|
[Date Prev] [Date Next] [Thread Prev] [Thread Next] [Date Index] [Thread Index]
|
RE: [PLUG] OT: Suspected hacker attack - Can anyone advise?
|
On Mon, 22 May 2000, Michael Leone wrote:
> > There was a new directory called FOUND.0000 with 38 numbered
> > files in it:
> > FOUND0001.CHK - FOUND0038.CHK Most of these files are unreadable.
> > One of them contains bits of emails that were sent to these
> > lists with IP Addresses. Others appear to contain internet account related
> > information. I identified some phone numbers and the letters PPP appear
> in a number of the files.
>
> How rude.
>
> The FOUND.NNN directory structure is created/used by Win NT, when it comes
> across (and fixes) lost clusters, during bootup. Sounds like some evil dweeb
> co-opted the name, hoping you would just ignore it, assuming it to be some
> left WinNT fix things.
He did mention making use of the power switch. I was thinking they had
actually been created by scandisk.
___________________
www.ChaosReigns.com
______________________________________________________________________
Philadelphia Linux Users Group - http://plug.nothinbut.net
Announcements - http://lists.nothinbut.net/mail/listinfo/plug-announce
General Discussion - http://lists.nothinbut.net/mail/listinfo/plug
|
|