OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Steve Baker (SteveBNETGAMES-UK.COM)
Date: Wed Apr 04 2001 - 09:51:19 CDT

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    On Tue, 03 Apr 2001, you wrote:
    > We recently had an intrusion on an IIS 4 box running Winnt 4.0. After the
    > intrusion, most logs were fine and showed what occurred during the
    > intrusion. However, one of the FTP logs was 64KB, but was completely blank
    > when opened. In addition, when trying to type characters into the document,
    > the cursor would move, but the characters were invisible (blank). Any
    > information on what this may indicate or be would be much appreciated.
    > Thanks!
    > K.C.
    > _________________________________________________________________
    > Get your FREE download of MSN Explorer at http://explorer.msn.com

    hmm... The reason that you can't see the character typed is probably (Using
    notepad?) because the lines are too long! Notepad shows this behavoir, as does
    UltraEdit...

    Try using a hexeditor and see if you can read it then......

    -David-