* OT * Hack attack - UPDATE -

Port 138 is a UDP port for browsing datgram repsonses of NetBIOS over TC/IP
139 is a TCP port commonly used for CIFS, file & print share sessions and
DNS administration...

Also, you might check for ad-ware spyware... checkout ad-aware 5.83 from
http://www.lavasoftusa.com/ to sniff out spyware on your workstations
-----Original Message-----
From: meco_inc_paris [mailto:admin@...]
Sent: Wednesday, July 17, 2002 12:22 PM
To: vantage@yahoogroups.com
Subject: [Vantage] Re: * OT * Hack attack - UPDATE -


Well my ISP (Genuity) has stopped the hack attack by applying a filter
to my router and boom we got the guy stopped
Said they were using my clients computer as a relay agent shotting
out ports 138 & 139
So we got that blocked
Now I am trying to figure out what was put on the clients pc to allow
them access to do it
They traced down to a guy in Sweden (go figure)

Ain't life grand
Sure beats the alternative!

James Piper
Meco Inc
Paris IL


Yahoo! Groups Sponsor
ADVERTISEMENT



Useful links for the Yahoo!Groups Vantage Board are: ( Note: You must
have already linked your email address to a yahoo id to enable access. )
(1) To access the Files Section of our Yahoo!Group for Report Builder and
Crystal Reports and other 'goodies', please goto:
http://groups.yahoo.com/group/vantage/files/.
(2) To search through old msg's goto:
http://groups.yahoo.com/group/vantage/messages
(3) To view links to Vendors that provide Vantage services goto:
http://groups.yahoo.com/group/vantage/links

Your use of Yahoo! Groups is subject to the Yahoo! Terms of Service.



[Non-text portions of this message have been removed]
Well my ISP (Genuity) has stopped the hack attack by applying a filter
to my router and boom we got the guy stopped
Said they were using my clients computer as a relay agent shotting
out ports 138 & 139
So we got that blocked
Now I am trying to figure out what was put on the clients pc to allow
them access to do it
They traced down to a guy in Sweden (go figure)

Ain't life grand
Sure beats the alternative!

James Piper
Meco Inc
Paris IL