David R:
You bring up an *EXCELLENT* point !
A virus, worm or Trojan may be loading on Jef's PC. The Nimda can intiate a TFTP session
and so does the Nachi worm.
Jef:
Go to McAfee and/or Trend (
http://housecall.antivirus.com) and perform an online scan of
your platform and report back your results.
Dave
| where is the tftp server in win2k pro?? i run that here and don't have
| anything listening on port 69. i would take a good look at your processes
| to see what is already running and use one of the tools to see what port the
| process belongs to. there are viruses and worms that use tftp, code red and
| nimda are a couple of them i think.
|
| in doing a bit more checking, win2k does include a tftp client, but q142373
| says:
|
| <quote>
| Chapter 1 of the Microsoft Windows NT Server TCP/IP versions 3.5 and 3.51
| guides mention that Microsoft TCP/IP includes Trivial File Transfer Protocol
| (TFTP). Windows NT includes the TFTP client utility (TFTP.EXE) only, because
| TFTP does not provide user authentication. TFTP server utilities are
| available from third-party software vendors.
| <unquote>
|
| so i would guess that either you or someone else installed a tftp service on
| that machine already.
|
|