Full Disclosure mailing list archives

Re: Tracking a virus by logging infected machines


From: "morning_wood" <se_cur_ity () hotmail com>
Date: Tue, 2 Sep 2003 00:04:04 -0700

I don't think that it would be very helpful. Many of the unsecured
machines where the virus will be successful are private PCs with a
dialup internet access and are changing their IPs in short intervals.
IMHO your IP list would be worthless within some hours or even some
minutes.

try a non trojan ( no backdoor ) cgi notifer available at
http://illmob.org/files/cginotify3.zip
this reports both wan / lan at startup posting to an online notification
via a cgi ( perl ) script.  includes password protection for the list.

morning_wood

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html


Current thread: