-
August 25th, 2003, 05:23 PM
#1
Junior Member
Unidentified worm - Trying to identify.
Symptoms include full IP scans of all subnets via ICMP.
Installs the following in HKCU/Run: and HKLM/Run:
winsct32.exe
winmgm32.exe
prpcui.exe
pntask.exe
loadqm.exe
The only hit I've gotten on any of these is on wingmg32.exe claiming to be a variant of SOBIG.
Any assistance in identifying appreicated, but it appears to be jumping from machine to machine.
Posting Permissions
- You may not post new threads
- You may not post replies
- You may not post attachments
- You may not edit your posts
-
Forum Rules
|
|