[Fwd: Odd resource byte/name query]
Luke Kenneth Casson Leighton
lkcl at samba.org
Fri Sep 10 16:07:00 GMT 1999
no, i've seen this lookup come from an nt 4.0 workstation that, to the
best of my knowledge, had nothing installed on it. i don't trust this.
On Thu, 9 Sep 1999, Christopher R. Hertel wrote:
> For what it's worth, 0x52 translates to 'R', which means that the full
> string is: JSPNRMPTGSBSSDIR
>
> BSS DIR ?
>
> Dunno. It's probably a wild shot. It just seems odd that the name would
> fill the entire 15+1 bytes. I wonder if we have a bad pointer here.
>
> Chris -)-----
>
> > what the heck????? i also saw a lookup for this name fail on a dial-up
> > connection, i wondered what it was about.
> >
> > what do people think, this is could be a new kind of virus?
>
>
> --
> -- I have a shoehorn, the kind with teeth. --
> ---
> Christopher R. Hertel -)----- University of Minnesota
> crh at nts.umn.edu Networking and Telecommunications Services
>
<a href="mailto:lkcl at samba.org" > Luke Kenneth Casson Leighton </a>
<a href="http://www.cb1.com/~lkcl"> Samba and Network Development </a>
<a href="http://samba.org" > Samba Web site </a>
<a href="http://www.iss.net" > Internet Security Systems, Inc. </a>
More information about the samba-technical
mailing list