If this is your first visit, be sure to check out the FAQ by clicking the link above. You may have to register before you can post: click the register link above to proceed. To start viewing messages, select the forum that you want to visit from the selection below. |
|
|
Thread Tools | Display Modes |
#1
|
|||
|
|||
Worm never seen before
Hi all ;
I am just experiencing a strange kind of infection I don't know wether is a new worm or not, as I never seen it before. The situation is next: - I am running a computer with both Win98 and XP installed. - My Win98 session works OK - When I start an XP session, and I do activate my network connection... I start to see a very heavy traffic on the LEDs of my hub/router ADSL. The activity light is flickering like crazy... what happens?? - I check the Status of the connection, and I see dozens of outbound packets per second, and almost nothing incoming. Strange... - I run NETSTAT to see what it happens. I see a LOT of outbound TCP connections as "SYN_SENT" from a series of ports from 3400 to 3600 and so on... no way to stop it !. All of these netstat entries end at some strange IPs at EPMAP port. - I run TaskManager, and I see a lot of started process of "SVCHOST" and "IEEXPLORE" (about 5 or 6 instances of each one started). I just checked for Sasser, Welchia worms, but the tools said I don't have these worms on my computer... Any ideas? Thanks !! |
Thread Tools | |
Display Modes | |
|
|
Similar Threads | ||||
Thread | Thread Starter | Forum | Replies | Last Post |
What is connected to which? | kiadau | New Users to Windows XP | 7 | February 14th 07 08:02 PM |
E-mail worm or mother-in-law worm | Buckus | General XP issues or comments | 2 | October 23rd 04 03:10 AM |
blaster worm | Olga | Security and Administration with Windows XP | 7 | September 17th 04 02:55 AM |
Korgo.R worm! won't go away! | Johannes Enstad | General XP issues or comments | 2 | August 8th 04 10:02 PM |
win32bagel worm | revtkc | Performance and Maintainance of XP | 2 | July 22nd 04 06:58 AM |