Events in security events - www0.up.snet... Virus? Trojan? what the h...?

[Ricardo Pistarino]

Hi,

I'm getting this message from several pc's connecting to a proxy server:

Logon Failure:
Reason: Unknown user name or bad password
User Name: www0.up.snet.ne
Domain: <my-domain-name>
Logon Type: 3
Logon Process: NtLmSsp
Authentication Package: NTLM
Workstation Name: <my-workstation-name>

Has anyone of you seen events like this one?
This events begun the last week ...

I will appreciate any help...

 

[JasonW]

I found one occurance of this "user" name in google groups. It was linked to
an email virus called JS/Fortnight-E, though there are probably others that
are similar. Got to keep your antivirus up to date and enable email
scanning. I get at least one email virus/trojan per day, sometimes lots
more.

-JasonW

 

[Ricardo Pistarino]

I'm using eTrust InoculateIT 6.0, up-to-date... what antivirus did u use?

 

[JasonW]

I use Norton. That is what the company I used to work for is still using.
Seems to do the trick. There were some problems with really slowing down the
email servers, but they seem to have overcome that issue. A lot of posters
in other newsgroups consider Norton a resource hog.

-JasonW

 

[Dmitry Korolyov]

Norton is the one and only. And if you don't think so, you should replace
your userhands.dll with correct version.