This link offers some general guidelines for recovering from a compromised server: http://www.cert.org/tech_tips/win-UNIX-system_compromise.html Hope it helps, and good luck. Wes Perrin Harkins <[EMAIL PROTECTED]> on 03/21/2002 03:42:55 PM To: John Michael <[EMAIL PROTECTED]> cc: [EMAIL PROTECTED] (bcc: Wesley Sheldahl/Lex/Lexmark) Subject: Re: Off topic question & a little worried John Michael wrote: > Any idea as to how it got on my server. Someone found a serious security hole in something you're running. You have to assume that your server has been completely compromised and that the entire world now has root access to it through a hundred backdoors they installed. Take it off-line now, before you find out it sent millions of porn spam messages. You can study it later to try and find the problem. - Perrin
