OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Gregory_DeGennarocsaa.com
Date: Thu Jul 05 2001 - 18:17:12 CDT

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    Bob,

    It sounds like you may have either a Trojan or spyware on your computer. It
    could also be a remote download program that may be running. You may want
    to get an update virus scanner and scan your computer. UDP 138 is usually
    used by Microsoft, so you may want to check your services. When all else
    fails, either place a firewall up or wipe your drive and reload your
    software.

    Greg

    -----Original Message-----
    From: Free, Bob [mailto:RWF4pge.com]
    Sent: Thursday, July 05, 2001 3:16 PM
    To: 'Errit Müller'; Security MS
    Subject: RE: How to find service?? UDP 138??

    http://www.sysinternals.com/ntw2k/freeware/tdimon.shtml

    -----Original Message-----
    From: Errit Müller [mailto:ejmjmac.dk]
    Sent: Thursday, July 05, 2001 11:35 AM
    To: Security MS
    Subject: How to find service?? UDP 138??

    Hi all

    My laptop is behaving very strangely, and I don't know why.
    On some of the servers on the LAN, where my computer has no business, it
    seems like I'm trying to login every night at 0300.
    I have put up a sniffer so I can see that it actually is my pc doing this.
    Now my quistion is.
    How do I see what is causing my computer to start a connection to another pc
    on UDP 138, every night. (when I sleep)
    I have scanned my pc, and installed ZA, so I don't think that any outside
    event is triggering this. I think that some service of some kind is running.
    But how do I locate it?

    Brgds

    Errit Müller