Re: Urgent Alert: Possible BlackWorm DDay February3rd (Snort signatures included)

[Col <colweb () gmail com>]

Is it still considered a worm if it needs admin rights to schedule the AT jobs?

This could be very harmfull in an office environment, more so if your
Dom Admins are logged in with such rights while they read their
emails.

Quickly setup a scheduled job on all machines to remove any jobs that
appear for 59mins of the hour... :)
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/