The "Hacked by Chinese" is a group of hackers that sign the pages they exploit like that. Most likely they installed a backdoor on your server. Your best bet is to completely wipe out the server. Restore from a backup that can be verified that it was made before they hacked your server. Then install all the latest security patches on your system. This is why you pay attention to the MS security bulletins and CERT advisories. A nice and simple program for checking is Microsoft Baseline Security Analyzer. You can download it for free from here: http://support.microsoft.com/default.aspx?scid=KB;en-us;320454&;
-----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Orin Rehorst Sent: Monday, December 16, 2002 8:49 AM To: Exchange Discussions Subject: OWA and attack by Chinese?!? Running Exchange 5.5 on Win2K server, latest service packs. Users over weekend accessed using OWA. Got message at sign on "page has been hacked by Chinese." After that page wouldn't come up. Problem cleared when we rebooted server. Please advise. TIA Regards, Orin Orin Rehorst Port of Houston Authority (Largest U.S. port in foreign tonnage) e-mail: [EMAIL PROTECTED] Phone: (713)670-2443 Fax: (713)670-2457 TOPAS web site: <www.homestead.com/topas/topas.html> _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED]
