Re: Interesting traffic

["morning_wood" <se_cur_ity () hotmail com>]

> I am interested in finding out if anyone knows about a worm or virus 
> that attempts to login to windows boxes as local, administrator, or 
> guest. Does such a thing exist? It only seems to ocurr at certain times 
> during the day. Any clues?

standard netbios usernames, cracking and enumeration utilities use these
im assuming you have a vunerable ( open ) port 445 , get a firewall.

Donnie Werner
http://e2-labs.com 


_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html