Virus

From: nono78 (courbe.arnaud_at_libertysurf-dot-fr.no-spam.invalid)
Date: 08/25/05


Date: Thu, 25 Aug 2005 03:52:45 -0500

I already got this problem ; thousands of account locks/day : it was a
virus (SDbot) which sent lot of request through the network. You
should catch the infected machine discovered from Security Event Log
(DC); a lot of request are coming from the same machine and try to
authenticate with different credentials, and then update your machine
and do an entire scan with a up to date antivirus (McAfee). This
should solve your problem. I hope so.

Ohterwise, a bad TS session closed should lock an account. Try to find
on which machine a TS would be still opened and close it correctly
=> sometimes a TS session is still alive until you change your
password and understand it was not the case because too much
lock...!!

Good luck !

 :wink:



Relevant Pages

  • [SLE] network manager wont connect - 10.1
    ... Network manager has been excellent at connecting to ... NetworkManager - we are trying to connect to linksys-t on interface ath0 ... wpa_supplicant: Setting scan request: 0 sec 0 usec ... wpa_supplicant: WPA: clearing AP WPA IE ...
    (SuSE)
  • Re: HTTP 400 - Bad Request
    ... Windows Server 2003 comes with Network Monitor, ... none of those settings have ANYTHING to do with a 400 Bad Request. ... and IIS never bothered to execute it. ...
    (microsoft.public.inetserver.iis)
  • Re: Access denied to computer in xp home networked computers
    ... But cannot access my laptop from my ... The folder is shared and network users have the right to alter ... >>Event log on Y reports that a login request type 3 was made and the login ... >>request was access denied. ...
    (microsoft.public.windowsxp.network_web)
  • Re: DHCP for multiple subnets (was: Re: Routing and bandwidth problem)
    ... >> The DHCP server shouldn't care what interface the request came in on, ... >> rather it looks at the source network of the request. ... > for the DHCP server? ...
    (Fedora)
  • Re: How would duplicators be used? (Scenario 186-B)
    ... >>>even be wireless, each phone would request an address from a wireless ... Since the network would think that it's only receiving one call, ... which butterflies down to the hardware RNG. ... >initial request to the central server where it requests its "real" ID. ...
    (rec.arts.sf.science)