Re: Port 445 spike. New worm?

From: S.Heenan (SusanH705removethis_at_hotmail.com)
Date: 05/24/03

  • Next message: Jim Watt: "Re: BIOS and Hard Drive Passwords - Are they effective security approaches?"
    Date: Fri, 23 May 2003 22:26:33 GMT
    
    

    "Android Cat" <androidcat99@hotmail.com> wrote in message
    news:63xza.7135$c41.861497@news20.bellglobal.com...
    > Starting just before 4:30 pm EDT I started getting a large number of 445
    > TCP attempts. The attempts are from all over, the same pattern as when a
    > spreading worm is scanning. I usually get a few a week, this looks Code
    > Red
    > in frequency -- several a minute, and climbing.
    >
    > Anyone else seeing this?
    >
    > Ron of that ilk.

    Probably the W32 Deloader worm.


  • Next message: Jim Watt: "Re: BIOS and Hard Drive Passwords - Are they effective security approaches?"

    Relevant Pages

    • Re: Port 445 spike. New worm?
      ... > TCP attempts. ... The attempts are from all over, the same pattern as when a ... > spreading worm is scanning. ...
      (alt.computer.security)
    • Re: Port 445 spike. New worm?
      ... > TCP attempts. ... The attempts are from all over, the same pattern as when a ... > spreading worm is scanning. ...
      (alt.computer.security)
    • Re: Port 445 spike. New worm?
      ... The attempts are from all over, the same pattern ... >> as when a spreading worm is scanning. ...
      (alt.computer.security)