Notepad - Worm

[Matthias Krawen <Matthias_Krawen () COMPOSITIV DE>]

Hi !

I recognize a lota scans for open smb-shares in theses days with are send 
by the "notepad" - Worm in my opionen;

This from Sophos:

Name: Troj/Qaz
Aliases: W32.HLLW.Qaz.A, W32/QAZ.worm
Type: Trojan
Date: 29 August 2000

I think about 90% of all attempts to access smb on my site are originated 
by this worm. The standard listening port is 7597

Does anybody knows the standard password  or a URL to get the source ?

Thx
 Matthias



Compositiv
EDV- und Kommunikationslösungen, PC-Service
Matthias Krawen
Peiffersweg 9
22307 Hamburg

Tel: 040 / 611 673 - 40                           EMail: info () compositiv de
Fax: 040 / 611 673 - 41                           http://www.compositiv.de