Re: Is this a virus?
From: Nils Petter Vaskinn (me_at_privacy.net)
Date: Thu, 11 Mar 2004 21:19:58 +0100
On Thu, 11 Mar 2004 02:50:08 +0000, Michael wrote:
> Linux gateway = Redhat
[snipp long horror story]
> DST=220.127.116.11 3
Can you isolate it on a network with a machine you control, give it a
resposnse to the lookup and then see what id does? If it's a worm it
probably wants to send something, and if you can get a cappture of it then
you migght be able to fiigure out what it is.
-- NPV What did that old blonde gal say? -- That is the part you throw away. Tom Waits - The part you throw away