Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations gkittelson on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

White hat virus???

Status
Not open for further replies.

wbg34

IS-IT--Management
Nov 2, 2000
550
US
A new virus is making the rounds using the RPC Dcom Vuln. Except this one infects the PC terminates Lovesan if it is present, then it attempts to patch the system against the RPC Dcom Vuln. If it is sucessful, then it reboots the PC to enable the patch. It deletes itself in January.
 
Aside from the excess traffic, this is very cool.
 
"If it is sucessful, then it reboots the PC to enable the patch"

hmm, not too sure about the reboot (especially if it reboots without warning), however, the cure is definately better than the disease!

<marc> i wonder what will happen if i press this...[pc][ul][li]please give feedback on what works / what doesn't[/li][li]need some help? how to get a better answer: faq581-3339[/li][/ul]
 
There was an interesting thread on Security Focus about this. One of the arguments is that &quot;black-hat&quot; worms are usually released first (thus causing damage) before the &quot;white-hat&quot; worm. Why not use auto-update instead of waiting for worms in the first place? If anyone is interested, I can post the entry here.

Personally, I don't like any worm taking over my computer, I look carefully at what auto-update is doing for the same reason.



James P. Cottingham

When a man sits with a pretty girl for an hour, it seems like a minute. But let him sit on a hot stove for a minute and it's longer than any hour. That's relativity.
[tab][tab]Albert Einstein explaining his Theory of Relativity to a group of journalists.
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top