Security Basics mailing list archives

Hacked again???

From: "Mauricio Fernandez" <mfernandez () fdta-valles org>
Date: Tue, 14 Jun 2005 18:20:24 -0400

Hi

I am not sure, but I think that I was hacked again.

I have a w2k SP4 full patched box with KerioFirewall, and this morning I
found three running process on it:
Winproc.exe
Rpcservice.exe
Msnmsgr.exe

The last one it is not the Messenger from Microsoft

I google those file names, but all I found was in Japanese/Hebrew or
something...
 
Does anyone know some attack with this three files combination?

TIA



Mauricio Fernández S.
IT Manager
Tel. 591- 445-25160
Fax. 591- 441-15056
mfernandez () fdta-valles org
www.fdta-valles.org
Cochabamba - Bolivia

Attachment: smime.p7s
Description:

Current thread:

Hacked again??? Mauricio Fernandez (Jun 15)
- 答复: Hacked again??? Yu Haitao David (Jun 16)
  - Re: 答复: Hacked again??? Vijay Vikram (Jun 27)
- Re: Hacked again??? Mark Bassett (Jun 16)
  - Re: Hacked again??? zilb (Jun 20)
    - Re: Hacked again??? Valentin Höbel (Jun 20)
    - Re: Hacked again??? Christoph 'knurd' Jeschke (Jun 21)
    - Re: Hacked again??? Ansgar -59cobalt- Wiechers (Jun 27)
- Re: Hacked again??? Christoph 'knurd' Jeschke (Jun 17)
- <Possible follow-ups>
- Re: Hacked again??? mod . sparda (Jun 16)
- Re: Re: Hacked again??? s . omahony (Jun 17)

(Thread continues...)