Wireshark-users: Re: [Wireshark-users] worm
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: Ionreflex <ionreflex@xxxxxxxxx>
Date: Wed, 9 May 2007 23:39:54 -0400
Next time you can use VirusTotal online scanning service... if you don't know about it go check it out, it's worth it!


2007/5/4, Andrew Hood <ajhood@xxxxxxxxx>:
DENNIS CRAWLEY wrote:
> Hi,
>
> This machine reaches the TCPIP XP limit of connections. I've made a wcap
> capture and it seems a worm is using the smtp.
>
> Does anybody knows what worm is?. It's refused to be detected by most common
> antivirus.

ClamAv says:

worm.pcap: Email.Phishing.RB-732 FOUND

Took a fair bit of cpu and memory to scan it too.

--
There's no point in being grown up if you can't be childish sometimes.
                -- Dr. Who
_______________________________________________
Wireshark-users mailing list
Wireshark-users@xxxxxxxxxxxxx
http://www.wireshark.org/mailman/listinfo/wireshark-users