[fw-wiz] worm?
- From: "Brian Loe" <knobdy@xxxxxxxxx>
- Date: Thu, 1 Feb 2007 12:45:51 -0600
One of our support technician's machines is attempting to connect to
random IP addresses on port 25 - in a pretty needy fashion. He says
he's scanned the box with the latest updates from McAffee and it
hasn't found anything.
We discovered it because one of my basic (meaning I got it off the
'Net) rules for SEC flagged it as a possible PHEL trojan.
Any thoughts?
_______________________________________________
firewall-wizards mailing list
firewall-wizards@xxxxxxxxxxxxxxxxxxxxx
https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards
- Follow-Ups:
- Re: [fw-wiz] worm?
- From: Paul Melson
- Re: [fw-wiz] worm?
- From: Paul D. Robertson
- Re: [fw-wiz] worm?
- Prev by Date: [fw-wiz] Security policy language
- Next by Date: Re: [fw-wiz] worm?
- Previous by thread: [fw-wiz] Security policy language
- Next by thread: Re: [fw-wiz] worm?
- Index(es):
Relevant Pages
|
|
