nanog mailing list archives
Re: The Confiker Virus.
From: Steven Fischer <sfischer1967 () gmail com>
Date: Tue, 31 Mar 2009 16:37:48 -0400
Is anyone aware of any network-based signatures that could be used to identify and tag IP traffic, for dropping at the ingress/egress points? On Tue, Mar 31, 2009 at 9:41 AM, JoeSox <joesox () gmail com> wrote:
I am uncertain also. I scan a subnet on my network with Axence NetTools looking for 445 port and I receive some hits. I perform a netstat -a some of those results but don't really see any 445 activity. The SCS script doesn't find anything either. The PCs are patched and virusscan updated. One PC when I connected to it did not navigate to Windowsupdate website. I scheduled a Full McAfee scan as their documentation suggests ( http://download.nai.com/products/mcafee-avert/documents/combating_w32_conficker_worm.pdf ), and sometime through the scan I was able to reach windowsupdate. I don't know if it was a coincidence or not that I was not able to reach the website. I haven't looked into the registry and any other places for evidence of conficker. I will probably today but I am afraid it maybe a waste of time since they are already patched and updated. -- Joe On Tue, Mar 31, 2009 at 5:48 AM, Eric Tykwinski <eric-list () truenet com> wrote: > Joe,Here's the link for the Python Crypto toolkit: http://www.amk.ca/python/code/crypto.html I scanned our internal network and didn't find anything, so I can'treallyvouch for it's reliablity though.
-- To him who is able to keep you from falling and to present you before his glorious presence without fault and with great joy
Current thread:
- Re: The Confiker Virus., (continued)
- Re: The Confiker Virus. Paul Ferguson (Mar 30)
- Re: The Confiker Virus. JoeSox (Mar 30)
- Re: The Confiker Virus. Stefan (Mar 30)
- Re: The Confiker Virus. David Tebbutt (Mar 30)
- RE: The Confiker Virus. Eric Tykwinski (Mar 31)
- Re: The Confiker Virus. Jason Biel (Mar 31)
- Re: The Confiker Virus. Stefan (Mar 31)
- Re: The Confiker Virus. Steven M. Bellovin (Mar 31)
- Re: The Confiker Virus. Wilkinson, Alex (Mar 31)
- Re: The Confiker Virus. JoeSox (Mar 31)
- Re: The Confiker Virus. Steven Fischer (Mar 31)
- Re: The Confiker Virus. Dominic J. Eidson (Mar 31)
- Re: The Confiker Virus. JoeSox (Mar 31)
- Re: The Confiker Virus. Jason Biel (Mar 31)
- RE: The Confiker Virus. Matthew Huff (Mar 29)
- Re: The Confiker Virus. Paul Ferguson (Mar 29)
- The Confiker Virus hype and measures Gadi Evron (Mar 30)
- RE: The Confiker Virus hype and measures Stasiniewicz, Adam (Mar 30)
- Re: The Confiker Virus hype and measures Gadi Evron (Mar 30)
- Re: Fiber cut on Irish Sea + Verizon fiber cut John Martinez (Mar 30)