[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[ISSForum] New Sasser variant?
Is anyone else experiencing large amounts of traffic that appears as
Sasser, then turns into an ircbot.trojan named smsc.exe
connecting on port 6667, then performs HUGE amounts of SNMP get
requests? <grin> I am, and very few people seem to have any
clue what this is...Virus companies are jumping around trying to define
and be first in line with a solution, I just wondered if
anyone on this forum has seen it yet?
ISS sigs triggering thus far are:
(others have been turned off due to sheer volume)
ISSForum mailing list
TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to https://atla-mm1.iss.net/mailman/listinfo/issforum
To contact the ISSForum Moderator, send email to mod-issforum@xxxxxxx
The ISSForum mailing list is hosted and managed by Internet Security Systems, 6303 Barfield Road, Atlanta, Georgia, USA 30328.