Most recent Cutwail/Bulknet malware discussion

These were all smtp connections. If one is using a POP account can't you dissable that service?

Simple Mail Transport Protocol (SMTP) - Not available on Windows XP Home. Not installed by default on Windows XP Pro. Transports e-mail across the network.

If you are using the built-in mail server for receiving mail then leave on automatic. If not, as would be usual in a home environment, then disable.
Recommendation: Leave not installed or Disabled

Or does this malware create it's own server? I must have missed something again.

 

U mean GW service?

 

Sorry to bump up it again but i wonder why there is no lew level disk access alert( diresct disk access) as this activity is seen in PS and GW logs?

Thanks