|
Excellent advice all around.
I thought I would update you on the situation and tell you I changed the domain administrator password, blocked the ip addresses trying to gain access to the terminal server in my firewall and the malware/trojans were removed from the server. I looked at my security logs and have not viewed any failed attempts at logging into the terminal server, which is great, but I noticed in my firewall logs a mention of port scanning, so I will be looking into port knocking next and signing up for the security focus mailing list.
|