Back to list
*Note: Email address will appear as "user domain ext" to prevent harvesting.
Re: Compromised Windows Server
Jun 07 2006 02:19AM
Macleonard Starkey (macleonard auscert org au)
> Came in this morning to find a windows 2003 server I manage scanning the
> Internet for machines listening on tcp 139 and 445. While looking at the
> machine I noticed the following processes running.
Sounds like you were able to capture some of the network traffic. Got any
[ more ]
Copyright 2010, SecurityFocus