We had to go through each VLAN to determine which boxes were compromised, looks like W2K SQL.
This thing is spreading fast. -D 0. Pete Ashdown <[EMAIL PROTECTED]> farted: > > * Avleen Vig ([EMAIL PROTECTED]) [030124 23:50] writeth: > > > >It seems we have a new worm hitting Microsoft SQL server servers on port > >1434. > > Affirmative. Be sure to block 1434 UDP on both the inbound and the > outbound. Infected servers are VERY NOISY. -- -------------- http://www.zeromemory.com - metal for your ears.
