On Sun, 2003-10-12 at 06:31, ed tharp wrote: > I am considering sending every win box that is requesting > winnt/system32/cmd.exe with an 300 meg avi, renamed cmd.exe, and stored > in a folder off my Apache Document root named winnt/system32. > > I am wondering about the drawbacks, other than the bandwidth waste and > tying up my pipe.
bandwidth waste, and the risk that at some point the worm will be smart enough to be doing redirection. The bandwidth usage will likely be extreme. Have a look at my loopback solution: http://www.monkeynoodle.org/lrp/deworming.html -- Jack Coates Monkeynoodle: A Scientific Venture...
Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
