|
Posted by Roger Abell [MVP] on March 16, 2006, 9:13 pm
If you were Registered and logged in, you could reply and use other advanced thread options
Keep in mind that your NetBIOS support services may just be
acting as proper little slaves doing the bidding of something (else)
that is running on those machines.
>
> Im having a problem with 4 out of 6 of win2k server. The server keep
> issuing
> Netbios enumeration requests (every second) to server which are in the
> range
> of 128.X.X.X to 138.X.X.X. (Most of these server are class B network
> belong
> to NEC and JP government).They are small packets, but this happening
> continousaly.
>
> It looks very like a virus but why would it be coming from the Service.exe
> process. Ive unbound Netbios from the interfaces which has stoped the
> speurios traffic but i still dont have an idea whats causing it, any why
> is
> happening.
|