> > I have done some searching on the nessus list and have not seen anybody > > talking about this yet. The new billy worm opens up a hidden cmd.exe on port > > 4444.
port 4444 only stays open long enough to upload one .exe. Then the port is closed. John W. Lampe https://f00dikator.aceryder.com/ --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.507 / Virus Database: 304 - Release Date: 8/4/2003
