if your lucky it was just a newbie posing as posionbox.
if you just had you default pages changed, it was probably the copycat.
but if you notice a large number of directories created, that seem
[Mostly Harmless] they probably are not.
i would not reinstall, just close the ports you don't need open.
delete any mention of front page from the cursed earth, oops i mean your
server, & pray for the best!
good luck.
-paul
an unofficial user friendly signature...
web developer, nbbj
work: [EMAIL PROTECTED]
614 241-3534
fax: 614 485-5534
home: [EMAIL PROTECTED]
614 449-1681
> icq: 47658358
-----Original Message-----
From: another programmer [mailto:[EMAIL PROTECTED]]
Sent: Friday, May 18, 2001 2:34 AM
To: CF-Community
Subject: sad, sad day
PoisonBox apparently got my computer on the 7th of this month... I use a
number of directories for my local web servers, only having one (one web
server) turned on at a time, depending on what project I'm working on. I
just switched active webservers back to an old project and walah! PoisonBox!
They have files in my root C, my Inetpub directory and all directories that
are immediate children. crap. I've examined my logs, pretty useless, not
much detail. I seem to remember other people being hacked by the same
group, I don't particularly want to reinstall, do they (poisonbox) open any
back-doors?
gah... i specifically turned off all virtual directories on my sites too, I
must've been working on one I hadn't corrected... ah crap...
:-(
my own fault...
I'm on a dial-up account with an ISP, they hit me on the 7th for 2 minutes,
then on the 8th for 2 minutes. Gah. I would've been on a different ip
too...
I can't be bothered doing a walk of shame, I expect to be beaten with stale
muffins anyway. If you'd even waste them on me.
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Structure your ColdFusion code with Fusebox. Get the official book at
http://www.fusionauthority.com/bkinfo.cfm
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Structure your ColdFusion code with Fusebox. Get the official book at
http://www.fusionauthority.com/bkinfo.cfm
Archives: http://www.mail-archive.com/cf-community@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists
