On-Premise Endpoint

Sophos Endpoint Software Possible Bot infiected a computer - Why?

On-Premise Endpoint requires membership for participation - click to join

Thread Info

State Not Answered
Locked Locked
Replies 4 replies
Subscribers 1 subscriber
Views 1846 views
Users 0 members are here

Options

Suggested

This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Possible Bot infiected a computer - Why?

Rodeoboy over 13 years ago

We have a computer that appearss to be spamming out through port 25 allthough Sophos is up to date and running. Why?

Sincerely,

Ken

This thread was automatically locked due to age.

Parents

0 jak over 13 years ago

Hi,
As a quick test I would fire up Process Monitor (http://technet.microsoft.com/en-us/sysinternals/bb896645.aspx) on the computer, connect it to the network, disconnect it again shortly after then analyze what took place. You can see all the processes that came and went but most importantly you can see the process or processes that sent traffic.
Hope it helps.
Regards,
Jak
:28367
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 jak over 13 years ago

Hi,
As a quick test I would fire up Process Monitor (http://technet.microsoft.com/en-us/sysinternals/bb896645.aspx) on the computer, connect it to the network, disconnect it again shortly after then analyze what took place. You can see all the processes that came and went but most importantly you can see the process or processes that sent traffic.
Hope it helps.
Regards,
Jak
:28367
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data