RPC DCOM Cleanup Worm Appears "This morning, the SANS Internet Storm Center posted a note about an increase in ICMP traffic, including a quick initial analysis. As it turns out, yet another worm, this time the W32/Nachi.worm, is going around taking advantage of the RPC DCOM vulnerability. The twist this time: the worm will actually clean up machines. It tries to download the correct patches from Windows Update and remove the Blaster worm."
http://slashdot.org/articles/03/08/18/1722203.shtml?tid=126&tid=172&tid=185& tid=190&tid=201 Remember what they taught you in Boy Scouts: "Leave it cleaner than when you arrived." John Hebert
