[Dshield] New Worm
shiva at sewingwitch.com
Mon Aug 18 22:05:53 GMT 2003
--On Monday, August 18, 2003 2:51 PM -0500 Brad Wyman <tildar at sta-care.com>
> I wish someone WOULD do this for code red. and all the other worms that
> are still out there still propagating. forget the "legal issues", just fix
> the holes.
A couple already exist. One, Code Green, works exactly like this, spreading
to vulnerable machines.
I don't recall the name of the other, but it was more benign, lying in wait
for an infected system to contact it, then injecting the patch and a copy
of itself. Too bad the DCOM counter-virus doesn't work like that.
More information about the list