MS SQL Server - virus program bound to port 1433

You are viewing an archived Text-only version of the thread. To view this thread in it's original format and/or if you want to reply to this thread please [click here]

Author

virus program bound to port 1433

Dan D.

2006-03-14, 9:23 am

We found a program bound to port 1433 called msoffexport.exe. It also had two
other files called msoffexport.ocx and msoffexporttool.dll.

Does this type of program just intercept anything that comes out of port
1433 and send it somewhere else? Or can it bypass SQL security and go in and
get data from the database? We found that the IP address on the network card
had been changed too. Is there anyway to know how much data was intercepted?

Thanks,
--
Dan D.

Sponsored Links