Tilted Forum Project Discussion Community - View Single Post

soopafreek · 07-06-2004, 09:07 PM

i've got a friend's server at my place. (i'm babysitting...)

anyway. a couple of days ago he needed to connect to it and asked me to open the SQLServer port (1433). so i do.

i come home today, browsing through the server and find the "ServUDaemon" process running, along with other malware.

i've been scouring the net trying to find a way to get rid of this thing.

i ran spybot... it detected "hellz little spy" (a keystroke logger). i fixed it, but i'm not sure if it's gone for sure.

i CAN'T kill the ServUDaemon process. it tells me i don't have the rights (even as an administrator)....

i've gone through and deleted a few of the files manually.

currently running housecall. it detected and cleaned the agobot worm. still waiting for more shit.

anyway, i'd appreciate some help. i had a shitty day and this is just more shit icing on the shit cake.

oh, i closed the sql port on my router, so hopefully it can't get past that. all other services (except http) are disabled... (the server hosts some small webpages).

07-06-2004, 09:07 PM	#1 (permalink)
soopafreek Psycho Location: ask your mom	i'm being hacked! help! i've got a friend's server at my place. (i'm babysitting...) anyway. a couple of days ago he needed to connect to it and asked me to open the SQLServer port (1433). so i do. i come home today, browsing through the server and find the "ServUDaemon" process running, along with other malware. i've been scouring the net trying to find a way to get rid of this thing. i ran spybot... it detected "hellz little spy" (a keystroke logger). i fixed it, but i'm not sure if it's gone for sure. i CAN'T kill the ServUDaemon process. it tells me i don't have the rights (even as an administrator).... i've gone through and deleted a few of the files manually. currently running housecall. it detected and cleaned the agobot worm. still waiting for more shit. anyway, i'd appreciate some help. i had a shitty day and this is just more shit icing on the shit cake. oh, i closed the sql port on my router, so hopefully it can't get past that. all other services (except http) are disabled... (the server hosts some small webpages). __________________ aaarrrrrgggghhhh!!!!