Re: What is this in my logs?

[Joe Sporleder]

Sorry for the false alarm...after further investigation, I have 
determined that it is most likely SIMS closing open relay options doing 
what they are supposed to do. However, I have found a couple of other 
entries quite similar, and they have turned out to be worms.

Joe

On Thursday, October 2, 2003, at 08:27  AM, Bill Cole wrote:

24.225.31.83 is a static public IP that my ISP in Hays, KS gave me to 
assign to an Apple Airport Extreme Basestation, that is providing 
routing functions for a couple of iMacs with Airport, plus our Hays 
manager's Wintel machine. I'm fairly certain that "oemcomputer" in 
this log is referring to his machine. Could he possibly have a PC 
worm or virus? It is looking like since about 3:00 p.m. this 
afternoon, these entries have been showing up approximately every 20 
minutes.


I'd bet that he has a worm, but to get useful information you will 
need to turn up the SMTP logging level.


#############################################################
This message is sent to you because you are subscribed to
 the mailing list <[EMAIL PROTECTED]>.
To unsubscribe, E-mail to: <[EMAIL PROTECTED]>
To switch to the DIGEST mode, E-mail to <[EMAIL PROTECTED]>
To switch to the INDEX mode, E-mail to <[EMAIL PROTECTED]>
Send administrative queries to  <[EMAIL PROTECTED]>