[Dshield] New Worm

Niklas Schiffler nick at nightlabs.de
Mon Aug 18 18:29:02 GMT 2003


Paul Marsh wrote:
...
> It will be interesting to see if the 135 numbers start to drop.
...

Hi,

as the new worm is scanning for the same vulnerability as blaster
we won't see any drop in the numbers of connects to 135 until 2004
when 'melchia' removes itself from infected computers and may have
patched all systems infected by blaster. Or the users get their
systems patched without 'help' by the worm before next year.
(I think the first one will happen, i still get CodeRed connections
every day.)

Regards,

Niklas Schiffler





More information about the list mailing list