Next time you can use VirusTotal
<http://www.virustotal.com/en/indexf.html>online scanning service...
if you don't know about it go check it out, it's
worth it!
2007/5/4, Andrew Hood <[EMAIL PROTECTED]>:
DENNIS CRAWLEY wrote:
> Hi,
>
> This machine reaches the TCPIP XP limit of connections. I've made a wcap
> capture and it seems a worm is using the smtp.
>
> Does anybody knows what worm is?. It's refused to be detected by most
common
> antivirus.
ClamAv says:
worm.pcap: Email.Phishing.RB-732 FOUND
Took a fair bit of cpu and memory to scan it too.
--
There's no point in being grown up if you can't be childish sometimes.
-- Dr. Who
_______________________________________________
Wireshark-users mailing list
Wireshark-users@wireshark.org
http://www.wireshark.org/mailman/listinfo/wireshark-users
_______________________________________________
Wireshark-users mailing list
Wireshark-users@wireshark.org
http://www.wireshark.org/mailman/listinfo/wireshark-users
