Author Topic: Worm Packs with W32SQLSlammer  (Read 3243 times)

0 Members and 1 Guest are viewing this topic.

VB_For_Dummies

  • Guest
Worm Packs with W32SQLSlammer
« on: December 16, 2004, 04:59:53 PM »
I searched through the forum and found that the discussion has been previously raised concerning the "  SQL SSRP  W32SQLSlammer " . And as well , have notated that Avast detects and moves this worm to the Chest. However , I want to let it be known  that this virus has hit me three times within the last 24 hours . Also , the worm shipped with " SQL SSRP StackBo " of which , Avast has failed on all attacks to contain.

I also use BlackIce ( updated Version ) which I immediately block the user which is pushing the virus.

The attacks thus far have derived from the following :
( If you use BlackIce , I would advice submitting the following IP#'s into your firewall and Deny the access from these persons )

1>

IP: 69.210.223.161
DNS: adsl-69-210-223-161.dsl.toldoh.ameritech.net

2>
IP: 61.178.172.100
DNS: CNK
Node: CNK
Group: WORKGROUP
NetBIOS: <0102>__MSBROWSE__<02>
MAC: 00C09F3C0493

3>

IP: 172.171.2.5
DNS: ACAB0205.ipt.aol.com
( I believe that the above (#3) is an Dial-Up address )