Making Firedaemon "unkillable"

Full Version: Making Firedaemon "unkillable"

GovernmentSecurity.org > The Archives > General Network Security

Shang Tsung

Nov 18 2003, 09:06 PM

a few months ago, someone rehacked one of my stros

i tried to recover it but s/he installed serv-u as a service through firedaemon

naturally i tried to stop firedaemon with kill.exe but couldn't, ftp.exe and tftp.exe were deleted so i couldn't try with other tools but i thought that was a pretty clever trick to secure your stros

anyway, does anyone know how to do this? i'd appreciate any info
thanks in advance

bjoernfun

Nov 18 2003, 09:12 PM

hey,

it isnt possible to make firedaemon unkillable, coz every admin axx can kill every service!

okay.. when you installed firedaemon as admin, and the rehacker only has guest rights, he cannot disable yeah firedaemon service!

have fun...

vnet576

Nov 18 2003, 09:17 PM

QUOTE (Shang Tsung @ Nov 18 2003, 04:06 PM)

naturally i tried to stop firedaemon with kill.exe but couldn't, ftp.exe and tftp.exe were deleted so i couldn't try with other tools but i thought that was a pretty clever trick to secure your stros

Well naturally u can't kill a service with the process killer kill.exe. Try net stop "service name" instead.

limbox

Nov 19 2003, 08:19 AM

vnet is right, you have to stop the firedaemon service. To kill the process isn't enough

This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.