Re: Port 137 scan Info

From: Douw Gerber (douwg@msn.com)
Date: 09/30/02


From: Douw Gerber <douwg@msn.com>
Date: Mon, 30 Sep 2002 15:56:00 +0200

I work for an ISP in SA and we also have numerous clients generating
this Port 137 traffic as of this monring.

Unfortunately the security and anti-virus sites are not saying
anything yet so at the moment what ever is casuing this is unknown.

On Mon, 30 Sep 2002 01:18:30 GMT, "Tie Dye"
<i~fly~vfr~@worldnet.att.net> wrote:

>Some Info Here,
>http://isc.incidents.org/
>"2002-Sep-29... current status: green Yet another mod_ssl worm (analysis
>coming soon). Scans for port 137 on the rise." Quoted from ISC.
>TD
>
>
>---
>Outgoing mail is certified Virus Free.
>Checked by AVG anti-virus system (http://www.grisoft.com).
>Version: 6.0.391 / Virus Database: 222 - Release Date: 9/19/02
>



Relevant Pages

  • Re: SSL
    ... And if you are using SSL over a standard port for outbound ... you might need to disable e-mail scanning by your anti-virus ... monitor only specific or standard ports for e-mail traffic. ...
    (microsoft.public.outlook)
  • Re: virus got past mcafee viruscan 8.7
    ... to be this year's problem) means that relying on anti-virus to prevent ... malware infection is likely to result in an unpleasant surprise. ... and has been sending out spam by making outbound connections on port 25. ... InfoSec Institute ...
    (Security-Basics)
  • RE: Port and File-Blocking Best Practices
    ... anti-virus and firewall-protection. ... incomming file gets checked anyway by anti-virus. ... even integrated in iexplore and messenger. ... Concerning port 80 of iexplore; ...
    (microsoft.public.win2000.security)
  • Re: how to disable port in my computer
    ... How about updates ??? ... > the worm keep on using my port 445.it make my pc and ...
    (microsoft.public.windowsxp.general)
  • comp.security.unix and comp.security.misc frequently asked questions
    ... Can I turn off identd? ... to learn about computer security? ... Niles and Jyrki Havia for tripwire bug details as posted to the newsgroup. ... connecting from port 20546 on your machine to port 25 on 205.238.143.33. ...
    (comp.security.misc)