this is a practice worm. this aint the real thing. act like this one is really bad and treat your network like it's the real worm that should be here in a couple of days.
i agree, random ip, tftp slow, this thing is inefficient. someone out there is working on the efficient one. use this as your dry run. > They found a worm, but since it uses tftp servers that > can be taken down and since tftp is slow, it shouldnt > have much of an effect. > > "Scans sequentially for machines with open port 135, > starting at a presumably random IP address" - very > stupid way to spread! > > http://isc.sans.org/diary.html?date=2003-08-11 > > __________________________________ > Do you Yahoo!? > Yahoo! SiteBuilder - Free, easy-to-use web site design software > http://sitebuilder.yahoo.com > _______________________________________________ > Full-Disclosure - We believe in it. > Charter: http://lists.netsys.com/full-disclosure-charter.html ----------------------------------------- This email was sent using FREE Catholic Online Webmail. http://webmail.catholic.org/ _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
