Re. Port 445 issues (was: Port 80 Issues)

A fine gentleman in New Zealand passed this information along. A nice
in-depth analysis.
A sign of infection seems to be heavy outbound traffic on 5800 and 5900, which
could be useful if you want to stop an outbound flood without null routing
the destination network.