Strange Port hits

[dep]

begin  Kevin O'Gorman's  quote:
| Yes, it's SQLServer, and I had to reload a Win 2k system two weeks
| back that got infected, probably through that port.  It wasn't
| exposing anything else (no Outlook, no IIS).  Fortunately it was a
| research machine, and the data I really need on it is static, so
| reloading wasn't such a horrible chore.  I no longer use the
| default port, and I'm hoping for the best, because I have no clue
| how to prevent it happening again if the culprit(s) detects the new
| port.

it is to be noted, too, that if the sysadmin of the sqlserver 
installation has actually hiven the admin account an actual password, 
sqlsnake, a/k/a spida, can't do anything. i wrote a little about it 
last week:

http://www.linuxandmain.com/modules.php?name=News&file=article&sid=66
-- 
dep

http://www.linuxandmain.com -- outside the box, barely within the 
envelope, and no animated paperclip anywhere.