List Info

Thread: Srvmon Files on my c: drive




Srvmon Files on my c: drive
country flaguser name
United States
2007-07-15 03:23:06
Hi

I have a question. There are lots of files appearing on my
C: in the
main folder. I get rid of them but more appear.

The files have names like SrvMon1872_2264_20070715085025 and
appear to
be written every minute.

The files didnt used to be here but have appeared recently.
I cleared
of 30,000 the other day.

Any advice most welcome.

Thanks

Nic


Re: Srvmon Files on my c: drive
country flaguser name
United States
2007-07-30 06:40:17
Appear to be written every minute? Have you ran a GOOD
antivirus? Anti
spy ware? That would be the first thing I would've done.

I remember something about srvmon from a few years back, but
don't
remember what it was about it.... Anybody remember?

On Jul 15, 4:23 am, "graf...googlemail.com"
<graf...googlemail.com>
wrote:
> Hi
>
> I have a question. There are lots of files appearing on
my C: in the
> main folder. I get rid of them but more appear.
>
> The files have names like
SrvMon1872_2264_20070715085025 and appear to
> be written every minute.
>
> The files didnt used to be here but have appeared
recently. I cleared
> of 30,000 the other day.
>
> Any advice most welcome.
>
> Thanks
>
> Nic


Re: Srvmon Files on my c: drive
country flaguser name
United States
2007-08-17 08:51:33
SRVMon 3.1 belongs to RAT spyware.
It's presense means that your computer is infected with
malicious
software and is insecure.

This RAT is also known as:
·DreamSys Server Monitor 3.1.




RAT:  A Remote Administration Tool, or RAT, is a Trojan that
when run,
provides an attacker with the capability of remotely
controlling a
machine via a ""client"" in the
attacker's machine, and a ""server""
in the victim's machine. Examples include Back Orifice,
NetBus,
SubSeven, and Hack'a'tack. What happens when a server is
installed in
a victim's machine depends on the capabilities of the
trojan, the
interests of the attacker, and whether or not control of the
server is
ever gained by another attacker -- who might have entirely
different
interests. Infections by remote administration Trojans on
Windows
machines are becoming as frequent as viruses. One common
vector is
through File and Print Sharing, when home users
inadvertently open up
their system to the rest of the world. If an attacker has
access to
the hard-drive, he/she can place the trojan in the startup
folder.
This will run the trojan the next time the user logs in.
Another
common vector is when the attacker simply e-mails the trojan
to the
user along with a social engineering hack that convinces the
user to
run it against their better judgment.



On Jul 30, 6:40 am, Lissy <micmon...gmail.com> wrote:
> Appear to be written every minute? Have you ran a GOOD
antivirus? Anti
> spy ware? That would be the first thing I would've
done.
>
> I remember something about srvmon from a few years
back, but don't
> remember what it was about it.... Anybody remember?
>
> On Jul 15, 4:23 am, "graf...googlemail.com"
<graf...googlemail.com>
> wrote:
>
>
>
> > Hi
>
> > I have a question. There are lots of files
appearing on my C: in the
> > main folder. I get rid of them but more appear.
>
> > The files have names like
SrvMon1872_2264_20070715085025 and appear to
> > be written every minute.
>
> > The files didnt used to be here but have appeared
recently. I cleared
> > of 30,000 the other day.
>
> > Any advice most welcome.
>
> > Thanks
>
> > Nic- Hide quoted text -
>
> - Show quoted text -


[1-3]

about | contact  Other archives ( Real Estate discussion Medical topics )