ph34r my |\/|4d l33t s|<iLLz!
Apr. 9th, 2003 12:57 pmChecked out the hacked machine this morning. Luckily they hadn't had a chance to go through and wipe it yet. Jeff & I poked around and found the hidden folder serv-u was dumped it. It had been renamed, obviously, but there was a batch file set to run on start-up to hide the folder. Fixed that up and we had access.
We dug through a bunch of the files and found one that was just a huge list of IPs and username/passwords. The last 4 were on our network >_< Sux0r. Tracked down one of them to an old VMS box, but we're not sure who the others belong to. I wish they had let me root through the other machines before they took 'em out :-P
Setup a network printer for a faculty member. Pretty simple, but he asked me about Sophos, which runs once a day for ten minutes at a time, and I had no idea what to tell him. Sophos is odd.
Off to Digital Print. Blat.
We dug through a bunch of the files and found one that was just a huge list of IPs and username/passwords. The last 4 were on our network >_< Sux0r. Tracked down one of them to an old VMS box, but we're not sure who the others belong to. I wish they had let me root through the other machines before they took 'em out :-P
Setup a network printer for a faculty member. Pretty simple, but he asked me about Sophos, which runs once a day for ten minutes at a time, and I had no idea what to tell him. Sophos is odd.
Off to Digital Print. Blat.