new worm/virus active

Seems like a new worm/virus is active.

I am getting udp packets on ports 1026 and 1027. from different source
computers and source ports.

Since a couple of days.

Anybody know what new worm this is ?

( I have also seen the new BlackIce worm active from source port 4000, poor
bastards )

Really it's a shame !

"Skybuck Flying" <nospam@hotmail.com> wrote in
news:c3m13m$i24$1@news1.tilbu1.nb.home.nl:

> ( I have also seen the new BlackIce worm active from source port 4000,
> poor bastards )
>

Seeing how that I am using BI and don't have any problems what is your
point with this? <g>

> Really it's a shame !
>

It's a shame if one doesn't use the patch. Or one can goto a version that
is not affected by the worm.

This is much to do about nothing! <g>

Duane

"Skybuck Flying" <nospam@hotmail.com> wrote in
news:c3m13m$i24$1@news1.tilbu1.nb.home.nl:

> Seems like a new worm/virus is active.
>
> I am getting udp packets on ports 1026 and 1027. from different source
> computers and source ports.
>
> Since a couple of days.
>
> Anybody know what new worm this is ?

It's quite possibly Messenger Spam. I've been seeing it here for a long
time regularly.. That's my best guess... I could be wrong though...


--
Kerodo

On Mon, 22 Mar 2004 07:37:20 +0100, Skybuck Flying wrote:

> Seems like a new worm/virus is active.
>
> I am getting udp packets on ports 1026 and 1027. from different source
> computers and source ports.
>

Yes, it's messenger popup spam

http://www.lurhq.com/popup_spam.html

--
Jafar As-Sadiq Calley
Senior 1st Officer
Livewire Airlines
http://www.livewireairlines.com/

"Skybuck Flying" <nospam@hotmail.com> wrote in
news:c3o8ap$e7u$1@news2.tilbu1.nb.home.nl:

>> > I am getting udp packets on ports 1026 and 1027. from different
>> > source computers and source ports.
>> >
>> > Since a couple of days.
>> >
>> > Anybody know what new worm this is ?
>>
>> It's quite possibly Messenger Spam. I've been seeing it here for a
>> long time regularly.. That's my best guess... I could be wrong
>> though...
>
> Well whatever it is, it is spreading quite a lot, since I am getting
> it from different ip addressess.

Yep, that's normal for messenger spam. It comes from many source ip's. I
wouldn't worry about it. Sounds like your firewall is blocking it fine...

--
Kerodo

"Kerodo" <kerodo~nospam~kenny@hotmail.com> wrote in message
news:Xns94B3F3989637Bkerodokenny@68.6.19.6...
> "Skybuck Flying" <nospam@hotmail.com> wrote in
> news:c3m13m$i24$1@news1.tilbu1.nb.home.nl:
>
> > Seems like a new worm/virus is active.
> >
> > I am getting udp packets on ports 1026 and 1027. from different source
> > computers and source ports.
> >
> > Since a couple of days.
> >
> > Anybody know what new worm this is ?
>
> It's quite possibly Messenger Spam. I've been seeing it here for a long
> time regularly.. That's my best guess... I could be wrong though...

Well whatever it is, it is spreading quite a lot, since I am getting it from
different ip addressess.