Not sure Rusty, but look here...
http://securityresponse.symantec.com/avcenter/venc/data/backdoor.irc.ratsou.b.html Thanks, David ----- Original Message ----- From: <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]> Sent: Monday, October 13, 2003 10:30 AM Subject: [Rodopi] OT: Unknown Process Running > Hello great minds, > > I come before you seeking an answer that even the great google does not > seem to possess. Sorry for the cross post but I'm really out of > solutions and possiblities. This morning I came in to find a process > eating up bandwidth and HD time on two different servers. The process > is lssass.exe. Originally I had thought this was the common LSASS.exe > that runs normally but realized the spelling difference. Anyway, I've > ended this task on both of the servers it was running on and the servers > are now both running normal. Any insite you all could give me would be > greatly appreciated. > > Rusty > > > > > --------------------- > To Leave the Rodopi mail list send a message to [EMAIL PROTECTED] > with the word LEAVE as the message body. > > Please also visit the Rodopi FAQ at http://www.rodopi-faq.com > --------------------- --------------------- To Leave the Rodopi mail list send a message to [EMAIL PROTECTED] with the word LEAVE as the message body. Please also visit the Rodopi FAQ at http://www.rodopi-faq.com ---------------------
