weird problem on network ?

On our network there is something weird going on. Since monday a few pc's
are scanning the network and on the domain server all useraccounts are
scanned and 'locked out'. This looks like a worm/virus but the antivirus is
up-to-date and cannot find any virus.
I've found traffic to ip adressess in the range 224.0.1.2 to 224.0.1.24.
Also SGI-Dogfight is mentioned in the loggings. Did anyone see this before
or knows what this is ?

SGI-Dogfight is some kind of game, ...I think it is some kind of aircraft
dogfight sim.

All IP#s beginning with 224 are multi-cast addresses and this traffic is
generated by the game.

Sounds like someone has installed this game on one of your machines and is
creating havoc on your network.

--

Phillip Windell [MCP, MVP, CCNA]
www.wandtv.com


"freddy lallemand" <(E-Mail Removed)> wrote in message
news:%23UA%(E-Mail Removed)...
> On our network there is something weird going on. Since monday a few pc's
> are scanning the network and on the domain server all useraccounts are
> scanned and 'locked out'. This looks like a worm/virus but the antivirus
is
> up-to-date and cannot find any virus.
> I've found traffic to ip adressess in the range 224.0.1.2 to 224.0.1.24.
> Also SGI-Dogfight is mentioned in the loggings. Did anyone see this before
> or knows what this is ?
>
>