FYI...from the Internet Storm Center:
Updated July 5th 2004 23:40 UTC
"We received one new report of the virus Swen being seen. It appears to be swen.a. We received reports of an increase in 1434 traffic. A slight increase has been seen at isc.sans.org. Based on the packets submitted this appears to be the original slammer worm no explaination for this Slight increase in traffic is currently known. One point to remember is most anti-virus scanners work on file access (open, create, read ...) and will not notify on slammer because it is a worm that only resides in memory."
(Saturday, Jan. 25, 2003 -> http://www.pbs.org/w...slammermap.html )
Increase in port 1434 traffic
No replies to this topic