What port Need Sdbot for Execute

What port Need Sdbot for Execute
Secure Home | Search | About
Login Password
Register Now! Lost Password?
 Microsoft Antivirus Discussions    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
What port Need Sdbot for Execute =?Utf-8?B?UmFmYWVsIE1vcmFu?= 09-19-2005
Posted by =?Utf-8?B?UmFmYWVsIE1vcmFu?= on September 19, 2005, 2:21 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
You help me
tell me what port It use for execute.. virus Sdbot and tell me one internet
page where talk for this virus

Posted by David H. Lipman on September 19, 2005, 2:49 pm
If you were  Registered and logged in, you could reply and use other advanced thread options

| You help me
| tell me what port It use for execute.. virus Sdbot and tell me one internet
| page where talk for this virus

There are many variations to the SDBot worm.
http://vil.nai.com/vil/content/v_100454.htm
http://vil.nai.com/vil/content/v_127104.htm
http://vil.nai.com/vil/content/v_135434.htm

http://vil.nai.com/vil/content/v_132158.htm
"This detection covers multiple variants of a mass-mailing worm that combines
W32/Mydoom@MM
functionality with W32/Sdbot.worm functionality"

http://vil.nai.com/vil/content/v_132119.htm


It spreads via TCP ports 135 and 445 and will exploit the buffer overflow
vulnerabilities
associated the RCP/RPCSS DCOM and LSASS modules. It also will spread via poorly
secured NT
Shares C$ and D$, etc., IPC$, ADMIN$


DCOM RPC vulnerability -
http://www.microsoft.com/technet/security/bulletin/MS03-026.mspx

























WEBDAV vulnerability -
http://www.microsoft.com/technet/security/bulletin/MS03-007.mspx

























LSASS vulnerability -
http://www.microsoft.com/technet/security/bulletin/MS04-011.mspx


--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm



Posted by =?Utf-8?B?UmFmYWVsIE1vcmFu?= on September 19, 2005, 5:09 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
you now any software for look traffic in port tcp and udp
thanks for all

"Rafael Moran" wrote:

> You help me
> tell me what port It use for execute.. virus Sdbot and tell me one internet
> page where talk for this virus

Posted by David H. Lipman on September 19, 2005, 5:17 pm
If you were  Registered and logged in, you could reply and use other advanced thread options

| you now any software for look traffic in port tcp and udp
| thanks for all
|
| "Rafael Moran" wrote:
|


Ethereal packet sniffer.
http://www.ethereal.com/

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm



Similar ThreadsPosted
When execute Malicious Software Removal Tool of Microsoft? August 13, 2008, 6:56 am
Virus Sdbot September 16, 2005, 12:41 pm
i can't remove BACKDOOR.SDBOT HELP! July 5, 2005, 9:12 am
"aolsoftware.exe" likely SDBOT.COV worm February 7, 2006, 4:51 pm
trojan horse backdoor irc/sdbot.myx December 15, 2005, 5:29 pm
trojan horse IRC/backdoor.sdbot.myx December 15, 2005, 5:35 pm
Port log April 22, 2008, 2:54 am
Scanning a port September 24, 2005, 2:27 am
Port Block Allow NetBIOS changed November 9, 2005, 8:01 pm
ixplore listening on a localhost UDP Port? November 22, 2005, 4:06 pm

The site map in XML format XML site map

Contact Us | Privacy Policy