[PLUG] Aargh, does anybody know if this new winblows worm causes infected machines to do portscans?

john morgali aarghj at yahoo.com
Sun Apr 28 15:38:12 UTC 2002


yes, the virus is network capable, and will attempt to
find open ports on which to send itself.  also, it
will infect any mapped drives as well.  for full
details go to www.symantec.com/avcenter.

John
Only Slightly Befuddled


--- Bill <bill at coho.net> wrote:
> My portscan detector has been reporting a ridiculous
> number of portscans 
> today, over 3000 and all apparently originating on
> my subnet.  Also all 
> broadcast portscans.  Coming from a variety of ips,
> which is what you'd 
> expect if several dozen machines have been infected.
>  I know there's a new 
> winblows bug out there (klez.h or some such), but I
> haven't found any 
> mention of portscanning as a side effect.  Is there
> some other worm 
> out there?
> 
> Bill
> 
> 
> _______________________________________________
> PLUG mailing list
> PLUG at lists.pdxlinux.org
> http://lists.pdxlinux.org/mailman/listinfo/plug


__________________________________________________
Do You Yahoo!?
Yahoo! Health - your guide to health and wellness
http://health.yahoo.com




More information about the PLUG mailing list