On Tue, Jul 13, 2004 at 02:03:05PM +0200, Martin Krau? wrote: > One of our file servers(W2K) was hacked last night, and I discovered > some new services that were not there before. they have the names:
The only safe way to handle a compromised machine is to completely erase it, and restore from known-good media and backups. You cannot trust anything on that machine now, unfortunately. -- Jurjen Oskam "Avoid putting a paging file on a fault-tolerant drive, such as a mirrored volume or a RAID-5 volume. Paging files do not need fault-tolerance."-MS Q308417