[Dshield] Pings to die

Paul Marsh pmarsh at nmefdn.org
Tue Dec 30 16:11:34 GMT 2003


Bob:

	It's just left overs from the Welchia worm supposedly it has a
self life until 23:59:59 2003, I'm just really tired of seeing pings in
logs that's all. </vent>

Quote from Symantec:

W32.Welchia.Worm does the following:

Attempts to download the DCOM RPC patch from Microsoft's Windows Update
Web site, install it, and then restart the computer 
Checks for active machines to infect by sending an ICMP echo request, or
PING, which will result in increased ICMP traffic 
Attempts to remove W32.Blaster.Worm


Thanx, Paul

-----Original Message-----
From: Bob Savage [mailto:bsavage at rnr-inc.com] 
Sent: Tuesday, December 30, 2003 10:50 AM
To: General DShield Discussion List
Subject: RE: [Dshield] Pings to die


Paul, could you elaborate please?

Thanks,

Bob Savage

-----Original Message-----
From: Paul Marsh [mailto:pmarsh at nmefdn.org]
Sent: Tuesday, December 30, 2003 8:56 AM
To: list at dshield.org
Subject: [Dshield] Pings to die


Something like 33 hours or so GMT the pings should slowly but surely
start to dwindle.  A new years present for everyone no more freaking
pings.........

_______________________________________________
list mailing list
list at dshield.org
To change your subscription options (or unsubscribe), see:
http://www.dshield.org/mailman/listinfo/list

_______________________________________________
list mailing list
list at dshield.org
To change your subscription options (or unsubscribe), see:
http://www.dshield.org/mailman/listinfo/list




More information about the list mailing list