Black Ice worm - (ISC upgrades Infocon to Yellow)
A small worm spreads via UDP packets to Black ICE software.
Seems to generate quite a bit of traffic. Details at
http://isc.sans.org/diary.html?date=2004-03-20
http://securityresponse.symantec.com/avcenter/venc/data/w32.witty.worm.html
symantec says it tries to write data to sectors on the physical drive
It is strange, because the AV vendors don't seem to have
it high up their list yet.