RE: resolved :)

[email protected] wrote:
> Hi Tina,
>
>> Hello All,
>>
>> Thanks Everyone who replied to me Specially Tony and Keith.
>> I managed to get that server out :).
>> The server was not compromised it was a Trojan that was
residing
>> there.
>
> *huh?* (this is almost too sweet to be true...)
>
> Tina... (wraps arm around shoulder) do you realize what a
compromise
> is? That when you have something running on your system that
> shouldn't be there it is a sign that your server has been
> compromised? (pat-pat-pat)
>
> Let me ask you a few simple questions...
> 1) What was the Trojan?
> 2) Who put it there?
> 3) How did they put it there?
> 4) What did it do while it was there?
> 5) How did you take it out?
> 6) What did you do to prevent anyone from putting another one
in
> there?
>

Keith,
You ask the questions that require an answer whenever a
"compromise" is suspected.  I hope _everyone_ reading this thread
has learned a little bit more conerning the ever increasing
threat of trojans and viruses.

> Now, if any answer to any of the above 6 *simple* questions is
"I
> dunno" or it's equivalent, you have a server that should be
considered
> compromised.
>
>>        Now the server seems to be Alright and working :) I am
so
>> happy now:) Its really fun seeing df working again.
>>
>> Thanks Again,
>>
>> Regards,
>> Tina.
>
> Too sweet... waayyy too sweet. :)

Keith, consider the source.

stew

---
Outgoing SofTEC USA mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.467 / Virus Database: 266 - Release Date: 4/1/2003