Threat Level: green Handler on Duty: Xavier Mertens

SANS ISC: InfoSec Handlers Diary Blog InfoSec Handlers Diary Blog

Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

"New" slammer and BHO's

Published: 2004-07-05
Last Updated: 2004-07-05 23:40:22 UTC
by donald smith (Version: 1)
0 comment(s)
We received one new report of the virus Swen being seen. It appears to be swen.a.

We received reports of an increase in 1434 traffic. A
slight increase has been seen at
Based on the packets submitted this appears to be the
original slammer worm no explaination for this
Slight increase in traffic is currently known. One point to remember is most anti-virus scanners work on file access (open, create, read ...) and will not notify on slammer because it is a worm that only resides in memory.
0 comment(s)
Diary Archives