RPC DCOM Cleanup Worm Appears

"This morning, the SANS Internet Storm Center posted a note about an
increase in ICMP traffic, including a quick initial analysis. As it turns
out, yet another worm, this time the W32/Nachi.worm, is going around taking
advantage of the RPC DCOM vulnerability. The twist this time: the worm will
actually clean up machines. It tries to download the correct patches from
Windows Update and remove the Blaster worm." 

http://slashdot.org/articles/03/08/18/1722203.shtml?tid=126&tid=172&tid=185&;
tid=190&tid=201


Remember what they taught you in Boy Scouts: "Leave it cleaner than when you
arrived."

John Hebert

Reply via email to