First guess I would have would be the "networks.exe" virus cant recall what
its actual name is offhand but it spans a process called networks.exe which
scans subnets looking for windows file and print sharing which it then
replicates itself to and starts the whole process over again..
Hope this helps
-----Original Message-----
From: Tomas Huynh [mailto:[EMAIL PROTECTED]]
Sent: Monday, September 18, 2000 4:10 PM
To: [EMAIL PROTECTED]; [EMAIL PROTECTED]
Subject: Re: Windows 98 trying to learn about Windows Networks outside
of our little world.
Correct me if I am wrong, but sounds like someone on that "little 98
machine"
is trying to run some sort of network scanner... perhaps getting IP's with
known network vulnerabilities to use some kiddie script later on?
tomas
-> From [EMAIL PROTECTED] Mon Sep 18 14:43:54 2000
-> Delivered-To: [EMAIL PROTECTED]
-> From: "John Huggins" <[EMAIL PROTECTED]>
-> To: <[EMAIL PROTECTED]>
-> Subject: Windows 98 trying to learn about Windows Networks outside of
our little world.
-> Date: Mon, 18 Sep 2000 15:38:19 -0400
-> Content-Transfer-Encoding: 7bit
-> X-Priority: 3 (Normal)
-> X-MSMail-Priority: Normal
-> X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2314.1300
-> Importance: Normal
-> Sender: [EMAIL PROTECTED]
-> X-Loop: [EMAIL PROTECTED]
-> Status: RO
->
->
-> One of our Windows 98 machines ground to a slow pace today. Then we get
an
-> email from our Internet provider essentially copying a message they
received
-> from some outside person complaining that this little 98 machine was
-> exploring a whole range of IP addresses on the usual Windows network
ports.
->
-> Any body heard of this kinf of virus? If not, can you provide some
other
-> resource links to others in the know?
->
-> I know, I know. We should have been packet filtering our local network
from
-> the Internet, BUT those on high demanded full access to the Internet;
For
-> all I know they belong to the Flat Earth Society. Thus, I let them have
-> their way, while us few non-flat-earthers protect our individual
machines
-> with things like Zone Alarm.
->
-> J
->
-> -
-> [To unsubscribe, send mail to [EMAIL PROTECTED] with
-> "unsubscribe firewalls" in the body of the message.]
->
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
