CadLock protocol?

From: Seonghui (Seonghui@vads.com)
Date: Thu Dec 02 2004 - 04:20:21 GMT-3


Hi,

Has any one heard of the above protocol? My protocol analyser connected to my customer's LAN is showing that Cadlock as the top protocol running. I tried searching the web, the answers that I've got varies, some said it's encrypted AutoCad files and some said it's a worm/trojan horse.

fyi, Cadlock is using TCP & UDP 770.

Hope you guys can shed me some lights on this.

Thanks and regards,
Mark Lim



This archive was generated by hypermail 2.1.4 : Mon Jan 03 2005 - 10:31:23 GMT-3