[Dshield] PC exhibiting weird behavior

mary malum at freeshell.org
Sun Dec 4 00:10:57 GMT 2005

> I have a W2K PC that I see sending occasional traffic to random IP
> addresses from ports 135 and 445. I have done a complete virus scan and
> it's clean, but I'm unable to figure out why it's trying to send from
> ports 135 and 445 to random IP address. Any ideas as to what to do next?

Do you have a hardware firewall?  If so filter the RPC ports 135-139/445 


More information about the list mailing list