computers got Hacked?? Please Help!!!
From: Karl Levinson [x y] mvp (levinson_k_at_despammed.com)
Date: 09/19/04
- Next message: Miha Pihler: "Re: I have installed my digital certificate,but where is my public key?"
- Previous message: Lance: "Re: Win XP and security"
- In reply to: itsupport: "Computers got Hacked?? Please Help!!!"
- Next in thread: itsupport: "Re: Computers got Hacked?? Please Help!!!"
- Reply: itsupport: "Re: Computers got Hacked?? Please Help!!!"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Sun, 19 Sep 2004 10:11:54 -0400
"itsupport" <itsupport@discussions.microsoft.com> wrote in message
news:446A0EFF-1D5C-435B-905D-A73873CDA666@microsoft.com...
> I'm sorry if this is not the right forum to post this.
>
> 2 days ago, something strange has happened to our work computers. It
> happened to our windows 2003 server and several other users' pcs (win2K
and
> win XP). cmd.exe window will pop up but no scripts is shown. Then, IE will
be
> opened by itself and goes to websites like rotten.com showing gross pics,
> google and etc. Also, sometimes Solitaire, Calculator, My Documents will
be
> opened too. This happends randomly throughout the day.
This doesn't sound like most viruses. Could be an internal prank by someone
there, or a remote control Trojan. Make sure your network has a firewall,
and that your anti-virus has been updated in the past week.
AV can be disabled by attackers so that it looks like it is still working.
Try running a second opinion AV scan by going to
http://housecall.antivirus.com
Also, Windows root kit functionality can hide viruses from the locally
logged in user... try using a known virus free computer to scan other
computers across the network using a Windows netowrking share and regular
anti-virus. You could also use an anti-virus boot floppy disk from your
antivirus vendor or a free live boot rescue CD from BitDefender.
If these don't help, see here:
http://securityadmin.info/faq.asp#startup
http://securityadmin.info/faq.asp#hacked
http://securityadmin.info/faq.asp#harden
- Next message: Miha Pihler: "Re: I have installed my digital certificate,but where is my public key?"
- Previous message: Lance: "Re: Win XP and security"
- In reply to: itsupport: "Computers got Hacked?? Please Help!!!"
- Next in thread: itsupport: "Re: Computers got Hacked?? Please Help!!!"
- Reply: itsupport: "Re: Computers got Hacked?? Please Help!!!"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|