RE: Proxy+ Trojan

["dave" <dave () netmedic net>]

How did they get to and install it on the servers?
Prevent access to your server would be my first guess.


 
_____________________
Dave Kleiman
dave () netmedic net
www.netmedic.net

 


-----Original Message-----
From: Bill [mailto:proftpd () anatek com] 
Sent: Saturday, February 01, 2003 01:34
To: security-basics () securityfocus com
Subject: Proxy+ Trojan

Someone installed Proxy+ on one of our servers (Win2K/IIS5) and left it open
on a high port for spammers.  I've shut it down, but how do I prevent them
from doing this again?