Full Disclosure mailing list archives
RE: Lots of traffic on port 1472 from explorer
From: "Sottile, Michael" <Michael.Sottile () 53 com>
Date: Tue, 21 Sep 2004 16:49:56 -0400
klp is a keylogger. you probably have some (oak?) variant of it. follow this link to learn more about it/get rid of it... http://www.pestpatrol.com/pestinfo/k/klp32.asp regards, ~michael -----Original Message----- From: Giuseppe Milicia [mailto:milicia () brics dk] Sent: Tuesday, September 21, 2004 3:14 PM To: full-disclosure () lists netsys com Subject: [Full-disclosure] Lots of traffic on port 1472 from explorer Hi guys, from a home computer I'm seeing lots of traffic generated from explorer on port 1472 towards the microsoft-ds port, typically on IP addresses starting with 35.xx.xx.xx It looks like a worm but I could not find any references around and Trend Micro detects nothing. Also there is some hidden process oakklp32.exe which is not shown by the taskmanager but is costantly active, again I could not find anything about it! Ideas? Clues? Thanks, -- Giuseppe _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html This e-mail transmission contains information that is confidential and may be privileged. It is intended only for the addressee(s) named above. If you receive this e-mail in error, please do not read, copy or disseminate it in any manner. If you are not the intended recipient, any disclosure, copying, distribution or use of the contents of this information is prohibited. Please reply to the message immediately by informing the sender that the message was misdirected. After replying, please erase it from your computer system. Your assistance in correcting this error is appreciated. _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
Current thread:
- Lots of traffic on port 1472 from explorer Giuseppe Milicia (Sep 21)
- Re: Lots of traffic on port 1472 from explorer Harlan Carvey (Sep 21)
- Re: Lots of traffic on port 1472 from explorer Giuseppe Milicia (Sep 21)
- Re: Lots of traffic on port 1472 from explorer Harlan Carvey (Sep 21)
- Re: Lots of traffic on port 1472 from explorer Manohar G Singh (Sep 21)
- Re: Lots of traffic on port 1472 from explorer Giuseppe Milicia (Sep 22)
- Re: Lots of traffic on port 1472 from explorer GuidoZ (Sep 22)
- Re: Lots of traffic on port 1472 from explorer Giuseppe Milicia (Sep 21)
- Re: Lots of traffic on port 1472 from explorer GuidoZ (Sep 21)
- Re: Lots of traffic on port 1472 from explorer Harlan Carvey (Sep 21)
- <Possible follow-ups>
- RE: Lots of traffic on port 1472 from explorer Sottile, Michael (Sep 21)