new Services look like DSM but are they?

2004-07-13 Thread Martin Krauß
Hello! One of our file servers(W2K) was hacked last night, and I discovered some new services that were not there before. they have the names: DomainName\Scheduler and DomainName\Acceptor and point to the corresponding files in the DSM-directory. Both these services are started manually, and

Re: new Services look like DSM but are they?

2004-07-13 Thread Jurjen Oskam
On Tue, Jul 13, 2004 at 02:03:05PM +0200, Martin Krau? wrote: One of our file servers(W2K) was hacked last night, and I discovered some new services that were not there before. they have the names: The only safe way to handle a compromised machine is to completely erase it, and restore from