SAV Worm Update

Published: 2006-12-16
Last Updated: 2006-12-16 19:51:27 UTC
by Koon Yaw Tan (Version: 1)
0 comment(s)
There is an increase on port 2967 attempts which is associated to the SAV worm for the last few days:
http://isc.sans.org/port_details.php?port=2967

eEye has a nice technical write up which provide an analysis of this worm. Check it out during your free time.
http://research.eeye.com/html/alerts/AL20061215.html

Symantec has also released virus definition pertaining to this worm:
Backdoor.Wualess.B
W32.Sagevo

Keywords:
0 comment(s)

Comments


Diary Archives