[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [Full-Disclosure] Interesting traffic
- To: "shawn6913" <shawn6913@xxxxxxxxxxx>, "full disclosure" <full-disclosure@xxxxxxxxxxxxxxxx>
- Subject: Re: [Full-Disclosure] Interesting traffic
- From: "morning_wood" <se_cur_ity@xxxxxxxxxxx>
- Date: Mon, 8 Sep 2003 23:08:27 -0700
> I am interested in finding out if anyone knows about a worm or virus
> that attempts to login to windows boxes as local, administrator, or
> guest. Does such a thing exist? It only seems to ocurr at certain times
> during the day. Any clues?
standard netbios usernames, cracking and enumeration utilities use these
im assuming you have a vunerable ( open ) port 445 , get a firewall.
Donnie Werner
http://e2-labs.com
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html