Educause Security Discussion mailing list archives

Re: New Virus/Trojan/...?


From: Scott Weeks <sweeks () SANDIEGO EDU>
Date: Mon, 4 Oct 2004 14:21:04 -0700

On Mon, 4 Oct 2004, Jason Brooks wrote:

:  Beginning about 16:45 EDT on Sunday 3 Oct 2004, we began seeing high levels
:  of port scanning for port 445 from our students.  We have obtained one
:  laptop for analysis.  Here are our findings:
:
:          Process Quicktimee.exe is opening numerous outbound connections to

<snip>

:  So, with that, does it look familiar to anyone?  McAfee doesn't know it, and
:  can't turn up anything seemingly related in Google, etc.
:
:  Suggestions/Help?


You might try the Incidents mailinglist at SecurityFocus:

     http://www.securityfocus.com/incidents

scott












x=x=x=x=x=x=x=x=x=x=x=x

**********
Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at 
http://www.educause.edu/groups/.

Current thread: