Re: What is the Pattern here ?

From: !:?) (_at_*.com)
Date: 08/01/04 

Date: Sun, 01 Aug 2004 18:06:44 GMT

Hi Jens,

Jens Hektor wrote:

>
> This pattern characterizes the Virus/Worm Agobot/Gaobot.
>
> Lots of infected machines out there, indeed.

Could they be looking to compromize Web Accellerators that are nothing
more than Web Servers added by some ISP's ?
If so this could explain the DNS and Web Server Zombies with low TTL's
used by Spam Websites.

Keeping them out of my Machine is not hard but trying to figure out what
it is they are trying to do in a bigger picture is.
Thanks, I'll look up Agobot/Gaobot.
I didn't see those on my prepost searches on those ports.

Kevin