Home page logo
/

basics logo Security Basics mailing list archives

Hacked again???
From: "Mauricio Fernandez" <mfernandez () fdta-valles org>
Date: Tue, 14 Jun 2005 18:20:24 -0400

Hi…

I am not sure, but I think that I was hacked again.

I have a w2k SP4 full patched box with KerioFirewall, and this morning I
found three running process on it:
Winproc.exe
Rpcservice.exe
Msnmsgr.exe

The last one it is not the Messenger from Microsoft…

I google those file names, but all I found was in Japanese/Hebrew or
something...
 
Does anyone know some attack with this three files combination?

TIA



Mauricio Fernández S.
IT Manager
Tel. 591- 445-25160
Fax. 591- 441-15056
mfernandez () fdta-valles org
www.fdta-valles.org
Cochabamba - Bolivia

Attachment: smime.p7s
Description:


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]