During the summer of Sasser, Blaster and other similar worms, more than half of the computers in the university department where I worked were compromised. Not by the worm itself, but by a French hacker who exploited the vulnerabilities. The victims included my boss (one of the IT heads) and several, several staff and faculty. The hacker installed an FTP and IRC server and several users connected to upload and share DVDs and music.
So, I'd have to agree with LoKe. I'd certainly approach this situation with suspicion, but there's always a possibility that the user didn't know. Granted, the FTP share used by the hacker was buried under several obscure folders and this doesn't sound like the case.
So, I'd have to agree with LoKe. I'd certainly approach this situation with suspicion, but there's always a possibility that the user didn't know. Granted, the FTP share used by the hacker was buried under several obscure folders and this doesn't sound like the case.