You should have given us what ports are related.
If the port is tcp 139, then see two threads on archive of incidents
mailing list at http://www.securityfocus.com/.
09/09/00 win95, notepad.exe worm/trojan, note.com Josh Brandt
09/14/00 new scanner tool or blind luck? Randy Mclean
A few links are provided from posts and responces.
horio shoichi
John Huggins wrote:
>
> One of our Windows 98 machines ground to a slow pace today. Then we get an
> email from our Internet provider essentially copying a message they received
> from some outside person complaining that this little 98 machine was
> exploring a whole range of IP addresses on the usual Windows network ports.
>
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
