Re: [Full-Disclosure] Tracking a virus by logging infected machines

From: Marcus Graf (m.graf_at_firmenwelt.de)
Date: 09/02/03

  • Next message: morning_wood: "Re: [Full-Disclosure] Tracking a virus by logging infected machines" 
    To: full-disclosure@lists.netsys.com
Date: Tue, 02 Sep 2003 08:31:25 +0200

    Richard M. Smith wrote:

    > Not that I want to encourage virus writing, but I think it would be very
    > helpful to gather infection statistics if a virus were to keep a log of
    > the IP addresses of all the machines it infected. The log could be

    I don't think that it would be very helpful. Many of the unsecured
    machines where the virus will be successful are private PCs with a
    dialup internet access and are changing their IPs in short intervals.
    IMHO your IP list would be worthless within some hours or even some
    minutes.

    Ciao
      Marcus 

    -- 
Windows is not the answer.
Windows is the question and the answer is no.
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html
  • Next message: morning_wood: "Re: [Full-Disclosure] Tracking a virus by logging infected machines"

    Relevant Pages

    • New Booting Problem
      ... I have just encountered a problem that is affecting two Windows XP machines. ... I am guessing it is a new virus of some kind, ... it freezes right after ...
      (microsoft.public.windowsxp.help_and_support)
    • Re: W32.RontokBro.B@mm
      ... then i go to registery and remove some keys and values from registery. ... then i isntall norton anti virus 2005 and update it with last virus ... and make me to restart windows and wait for virus ... Do not bring the network up again until you are sure all machines are ...
      (microsoft.public.security.virus)
    • Re: Lsass.exe error no Sasser
      ... This occures in many pc's and hall have the windows ... The Lsass.exe error doesn't always come from a virus. ... On standalone machines when I've gotten ... MS MVP - Windows Shell/User ...
      (microsoft.public.windowsxp.general)
    • Startup files replaced
      ... we have had four machines on different domains come up with ... Please insert the Windows 2000 CD ... We have run virus scans on the machine and have run two different ... spyware removes, ...
      (microsoft.public.win2000.windows_update)
    • Re: Antispyware and Solaris
      ... this only works on Windows machines. ... I had a friend named Jeff who worked as a lab assistant in ... Part of Jeff's job was to ensure nobody left clutter on the hard drives ... It wasn't meant to find a virus. ...
      (comp.unix.solaris)
    • Quantcast