Tom Brown
02-22-2007, 06:18 AM
There's an IRC worm that hit my company yesterday and it's nasty. It attacks XP through TCP port 139 (netbios-ssn).
We are finding out a couple of other local companies got it a few days ago. They use different AV suppliers than we do. Symantec told us we were the first case they had heard of and created a custom AV defs file for us.
If you run Symentec AV, refresh your client to the February 2007 version and install the February 21 (or newer) virus definitions file.
We are finding out a couple of other local companies got it a few days ago. They use different AV suppliers than we do. Symantec told us we were the first case they had heard of and created a custom AV defs file for us.
If you run Symentec AV, refresh your client to the February 2007 version and install the February 21 (or newer) virus definitions file.