OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Oliver Petruzel (opetruzelcox.rr.com)
Date: Mon Nov 12 2001 - 14:39:30 CST

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    Have you taken a look at your tasks/processes/services that are running?
    Check out the events logs too...any unusual cpu activity? Outgoing or
    incoming data? Let us know.

    If you can, run tcpdump/ethereal or similar on a nearby system listening
    to your IP. Post any suspicious packet info, log info, or process data
    here for us to study... We simply need more. It sounds fairly
    interesting.

    Oliver P.

    > -----Original Message-----
    > From: Sould3mon [mailto:Sould3monkillall.net]
    > Sent: Sunday, November 11, 2001 8:55 PM
    > To: vuln-devsecurityfocus.com
    > Subject: strange thing happend to me
    >
    >
    > i just restarted my system then a msg poped up
    > system shutdown in 50 sec (and counting downwards)
    > under it was showing this pc is schuting down by
    > authority\system with the adress c:\winnt\services.exe
    > (donot remember the correct line but it was the for remote
    > terminal services services.exe)
    >
    > the sec strange thing
    > if i fire up power dvd and want to play a movie it say's
    > power dvd cannot run through terminal services
    > but if i click right mous button and then goto movie-file.mpg
    > (wich must be added to the play list first otherwise this
    > option is not available) then it play's just fine
    >
    > anyone that has any thought on this how this happend ?
    >
    > thanks
    >
    >
    >