What is Kyoceranetdev

[Guest]

I have some computers on the network and they keep talking 1063 outbond- i
assumed it is a trojan or some such thing and i am trying to kill it but it
is spreading slowly. I think i have contained it for now. mostly it tries
to go to the internet but we have stoped that i think. not my real question
but thought it would peak interest.

what is Kyoceranetdev??? i have looked only for 8 - 10 hours with no luck
good or bad at least i have found no known / recent bad software using the
port that i can find.

any information on what Kyoceranetdev is ??? would be great

Thanks

 

[Larry Samuels]

Just a WAG, but do you have a Kyocera network printer?
http://www.iana.org/assignments/port-numbers

--
Larry Samuels Associate Expert
MS-MVP (2001-2005)
Unofficial FAQ for Windows Server 2003 at
http://pelos.us/SERVER.htm
Expert Zone-

 

[Guest]

no i wish.

just alot hp and two lexmarks and this client is not near the lexmarks

it is just driving me batty

--
"Well, here''s another nice mess you''ve gotten us into." - Laurel and Hardy

Just a WAG, but do you have a Kyocera network printer?
http://www.iana.org/assignments/port-numbers

--
Larry Samuels Associate Expert
MS-MVP (2001-2005)
Unofficial FAQ for Windows Server 2003 at
http://pelos.us/SERVER.htm
Expert Zone-

 

[Guest]

Is this like that old ddl or dcl protocal that used to exist for IBM print?

if that is so than perhaps i will start collecting more data.
I think i am going to need it.

--
"Well, here''s another nice mess you''ve gotten us into." - Laurel and Hardy

Just a WAG, but do you have a Kyocera network printer?
http://www.iana.org/assignments/port-numbers

--
Larry Samuels Associate Expert
MS-MVP (2001-2005)
Unofficial FAQ for Windows Server 2003 at
http://pelos.us/SERVER.htm
Expert Zone-

 

[Larry Samuels]

Something is definitely up with that port--look at the spikes in the SANS
report for that port beginning the last week of May.
http://isc.sans.org/port_details.ph...srcax=2&percent=N&days=40&Redraw=Submit+Query


--
Larry Samuels Associate Expert
MS-MVP (2001-2005)
Unofficial FAQ for Windows Server 2003 at
http://pelos.us/SERVER.htm
Expert Zone-

no i wish.

just alot hp and two lexmarks and this client is not near the lexmarks

it is just driving me batty

 

[Guest]

Ya i saw that myself which is what start me on this paranioa trip

even checked to see is the clients had a kyrocera phone with software for
the phone installed but nothing.

 

[Guest]

even scarier

the addresses the computers are trying to go to is in this range set list
owned by uu.

http://isc.sans.org/assourcesummary.php?as=701

I have checked the machines and they have the most resent mcafee avaiable.

and two of them have anti spy ware stuff installed. it is per plecing