Full Disclosure mailing list archives

Re: Possible First Crypto Virus Definitely Disc overed!


From: Nico Golde <nion () gmx net>
Date: Tue, 8 Jun 2004 22:51:01 +0200

hi,
* Ng, Kenneth (US) <kenng () kpmg com> [2004-06-08 22:49]:
Question is, are you supposed to have a SSL server on that box?  If so,
that's what it is.  If not, then you definitely have a problem.  Try
connecting to that box with the URL you normally use, just use "https"
instead of "http".  If you get the "normal" page

normally with an certificate before...

, then someone turned on
https without realizing it.  If you get something different, then you
investigate.

regards nico
-- 
Nico Golde - 310777820@ICQ
nico () ngolde de | nion () gmx net | http://www.ngolde.de
GPG: FF46 E565 5CC1 E2E5 3F69  C739 1D87 E549 7364 7CFF
Is there life after /sbin/halt -p?

Attachment: _bin
Description:


Current thread: