RE: Re: [OT] - HELP PLEASE we've been hacked.

["Alex Monaghan" <ha@xxxxxxxxxxxxxx>]

Reformatting is the safest option !

You may be able to undo the hack, but can you be certain you can find any
additional backdoor they may have installed ?

Try googling for the hacker's name or other keywords in the message, there
may be a simple fix.

> -----Original Message-----
> From: Dean Barrett [mailto:dean@xxxxxxx]
> Sent: Tuesday, April 13, 2004 2:10 PM
> To: ukha_d@xxxxxxx
> Subject: RE: [ukha_d] Re: [OT] - HELP PLEASE we've been hacked.
>
>   I appreciated your laughter - but was looking for something
> a little more constructive...
>
>   Surely formating is not the only solution - i assume my IIS
> security patches were not upto date. - looking for
> suggestions to remove without formatting preferably.
>
>   Oh and without having to resort to paying people :)
>
>
>
>   Dean.
>
>
>    -----Original Message-----
>   From: Chris Bond [mailto:chris@xxxxxxx]
>   Sent: 13 April 2004 14:04
>   To: ukha_d@xxxxxxx
>   Subject: [ukha_d] Re: [OT] - HELP PLEASE we've been hacked.
>
>
>   --- In ukha_d@xxxxxxx, "Dean Barrett" <dean@r...>
wrote:
>   > This is a first for me - our public facing server seems to have
>   been hacked.
>   >
>   > We use a couple of ports for CCTV & CBus, but dont use the
default
>   80 so
>   > i've only just noticed this !!
>
>   > What the f*** - it seems to have stopped IIS running.. But i
cant
>   find a
>   > process to stop that may be it.
>   >
>   > Any help appreciated - cant imagine what else is going on....
>
>   ROFLOL - you've got a nice warez group on ya server.  I seriously
>   suggest you pull the server and format it and SECURE it up before
>   you connect it again.
>
>   If you require help securing it up i can do it but for a charge =)
>
>
>
>   UK Home Automation Meet 2004 - BOOK NOW!
>   http://www.ukha2004.com
>
>   http://www.automatedhome.co.uk
>
>   Member Offers - http://www.freeranger.co.uk/ukha
>
>
>         Yahoo! Groups Sponsor
>               ADVERTISEMENT
>
>
>
>
>
> --------------------------------------------------------------
> --------------
> --
>   Yahoo! Groups Links
>
>     a.. To visit your group on the web, go to:
>     http://groups.yahoo.com/group/ukha_d/
>
>     b.. To unsubscribe from this group, send an email to:
>     ukha_d-unsubscribe@xxxxxxx
>
>     c.. Your use of Yahoo! Groups is subject to the Yahoo!
> Terms of Service.
>
>
>
> [Non-text portions of this message have been removed]
>
>
>
> UK Home Automation Meet 2004 - BOOK NOW!
> http://www.ukha2004.com
>
> http://www.automatedhome.co.uk
>
> Member Offers - http://www.freeranger.co.uk/ukha
Yahoo! Groups Links
>
>
>
>
>
>