RE: Hacked

  • From: "John Tolmachoff \(Lists\)" <johnlist@xxxxxxxxxxxxxxxxxxx>
  • To: "'[ExchangeList]'" <exchangelist@xxxxxxxxxxxxx>
  • Date: Fri, 22 Aug 2003 09:30:16 -0700

That kind of looks like a auto phone dialer. 

John Tolmachoff MCSE CSSA
Engineer/Consultant
eServices For You
www.eservicesforyou.com


> -----Original Message-----
> From: Imran Abdul Khaliq [mailto:imran.abdulkhaliq@xxxxxxxxxxx]
> Sent: Friday, August 22, 2003 12:24 AM
> To: [ExchangeList]
> Subject: [exchangelist] Hacked
> 
> http://www.MSExchange.org/
> 
> Dear All,
>              I have windows 2000 SP4 and Exchange 2000 SP3 and Symantec
> Antivirus for Exchange and clients running on my DC today in the morning
when i
> came my server was not responding and was not even shutting down so i did
a
> cold reboot after i reboot i found a service called "DameWare NT Utlilties
2.6"
> service running in my services. I alreay have updated my server with all
lastest
> patches except the one released yesterday,
> 
> Can any one tell me how can this service have been installed in to my
server with
> out our intervension and there is nothing in our DNS registry or
ADD/Remove
> programs.
> 
> Thanks in Advamce
> 
> 
> 
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
> Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp
> Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Other Internet Software Marketing Sites:
> Leading Network Software Directory: http://www.serverfiles.com
> No.1 ISA Server Resource Site: http://www.isaserver.org
> Windows Security Resource Site: http://www.windowsecurity.com/
> Network Security Library: http://www.secinf.net/
> Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
> ------------------------------------------------------
> You are currently subscribed to this MSExchange.org Discussion List as:
> johnlist@xxxxxxxxxxxxxxxxxxx
> To unsubscribe send a blank email to leave-exchangelist-
> 1440469J@xxxxxxxxxxxxx



Other related posts: