Is this likely the Sasser virus?

From: Ahamay (none)
Date: 05/08/04 

Date: Fri, 7 May 2004 18:33:42 -0500

Log from my Sygate Personal Firewall:

Somebody is scanning your computer.
Your computer's TCP ports:
2745, 1025, 445, 3127 and 6129 have been scanned from IP xxx.xxx.xxx.xx.

This has been going on for a few days, several times a day. And I have only
had a few port scans in the many months prior to this recent rash, so I have
assumed it is a Sasser infected PC. Is that a likely assumption?

Ray

Relevant Pages

  • Re: How to stop a hacker?
    ... > Since I've got internet connexion, ... > There is someone who is scanning all my tcp ports, ...
    (comp.security.firewalls)
  • Re: getting a minor attack
    ... > Somebody is scanning your computer. ... > Your computer's TCP ports: ... I get something similar from their DNS server which is my default. ... David Wright ...
    (comp.security.firewalls)
  • Re: getting a minor attack
    ... > Somebody is scanning your computer. ... > Your computer's TCP ports: ... This port, yes you need to be concerned, but it's probably some random worms ... vi needs to be upgraded to vii ...
    (comp.security.firewalls)
  • getting a minor attack
    ... Sygate keeps catching this minor intruder. ... Somebody is scanning your computer. ... Your computer's TCP ports: ...
    (comp.security.firewalls)
Quantcast