2002705

	SMB win.ini file
advICE :Intrusions : 2002705

FAQ

Oh my gosh, I'm being HACKED!!!

How do I report the hacker to my ISP?

I'm seeing lots of attacks, is this normal?

Summary
An attempt has been made to remotely access the system's WIN.INI file.
Details
This attack is trying to reconfigure the system, such as configuring a Trojan Horse to run when the system is restarted.

more information

Worm: ExploreZip: This worm spreads through a number of mechanisms. One of these will attempt to install itself on a remote computer by copying itself to the remote hard drive, then configuring the WIN.INI file to start the program upon the next reboot.

parametric information

protocol The protocol in which this file name was used.

filename The complete filename.

 
Version appeared:

SMB win.ini file