[unisog] udp port 1434 worm?

Doug Payne dwpayne at ist.uwaterloo.ca
Sat Jan 25 16:11:16 GMT 2003

Rich Graves wrote:
> anyone isolated it yet? we've yanked a half dozen machines in the last 2
> hours. all seem to be windoze, possibly related to ms-sql server.
> given the unusual lag we're seeing on internet2 i'm assuming this is a
> shared experience.

Yup, just pulled/blocked 6 systems here, all look like windows. Pretty 
well hosed the campus network until stopped. I'm still fighting the fire.

More information about the unisog mailing list