[60396] in North American Network Operators' Group
Re: RPC errors
daemon@ATHENA.MIT.EDU (/m)
Mon Aug 11 16:22:22 2003
From: "/m" <micah@style.net>
To: "Jack Bates" <jbates@brightok.net>, "NANOG" <nanog@merit.edu>
Date: Mon, 11 Aug 2003 13:20:29 -0700
Errors-To: owner-nanog-outgoing@merit.edu
I left an 2k box open last night without firewall. 1 Hour following boot
time it was hit and manifested the svchost crashing. I haven't had a chance
to dig deeper to see if any sort of infection is involved but I'm leaning
towards DOS.
/micah
----- Original Message -----
From: "Jack Bates" <jbates@brightok.net>
To: "NANOG" <nanog@merit.edu>
Sent: Monday, August 11, 2003 1:12 PM
Subject: RPC errors
>
> I'm showing signs of an RPC sweep across one of my networks that's
> killing some XP machines (only XP confirmed). How wide spread is this at
> this time. Also, does anyone know if this is just generating a DOS
> symptom or if I should be looking for backdoors in these client systems?
>
> -Jack
>
>
