Can viruses be planted on a server?

  • Thread starter Thread starter JM
  • Start date Start date
J

JM

Could a disgrunted former IT person who had access to a Win2k server via RDP
intentionally plant viruses on the server? If so, would there be a way to
trace the evidence?

thank you,

jm
 
Thank you for your response.

Would that be "yes" to both questions. And, if so, what measures might be
taken to trace the evidence?

thank you,

jm
 
On that special day, JM, ([email protected]) said...
Could a disgrunted former IT person who had access to a Win2k server via RDP
intentionally plant viruses on the server?
Click to expand...

If the server hasn't been patched properly, and you didn't remove his
account properly, yes. There's lots of information on the net, how to
escalate privileges and similar things.

I had a look at Google which tindicates that the RDP itself doesn't
allow for changing user rights, but if the tech could do *anything*
that creates files on the server, it might open a barn door for him.

Proving the maclicious action will be not that easy, if (s)he had
access to the logfiles and could modify them. Also, you should bear in
mind that there are viruses (or rather worms) that make their way in by
abusing weak services, that answer to unauthorized and malformed
requests; so this could be just a coincidence.


Gabriele Neukam

(e-mail address removed)
 
Back
Top