Threat Level: green Handler on Duty: Didier Stevens

SANS ISC: "New" slammer and BHO's - SANS Internet Storm Center SANS ISC InfoSec Forums


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!
"New" slammer and BHO's
We received one new report of the virus Swen being seen. It appears to be swen.a.

We received reports of an increase in 1434 traffic. A
slight increase has been seen at isc.sans.org.
Based on the packets submitted this appears to be the
original slammer worm no explaination for this
Slight increase in traffic is currently known. One point to remember is most anti-virus scanners work on file access (open, create, read ...) and will not notify on slammer because it is a worm that only resides in memory.
donald

206 Posts
ISC Handler

Sign Up for Free or Log In to start participating in the conversation!