[Dshield] New Worm

Kenneth Porter shiva at sewingwitch.com
Mon Aug 18 22:05:53 GMT 2003

--On Monday, August 18, 2003 2:51 PM -0500 Brad Wyman <tildar at sta-care.com> 

> I wish someone WOULD do this for code red. and all the other worms that
> are still out there still propagating. forget the "legal issues", just fix
> the holes.

A couple already exist. One, Code Green, works exactly like this, spreading 
to vulnerable machines.

I don't recall the name of the other, but it was more benign, lying in wait 
for an infected system to contact it, then injecting the patch and a copy 
of itself. Too bad the DCOM counter-virus doesn't work like that.

More information about the list mailing list