Topic: Network traffic - 106 bytes every 1/20th of a second??

[ketamininja]

Hi again all....

just trying to do some network troubleshooting.

Windows 2000 Server sees this ni the Network Monitor:

LOCAL   ICMP   Echo: From 192.168.00.07 to 192.168.16.216

This capture data shows its a frame with a length of 106 bytes.
It is being sent to 192.168.xx.xx where xx is incremented every 1/20th of a second...

The packet type is an echo.
Protocol: ICMP, Len: 92.

I don't have an active server to upload images, otherwise I would

anyway - any suggestions? Antivirus shows no problems... haven't checked spywayre..

thanks

[Adept]

Sounds a bit like W32.Welchia.Worm to me

Removal tool here.

[ketamininja]

indeed it was.....
oh well - it turns out the man I asked to run a virus check on the system only installed it...

not only that, there were some strange spyware on the system sending packets to singapore...

[Clive]

It's good to hear that you sorted it out ketamininja, but I hope you told that guy what he did to your machine.  That's really bad isn't it?

[ketamininja]

one of the engineers under me not listening to instructions... heh he said the virus scan ran and showed no errors... maybe he didn't update the scanner first....

oh well, another few wasted hours for me at work... lol as if I had better things to do...