Security Basics mailing list archives
Re: Hacked again???
From: Valentin Höbel <hoebel () gmail com>
Date: Mon, 20 Jun 2005 17:37:09 +0200
but you have to think about the fact that the process never appeared before in his task manager (please correct me if I am not right here)! so for the appearance of the process, he has to start the messenger one time. I don't know if he did. If he did, then the problem in this way is solved, bit if he didn't, there would still be an open question. Kindly regards, Valentin Höbel, Germany 2005/6/19, zilb () gmx de <zilb () gmx de>:
Hi… I am not sure, but I think that I was hacked again. I have a w2k SP4 full patched box with KerioFirewall, and this morning I found three running process on it: Winproc.exe Rpcservice.exe Msnmsgr.exehi, i ever thought msnmsgr.exe is a part of the msn-messenger. perhaps the auto start .exe of the messenger?? could it be? zilb -- Weitersagen: GMX DSL-Flatrates mit Tempo-Garantie! Ab 4,99 Euro/Monat: http://www.gmx.net/de/go/dsl
Current thread:
- Hacked again??? Mauricio Fernandez (Jun 15)
- 答复: Hacked again??? Yu Haitao David (Jun 16)
- Re: 答复: Hacked again??? Vijay Vikram (Jun 27)
- Re: Hacked again??? Mark Bassett (Jun 16)
- Re: Hacked again??? zilb (Jun 20)
- Re: Hacked again??? Valentin Höbel (Jun 20)
- Re: Hacked again??? Christoph 'knurd' Jeschke (Jun 21)
- Re: Hacked again??? Ansgar -59cobalt- Wiechers (Jun 27)
- Re: Hacked again??? zilb (Jun 20)
- 答复: Hacked again??? Yu Haitao David (Jun 16)
- <Possible follow-ups>
- Re: Hacked again??? mod . sparda (Jun 16)
- Re: Re: Hacked again??? s . omahony (Jun 17)
- Re: Re: Hacked again??? Phil Cryer (Jun 20)