Re: On going ftp server installs and trojan drops

I would highly recommend you reformat and rebuild, then import your SQL data
from backups. Make sure you lock the box down and close unnecessary ports.
Set strong passwords and get rid of any default passwords (if any)
Install latest patches and hot fixes.
Install Antivirus software.
Lockdown down your perimeter firewall by only allowing authorized traffic to
and from your server.
Place a good packet capture software or IDS on that network segment so you
can get an idea of what types activities are occurring.
Best~
Dave


On 8/2/06 9:35 AM, in article
1154525730.588577.193170@xxxxxxxxxxxxxxxxxxxxxxxxxxxx,
"Admin.Matthew@xxxxxxxxx" <Admin.Matthew@xxxxxxxxx> wrote:

We have a SQL 2000 Server with the latest service pack installed. It is
running on 2003 Server with the latest updates. We have updated
antivirus and spyware software installed. The IP is internal even
though this computer does have access to the internet. We have seen
trojans and ftp servers installed. We have changed admin passwords just
in case someone was using an account to install these items. Any other
ideas of what should be done? Thanks.


.

Relevant Pages

  • Re: Problems with an Outside Threat who is accessing my computer Illeg
    ... restore it to your newly installed operating system. ... -- If using XP be sure to install Service Pack 2 and do not lower your ... Internet Explorer security settings from default. ... -- Always use hard to guess passwords and do not give them out to another ...
    (microsoft.public.security)
  • RE: OWA: no items to be displayed
    ... (it will also be installed if you install ISA 2000 FP1). ... Clear the server and client cache. ... Open Internet Information Service Manager. ... Right-click the Default Web Site, ...
    (microsoft.public.windows.server.sbs)
  • Re: OWA issues
    ... When your client trying to browse the OWA from the Internet, ... Clear the server and client cache. ... Apply 831464 hot fix (do not install it if you have Exchange Server ... Right-click the Default Web Site, ...
    (microsoft.public.exchange.admin)
  • RE: Problems with Permissions
    ... we recommend that you to install Firewall Client on each client ... computer in order to access the Internet. ... and then click Server Management. ...
    (microsoft.public.windows.server.sbs)
  • Re: XP Home - IE - AOL - Security settings
    ... replaces the page from which we invoke the secure session. ... don't think that the server on the other end is isn't even touched. ... Tools - Internet Opt - cleared cookies, ... Doesn't install any ...
    (microsoft.public.windowsxp.basics)