Jim:
You obviously don't use Anti Virus and/or FireWall software -- and you should !
This is part of the MoFei Worm !
http://vil.nai.com/vil/content/v_100357.htm
Excerpt Text:
"This is a network share propagation worm. It attempts to spread by copying itself to
the ADMIN$ share of remote machines. The worm scans ip addresses at port 135
and 139, tries to gain access to the share by trying weak administrator username
and passwords. There are several variants of this worm. As such, the exact
details of infection as noted below may vary from infection to infection.
The worm includes a dropper file. When the dropper is run on Windows 98/ME
machines it creates the following file at c:\windows\system32 directory:
NAVPW32.EXE (11,776 bytes)
SCARDSVR32.EXE (copy of the dropper) "
Dave
| Can anyone tell me the purpose of scardsvr32.exe, which
| is in the \windows\system32 folder? It keeps getting
| infected with a worm, but I cannot locate the file and
| don't know whether it is crucial to the operations of Win
| 2000. Thanks for any help.
