401
Living Room / Re: When a home server goes to the dark side: A hands on experience
« Last post by wreckedcarzz on December 01, 2008, 01:02 PM »Late reply, I *just* got my 300 or so emails (I should check that more often) 
Not sure. I couldn't ID it before I gave up, so I can't say. It was bad though - anything that ran was infected, and the infection had apparantly been there for several hours before anyone noticed (it seemed to show itself only at reboot). I guess it was idle for so long that it went on a rampage of some type and had a blast with my hard drives (one for Windows, downloads (all computers) and µTorrent, and one for backups).
I sync my Visual Studio project folder through 3 computers - the EXEs that got through were compiled projects that were infected with the rest of the exes. The laptop was also reformatted, with a Vista disk I received in a trade last year (I tried 2 XP disks, and they won't work with the DVD drive ($150) that I bought for it, so I took a chance). Believe it or not, 1.6Ghz (single core, I might add!) and 512MB of RAM runs Home Premium without a hitch. Good thing I got a dedicated GPU though
I was going to slipstream, but I simply didn't care enough to take the time to do so. I installed from scratch and updated to SP2 in about 45 minutes, and then let automatic updates have at it. I really should look into it though...

What's the name of the malware? It's been a long time since I've seen anything that actually infects EXE files, these days it's mostly "just" a trojan+rookit. Pretty nasty getting your system hammered that bad.-f0dder (November 20, 2008, 09:35 PM)
Not sure. I couldn't ID it before I gave up, so I can't say. It was bad though - anything that ran was infected, and the infection had apparantly been there for several hours before anyone noticed (it seemed to show itself only at reboot). I guess it was idle for so long that it went on a rampage of some type and had a blast with my hard drives (one for Windows, downloads (all computers) and µTorrent, and one for backups).
Morale of the story? NEVER USE DMZ, be sure to have Windows Firewall enabled, and be careful what you synchronize... you really only should be syncing data files, not executables. Oh, and try to run as non-admin (on Vista: with UAC enabled)
I wonder how the malware got in, anyway. Your "server" was both DMZ and didn't have Windows Firewall? Does anybody ever use it for browsing, mails, etc?-f0dder (November 20, 2008, 09:35 PM)
I sync my Visual Studio project folder through 3 computers - the EXEs that got through were compiled projects that were infected with the rest of the exes. The laptop was also reformatted, with a Vista disk I received in a trade last year (I tried 2 XP disks, and they won't work with the DVD drive ($150) that I bought for it, so I took a chance). Believe it or not, 1.6Ghz (single core, I might add!) and 512MB of RAM runs Home Premium without a hitch. Good thing I got a dedicated GPU though

I am reformatting it now with the (original, 1.0) Windows XP disk. That won't take long to update!-wreckedcarzz (November 20, 2008, 09:01 PM)
You might want to consider slipstreaming SP3 into XP before you reinstall. nlite is probably the easiest way to do that. Just a thought - and good luck.-40hz (November 20, 2008, 09:48 PM)
I was going to slipstream, but I simply didn't care enough to take the time to do so. I installed from scratch and updated to SP2 in about 45 minutes, and then let automatic updates have at it. I really should look into it though...