Date:  Thu, 30 Jul 2009 08:35:17 +0200
From:  Kristian Eklund <kristian.eklund (at mark) monostar.net>
Subject:  [coba-e:15849] Re: [LIKELY_SPAM]Root exploit on Blue Quartz
To:  coba-e (at mark) bluequartz.org
Message-Id:  <4A713F25.7000801 (at mark) monostar.net>
In-Reply-To:  <00f101ca10c1$5b83fe70$6401a8c0@HPPAVILION>
References:  <E776AF61EE604DC3BC41E9AB2D91AAA2 (at mark) HP9925NR> <200907300403.10254.bq (at mark) solarspeed.net> <00f101ca10c1$5b83fe70$6401a8c0 (at mark) HPPAVILION>
X-Mail-Count: 15849

> I looked in the admserv logs and saw where he just logged in and created a
> user.  How did they get my password?  It's not an easy password and I only
> use on my server and home router, no where else.  Packet sniffers?  Is there
> a way to tell if you have password sniffers/keystroke loggers on your
> computer?

A good (and updated) antivirus program often finds them. But you cannot 
be sure until you do a fresh Windows install and check your keyboard 
cables..


/Kristian


15849_2.p7s