If you're using DFM 1.1 or 1.2, then you might be experiencing a bug (CSCdx55823) that makes the domain disappear when restarted after January 2004. The problem was resolved in DFM 1.2.3. The latest one now is DFM 1.2.8.The patch can be downloaded fr...

W32.Sasser.E.Worm is a minor variant of W32.Sasser.Worm, as per Symantec. It uses TCP ports 1022 and 1023.http://securityresponse.symantec.com/avcenter/venc/data/w32.sasser.e.worm.html