[Dshield] PC exhibiting weird behavior

Deb Hale haled at pionet.net
Sat Dec 3 14:58:17 GMT 2005



What is the date on your virus definitions? Is your W2K machine fully
patched.  There are a number of worms that are uusing these two ports.  It
could either be an old version that you are detecting, or a new version yet
undetected.

Deb



Behalf Of Walzer, Jeff
Sent: Friday, December 02, 2005 3:19 PM
To: list at lists.dshield.org
Subject: [Dshield] PC exhibiting weird behavior

I have a W2K PC that I see sending occasional traffic to random IP addresses
from ports 135 and 445. I have done a complete virus scan and it's clean,
but I'm unable to figure out why it's trying to send from ports 135 and 445
to random IP address. Any ideas as to what to do next?
 
Thanks...
_________________________________________
Using .Net? Need to know more about .Net Security?
http://isc.sans.org/banner_count.php?dest=dotnet

_______________________________________________
send all posts to list at lists.dshield.org To change your subscription options
(or unsubscribe), see: http://www.dshield.org/mailman/listinfo/list



More information about the list mailing list