Events in security events - www0.up.snet... Virus? Trojan? what the h...?

Discussion in 'Security Software' started by Ricardo Pistarino, Jul 11, 2003.

  1. Hi,

    I'm getting this message from several pc's connecting to a proxy server:

    Logon Failure:
    Reason: Unknown user name or bad password
    User Name:
    Domain: <my-domain-name>
    Logon Type: 3
    Logon Process: NtLmSsp
    Authentication Package: NTLM
    Workstation Name: <my-workstation-name>

    Has anyone of you seen events like this one?
    This events begun the last week ...

    I will appreciate any help...
    Ricardo Pistarino, Jul 11, 2003
    1. Advertisements

  2. Go to and do a quick/basic scan to see
    if you have any ports open to the internet that should not be available,
    particularly netbios ports and 445 could cause a big problem. You should not
    have file and print sharing enabled on your public address nic. -- Steve
    Steven L Umbach, Jul 11, 2003
    1. Advertisements

  3. thank you

    Ricardo Pistarino, Jul 11, 2003
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.