OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Free, Bob (RWF4pge.com)
Date: Thu Jul 05 2001 - 18:45:28 CDT

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    Greg-

    Actually it was Errit having the problem, I was just trying to help ;-]

    You bring up a great point tho, I highly recommend Ad-Aware a free malware
    cleaner. I run it on all my boxes at least weekly.

    http://www.lavasoftusa.com/index.html

    Bob Free
    Sr. Network Specialist
    ISTS/ITUSS/DC/System Server Support
    PG&E Auburn, Ca

    -----Original Message-----
    From: Gregory_DeGennarocsaa.com [mailto:Gregory_DeGennarocsaa.com]
    Sent: Thursday, July 05, 2001 4:17 PM
    To: Free, Bob; ejmjmac.dk; FOCUS-MSsecurityfocus.com
    Subject: RE: How to find service?? UDP 138??

    Bob,

    It sounds like you may have either a Trojan or spyware on your computer. It
    could also be a remote download program that may be running. You may want
    to get an update virus scanner and scan your computer. UDP 138 is usually
    used by Microsoft, so you may want to check your services. When all else
    fails, either place a firewall up or wipe your drive and reload your
    software.

    Greg

    -----Original Message-----
    From: Free, Bob [mailto:RWF4pge.com]
    Sent: Thursday, July 05, 2001 3:16 PM
    To: 'Errit Müller'; Security MS
    Subject: RE: How to find service?? UDP 138??

    http://www.sysinternals.com/ntw2k/freeware/tdimon.shtml

    -----Original Message-----
    From: Errit Müller [mailto:ejmjmac.dk]
    Sent: Thursday, July 05, 2001 11:35 AM
    To: Security MS
    Subject: How to find service?? UDP 138??

    Hi all

    My laptop is behaving very strangely, and I don't know why.
    On some of the servers on the LAN, where my computer has no business, it
    seems like I'm trying to login every night at 0300.
    I have put up a sniffer so I can see that it actually is my pc doing this.
    Now my quistion is.
    How do I see what is causing my computer to start a connection to another pc
    on UDP 138, every night. (when I sleep)
    I have scanned my pc, and installed ZA, so I don't think that any outside
    event is triggering this. I think that some service of some kind is running.
    But how do I locate it?

    Brgds

    Errit Müller