Hi guys...currently my network traffic getting worse...when I check my mandrake for access logs these are what I saw....
192.168.1.120 TCP_DENIED/403 1043 GET
http://216.117.151.232/1.exe - NONE/- -
and some are like these;
192.168.1.120 TCP_DENIED/403 1043 GET
http://216.117.151.232/faq.exe - NONE/- -
192.168.1.120 TCP_DENIED/403 1043 GET
http://216.117.151.232/faq.exe - NONE/- -
do you have any ideas what is this? my symantec corporate virus definitions are updated, even my workstations are updated also. I already windows update but still im getting these logs.
No logs from Symantec found any virus...
Lowell
Hybrid Mode
