On Sun, 2003-10-12 at 08:08, ed tharp wrote: > On Sun, 2003-10-12 at 10:34, Jack Coates wrote: > > On Sun, 2003-10-12 at 06:31, ed tharp wrote: > > > I am considering sending every win box that is requesting > > > winnt/system32/cmd.exe with an 300 meg avi, renamed cmd.exe, and stored > > > in a folder off my Apache Document root named winnt/system32. > > > > > > I am wondering about the drawbacks, other than the bandwidth waste and > > > tying up my pipe. > > > > bandwidth waste, and the risk that at some point the worm will be smart > > enough to be doing redirection. The bandwidth usage will likely be > > extreme. Have a look at my loopback solution: > > http://www.monkeynoodle.org/lrp/deworming.html > > I like that much better thank you,
Yeah, it's pretty elegant if I do say so myself. I remember when I tested it and found that it worked I started literally chortling like a madman. My wife had probably already given up on any idea of my sanity by then, but I still got The Look :-) -- Jack Coates Monkeynoodle: A Scientific Venture...
Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
