|
[Date Prev] [Date Next] [Thread Prev] [Thread Next] [Date Index] [Thread Index]
|
RE: [PLUG] OT: Suspected hacker attack - Can anyone advise?
|
> There was a new directory called FOUND.0000 with 38 numbered
> files in it:
> FOUND0001.CHK - FOUND0038.CHK Most of these files are unreadable.
> One of them contains bits of emails that were sent to these
> lists with IP Addresses. Others appear to contain internet account related
> information. I identified some phone numbers and the letters PPP appear
in a number of the files.
How rude.
The FOUND.NNN directory structure is created/used by Win NT, when it comes
across (and fixes) lost clusters, during bootup. Sounds like some evil dweeb
co-opted the name, hoping you would just ignore it, assuming it to be some
left WinNT fix things.
______________________________________________________________________
Philadelphia Linux Users Group - http://plug.nothinbut.net
Announcements - http://lists.nothinbut.net/mail/listinfo/plug-announce
General Discussion - http://lists.nothinbut.net/mail/listinfo/plug
|
|