Bugtraq mailing list archives
Re: Mitigating some of the effects of the Code Red worm
From: Vincas Ciziunas <fizban () tamos net>
Date: Fri, 20 Jul 2001 00:09:55 -0400 (EDT)
On Thu, 19 Jul 2001, LARD BENJAMIN LEE wrote:
What I'm getting at, is for someone to create another exploit that creates the C:\notworm file in infected machines and does something to notify whoever is in charge of a particular box (even something as simple as placing you_are_hacked.txt and a link to the patch on the desktop could be beneficial). Even better, an exploit to patch a machine (through removing the .ida and .idq extensions) would prevent the inevitable wave of post-attacks (both from this worm and future attacks).
The only problem I forsee with that course of action is that for a while, this worm may clog the networks up just as badly as Code Red. ------------------------------------------------------------------------------- --Vincas Ciziunas-- (College Student, Linux Geek, Music Nut, Virginian) fizban () tamos net vciziuna () gmu edu fizban () paulvi net http://www.tamos.net/~fizban "There's nothing worse in the world than an angry tree," --Bob Ross -------------------------------------------------------------------------------
Current thread:
- Full analysis of the .ida "Code Red" worm. Marc Maiffret (Jul 18)
- Re: [BUGTRAQ] Full analysis of the .ida "Code Red" worm. Joe Harris (Jul 19)
- Re: Full analysis of the .ida "Code Red" worm. Laurence Hand (Jul 19)
- Re: Full analysis of the .ida "Code Red" worm. Ryan Russell (Jul 19)
- RE: Full analysis of the .ida "Code Red" worm. Marc Maiffret (Jul 19)
- RE: Full analysis of the .ida "Code Red" worm. Eric Chien (Jul 20)
- Re: Full analysis of the .ida "Code Red" worm. Ryan Russell (Jul 19)
- Re: Full analysis of the .ida "Code Red" worm. Pierre Vandevenne (Jul 19)
- Re: Full analysis of the .ida "Code Red" worm. JNJ (Jul 20)
- Timely Patching (was: Full analysis of the .ida "Code Red" worm.) Crispin Cowan (Jul 23)
- Re: Mitigating some of the effects of the Code Red worm Vincas Ciziunas (Jul 19)
- Re: Mitigating some of the effects of the Code Red worm Johannes B. Ullrich (Jul 19)
- Re: Mitigating some of the effects of the Code Red worm Ryan Russell (Jul 20)
- RE: Mitigating some of the effects of the Code Red worm Linda Custer (Jul 20)