Thread: One of our servers is a ZOMBIE
View Single Post
  #1  
Old 17-02-2008, 10:35
BarryB BarryB is offline
Die Hard Member
  
Join Date: Jun 2004
Location: In a House
Posts: 1,972
Thanks: 0
Thanked 1 Time in 1 Post
BarryB is on a distinguished road
Can you run a rootkit scanner on the remote server?

Also, can you sort the system32 directory by date and see if any suspicious EXES or DLLS have been added recently?
Reply With Quote
Sponsored Links