PC Pals Forum

Technical Help & Discussion => General Tech Discussion, News & Q&A => Topic started by: ketamininja on September 26, 2003, 17:00

Title: Network traffic - 106 bytes every 1/20th of a second??
Post by: ketamininja on September 26, 2003, 17:00: Hi again all....

just trying to do some network troubleshooting.

Windows 2000 Server sees this ni the Network Monitor:

LOCAL ICMP Echo: From 192.168.00.07 to 192.168.16.216

This capture data shows its a frame with a length of 106 bytes.
It is being sent to 192.168.xx.xx where xx is incremented every 1/20th of a second...

The packet type is an echo.
Protocol: ICMP, Len: 92.

I don't have an active server to upload images, otherwise I would :D

anyway - any suggestions? Antivirus shows no problems... haven't checked spywayre..

thanks
Title: Re:Network traffic - 106 bytes every 1/20th of a second??
Post by: Adept on September 26, 2003, 18:56: Sounds a bit like W32.Welchia.Worm (http://securityresponse.symantec.com/avcenter/venc/data/w32.welchia.worm.html) to me :(

Removal tool here (http://securityresponse.symantec.com/avcenter/venc/data/w32.welchia.worm.removal.tool.html).
Title: Re:Network traffic - 106 bytes every 1/20th of a second??
Post by: ketamininja on October 04, 2003, 15:39: indeed it was.....
oh well - it turns out the man I asked to run a virus check on the system only installed it...

not only that, there were some strange spyware on the system sending packets to singapore...
Title: Re:Network traffic - 106 bytes every 1/20th of a second??
Post by: Clive on October 04, 2003, 15:56: It's good to hear that you sorted it out ketamininja, but I hope you told that guy what he did to your machine. That's really bad isn't it?
Title: Re:Network traffic - 106 bytes every 1/20th of a second??
Post by: ketamininja on October 07, 2003, 16:13: one of the engineers under me not listening to instructions... heh he said the virus scan ran and showed no errors... maybe he didn't update the scanner first....

oh well, another few wasted hours for me at work... lol as if I had better things to do...