cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
261
Views
0
Helpful
1
Replies

Signature 3301 firing off during slammer

ddinh
Level 1
Level 1

I saw an overwhelming amout of 3301 port 137 firing off and looping randomly in my network over the weekend and these boxes don't even have sql on them. Does anyone know if this is related to the SQL Slammer worm? (BTW my 4230 is still seeing this traffic today and running at over 85% cpu on packetd). Any help will greatly be appreciated. Thanks all.

1 Reply 1

ssoberlik
Level 4
Level 4

Any computer running Office XP Developer Edition, Office XP Professional Edition, Sharepoint Team Services or Visio 2002 will probably have MSDE 2000 installed.

This is the client computer, stripped-down, version of SQLServer which acts as the underlying database in these environments. MSDE 2000 is subject to the same problems as SQLServer with regard to this worm.

Better check if those boxes have MSDE 2000 installed on them.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: