RE: Am I compromised?

  • From: "Thomas W Shinder" <tshinder@xxxxxxxxxxxxxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Sun, 7 Dec 2003 18:13:14 -0600

Hi Arthus,

Are you sure you didn't enter that when doing a test?

Otherwise, you need to remove that entry now.

HTH,
Tom 

-----Original Message-----
From: Lim, Arthus T. [mailto:alim@xxxxxxxxx] 
Sent: Friday, December 05, 2003 12:05 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] Am I compromised?

http://www.ISAserver.org

I was reviewing the settings of my ISA server and found out something
suspicious.  I found "bogus.net" written under append these DNS suffixes
(in order) in IP properties.  The last thing that I've done is to
install the URLScan.  Is the machine compromised?  Any of you who
experienced the same thing?  

Thank you.

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org Windows
Security Resource Site: http://www.windowsecurity.com/ Network Security
Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions:
http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tshinder@xxxxxxxxxxxxxxxxxx To unsubscribe send a blank email to
$subst('Email.Unsub')




Other related posts: