View Single Post
Old 02-05-2009, 06:49 PM   #75
tw
Read? I only know how to write.
 
Join Date: Jan 2001
Posts: 11,933
Quote:
Originally Posted by mbpark View Post
Port 445 has been scanned for since 2000, since Windows 2000 and up use it for file sharing, instead of ports 137-139.
Still see, every so often, attempts to access ports 139 and 135. Never saw so many post 445 requests previously and wonder if this has something to do with Cornficker.

Still don't know how that web site permits c5.zedo.com to open a popup. But the popup enters on a new window using port 80.

Meanwhile, you have roused my curiousity. I must try that Rootkit Revealer.
tw is offline   Reply With Quote