Next time you can use
VirusTotal online scanning service... if you don't know about it go check it out, it's worth it!
2007/5/4, Andrew Hood <ajhood@xxxxxxxxx>:
DENNIS CRAWLEY wrote:
> Hi,
>
> This machine reaches the TCPIP XP limit of connections. I've made a wcap
> capture and it seems a worm is using the smtp.
>
> Does anybody knows what worm is?. It's refused to be detected by most common
> antivirus.
ClamAv says:
worm.pcap: Email.Phishing.RB-732 FOUND
Took a fair bit of cpu and memory to scan it too.
--
There's no point in being grown up if you can't be childish sometimes.
-- Dr. Who
_______________________________________________
Wireshark-users mailing list
Wireshark-users@xxxxxxxxxxxxx
http://www.wireshark.org/mailman/listinfo/wireshark-users
