[Fwd: Odd resource byte/name query]

[Luke Kenneth Casson Leighton]

no, i've seen this lookup come from an nt 4.0 workstation that, to the
best of my knowledge, had nothing installed on it.  i don't trust this.

On Thu, 9 Sep 1999, Christopher R. Hertel wrote:

> For what it's worth, 0x52 translates to 'R', which means that the full 
> string is: JSPNRMPTGSBSSDIR
> 
> BSS DIR ?
> 
> Dunno.  It's probably a wild shot.  It just seems odd that the name would 
> fill the entire 15+1 bytes.  I wonder if we have a bad pointer here.
> 
> Chris -)-----
> 
> > what the heck?????  i also saw a lookup for this name fail on a dial-up
> > connection, i wondered what it was about.
> > 
> > what do people think, this is could be a new kind of virus?
> 
> 
> -- 
>              -- I have a shoehorn, the kind with teeth. --
>                                   ---
> Christopher R. Hertel -)-----                   University of Minnesota
> crh at nts.umn.edu              Networking and Telecommunications Services
> 

<a href="mailto:lkcl at samba.org"   > Luke Kenneth Casson Leighton    </a>
<a href="http://www.cb1.com/~lkcl"> Samba and Network Development   </a>
<a href="http://samba.org"        > Samba Web site                  </a>
<a href="http://www.iss.net"      > Internet Security Systems, Inc. </a>