On Tue, Jul 13, 2004 at 02:03:05PM +0200, Martin Krau? wrote:

> One of our file servers(W2K) was hacked last night, and I discovered
> some new services that were not there before. they have the names:

The only safe way to handle a compromised machine is to completely erase
it, and restore from known-good media and backups.

You cannot trust anything on that machine now, unfortunately.

--
Jurjen Oskam

"Avoid putting a paging file on a fault-tolerant drive, such as a mirrored
volume or a RAID-5 volume. Paging files do not need fault-tolerance."-MS Q308417