Re: Port 445 spike. New worm?
From: S.Heenan (SusanH705removethis_at_hotmail.com)
Date: Fri, 23 May 2003 22:26:33 GMT
"Android Cat" <email@example.com> wrote in message
> Starting just before 4:30 pm EDT I started getting a large number of 445
> TCP attempts. The attempts are from all over, the same pattern as when a
> spreading worm is scanning. I usually get a few a week, this looks Code
> in frequency -- several a minute, and climbing.
> Anyone else seeing this?
> Ron of that ilk.
Probably the W32 Deloader worm.