We went for a trip to LA so I turned all the computers off save for
our home server (moon.timocharis.com -- running debian).
Not long after we left, there was a brief power failure. Moon managed to handle it and come back up, but unbenknownst to me so did the Windows server. It was my fault: I forgot I had set the bios to restart after when power becomes available, and I also hadn't unplugged the box. So when we got back a few days later the computer was happily humming away, which sort of startled me. So I fired up the monitor and took a look at the screen (after logging in). Lo and behold, all manner of servers were set up and running. Not only that, there were files in various places that I simply did not make. I have to assume the server had been compromised. And yes, I had updated with all available patches. So once again I reinstalled, starting clean. Don't know what it did while I was away, and I hope I never find out. Then I shut it down for a couple of months just because I was sick of fooling with it. |
.
Copyright 2003 by David Mark North