soopafreek

i've got a friend's server at my place. (i'm babysitting...)

anyway. a couple of days ago he needed to connect to it and asked me to open the SQLServer port (1433). so i do.

i come home today, browsing through the server and find the "ServUDaemon" process running, along with other malware.

i've been scouring the net trying to find a way to get rid of this thing.

i ran spybot... it detected "hellz little spy" (a keystroke logger). i fixed it, but i'm not sure if it's gone for sure.

i CAN'T kill the ServUDaemon process. it tells me i don't have the rights (even as an administrator)....

i've gone through and deleted a few of the files manually.

currently running housecall. it detected and cleaned the agobot worm. still waiting for more shit.

anyway, i'd appreciate some help. i had a shitty day and this is just more shit icing on the shit cake.

oh, i closed the sql port on my router, so hopefully it can't get past that. all other services (except http) are disabled... (the server hosts some small webpages).

__________________
aaarrrrrgggghhhh!!!!