[Dshield] Swen Virus

Paul Marsh pmarsh at nmefdn.org
Fri Sep 19 16:32:45 GMT 2003


It is said that once the virus has executed it does the following.

Sends an HTTP Get request to a predefined HTTP server to retrieve counter information when the worm runs for the first time. Then, the worm may display the counter information.

Does anyone know the address of the web site in question, it might be a good tool to see how many infections there are.


Thanx, Paul




More information about the list mailing list