Hello!
One of our file servers(W2K) was hacked last night, and I discovered
some new services that were not there before. they have the names:
DomainName\Scheduler and DomainName\Acceptor and point to the
corresponding files in the DSM-directory. Both these services are
started manually, and
On Tue, Jul 13, 2004 at 02:03:05PM +0200, Martin Krau? wrote:
One of our file servers(W2K) was hacked last night, and I discovered
some new services that were not there before. they have the names:
The only safe way to handle a compromised machine is to completely erase
it, and restore from