FYI: IM worm

["Cam Beasley, ISO" <cam () AUSTIN UTEXAS EDU>]

you may have noticed an up tick in IM worm
infections this weekend (Kelvir varietals).  
you might check your netflow logs for hosts 
connecting to the following IRC controllers 
(some have been killed):

64.62.167.108:1345
70.84.19.20:5190
72.20.25.153:44444
130.79.188.9:8080
220.85.13.91:4367

hope this information is helpful.

~cam.


Cam Beasley, CISSP CIFI
Manager, InfoSec Operations
Information Security Office
University of Texas at Austin
cam () austin utexas edu
-------------------------------
Abuse/Misuse: abuse () utexas edu

**********
Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at 
http://www.educause.edu/groups/.