Well I heard from two customers today that are currently experiencing the effects of the MS06-040 worm. They’ve noticed quite a lot of traffic on port 445 and external connection attempt using IRC. For a full writeup please see the following link: MS06-040: BOLO — Be On the LookOut (NEW)
Andrew Hay is a Canadian security professional, author, and speaker living in Lethbridge, Alberta, Canada.
For more information please see the 
