The Beagle/Bagel has been busy today.

Early this morning Symantec raised it to a level 3 due to the number reported to be out in the wild. They have now posted a removal tool on the web site.
http://securityresponse.symantec.com/avcenter/venc/data/w32.beagle.a@mm.html



Strange Port Activity

Still receiving reports of unusual activity on Ports 80 (Code Red II ?) and 53 (DNS), as well as a continued increase in port 6129, Dameware.
The ISC would like to encourage anyone seeing unusual activity to contact us and let us know what you are seeing.


http://isc.sans.org/contact.html



Deb Hale
BCP Enterprise Inc