Thread: One of our servers is a ZOMBIE
View Single Post
  #10  
Old 17-02-2008, 10:35
BarryB BarryB is offline
Die Hard Member
  
Join Date: Jun 2004
Location: In a House
Posts: 1,972
Thanks: 0
Thanked 1 Time in 1 Post
BarryB is on a distinguished road
Can you run a rootkit scanner on the remote server?

Also, can you sort the system32 directory by date and see if any suspicious EXES or DLLS have been added recently?
Reply With Quote