[Dshield] MSBlast.D a good worm?

Johannes B. Ullrich jullrich at sans.org
Tue Aug 19 11:08:34 GMT 2003

> But is there any such thing as a "good" worm?
> -----------

For starters: the 'Nachi' worm does setup some kind of backdoor. Haven't
quite figured out what it does. But there is something listening on a
port < 1000.

SANS - Internet Storm Center
PGP Key: http://isc.sans.org/jullrich.txt
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://www.dshield.org/pipermail/list/attachments/20030819/fc243ab1/attachment.bin

More information about the list mailing list