>- see footer for list info -< I would check the FTP logs and the users as a basic first step also. You might also want to run a an on-line virus Trojan check from someone like trend.
However, I agree with the comment that you need an expert on this Gordon At 09:43 19/06/2006, you wrote: >>- see footer for list info -< >I wonder if this is the best mailing list - you might be better on a list >for win2k administrators. > >I'm afraid it is not my area of expertise, but general principals are to >have a firewall which closes down all but the bare minimum of access points. > > >Don't allow any access through ports that you do not specifically want to >allow. > >Shut down services and protocols on the server that you are not using (e.g. >ftp, telnet) > >Not sure if there is a window version but on Linux there is a program called >tripwire which monitors all your system settings and reports alterations - >if the admin has not made the changes reported then its normally an early >warning of an attack. > >If you think there is a current problem pull out the wire, until its fixed! > > > >On 6/19/06, Paul Swingewood < [EMAIL PROTECTED]> wrote: >> >>>- see footer for list info -< >>Morning all. >> >>I have just had a site hacked by some eeejut. >>I don't know much about hacking and so im a bit lost. The server is win2k3 >>with iis. Im told its fully patched (but I have doubts). There are some >>scripts which I found on the machine which I presume are opening a back >>door >>somewhere. >> >>Does anyone know of any good tools to help me find the vulnerability? How >>are these people getting in ..... :-( >> >>Any help appreciated. (This isn't a CF server) >> >>Regards - Paul >> >> >>_______________________________________________ >> >>For details on ALL mailing lists and for joining or leaving lists, go to >>http://list.cfdeveloper.co.uk/mailman/listinfo >> >> >>-- >>CFDeveloper Sponsors:- >>>- Hosting provided by www.cfmxhosting.co.uk -< >>>- Forum provided by www.fusetalk.com -< >>>- DHTML Menus provided by www.APYCOM.com -< >>>- Lists hosted by www.Gradwell.com -< >>>- CFdeveloper is run by Russ Michaels, feel free to volunteer your help >>-< > > > >-- >Mike T >Blog http://www.socialpoints.com/ >_______________________________________________ > >For details on ALL mailing lists and for joining or leaving lists, go to >http://list.cfdeveloper.co.uk/mailman/listinfo > >-- >CFDeveloper Sponsors:- >>- Hosting provided by www.cfmxhosting.co.uk -< >>- Forum provided by www.fusetalk.com -< >>- DHTML Menus provided by www.APYCOM.com -< >>- Lists hosted by www.Gradwell.com -< >>- CFdeveloper is run by Russ Michaels, feel free to volunteer your help -< _______________________________________________ For details on ALL mailing lists and for joining or leaving lists, go to http://list.cfdeveloper.co.uk/mailman/listinfo -- CFDeveloper Sponsors:- >- Hosting provided by www.cfmxhosting.co.uk -< >- Forum provided by www.fusetalk.com -< >- DHTML Menus provided by www.APYCOM.com -< >- Lists hosted by www.Gradwell.com -< >- CFdeveloper is run by Russ Michaels, feel free to volunteer your help -<
