2000 server hacked

Like that is news. 2000 server hacked I hope someone will take some pity on me and reply as I"m really a server administrator, but I've been asked to look after a small 2000 web server. When i checked it this week, someone got in and scheduled an event. It was made created by netsched. What it did at reboot is try and delete C and D shares, and then the event was deleted. The server isn't running on C: drive, it's letter assignment is much higher, so I don't think anything was affected, all still seems to 'serve' ok. But, when i try and run task manager, it loads, but i can't access it. When i move my mouse to the system tray, it disappears. Can anyone comment, or point me to a faq for better securing this box? tia. Bit.

 

 

 

 

Top