RE: Purging Blaster.worm

From: Andrew Hecox (ahecox_at_uchicago.edu)
Date: 08/14/03

  • Next message: K sPecial: "RE: wifi security" 
    Date: Wed, 13 Aug 2003 19:40:29 -0500 (CDT)
To: Stuart <secmail@patchsupplier.dyndns.org>

    On Wed, 13 Aug 2003, Stuart wrote:

    > -----BEGIN PGP SIGNED MESSAGE-----
    > Hash: SHA1
    >
    > Hi,
    >
    > Is it not possible to create another worm or modify this worm to
    > actually patch the machines? :)
    > Looking at the Symantec removal tool there is a silent mode.. A few
    > days back I was on the Microsoft site and I also saw an option for a
    > non interaction install for the RPC patch but looking through the
    > site now I cannot find it :(
    > The "fixing worm" could scan for 2 hours then purge itself?
    >
    > Just a thought
    >
    > Stu

    Strictly speaking, you wouldn't have to modify the worm- you can just
    change the name of the sarc tool to msblast.exe and position it
    properly. Symantec's tool runs fine under an alternate file name.

    That said, I wouldn't want to be the one with my head on the chopping
    block when a bug in the worm crashes Windows and corrupts the file system
    of an Important Person (TM). (or does any other amount on nonsense)

    ... but it's an amusing throught none the less!

    -Andrew

    ---------------------------------------------------------------------------
    ----------------------------------------------------------------------------

  • Next message: K sPecial: "RE: wifi security"

    Relevant Pages

    • Re: Purging Blaster.worm
      ... > Is it not possible to create another worm or modify this worm to ... > Looking at the Symantec removal tool there is a silent mode.. ... > days back I was on the Microsoft site and I also saw an option for a ... > non interaction install for the RPC patch but looking through the ...
      (Security-Basics)
    • Blaster Worm
      ... I was informed by a frient to log on to microsoft site and ... worm, but decided to gard against future problems. ... enough to ask microsoft what I can do to get rid ot worm. ...
      (microsoft.public.security)
    • Re: Purging Blaster.worm
      ... Anyone who saw your worm on their machine and could identify where it ... TheFueley wrote: ... > This hack patch discussion has been had before. ... >> days back I was on the Microsoft site and I also saw an option for a ...
      (Security-Basics)
    • RE: Purging Blaster.worm
      ... Is it not possible to create another worm or modify this worm to ... Looking at the Symantec removal tool there is a silent mode.. ... days back I was on the Microsoft site and I also saw an option for a ... non interaction install for the RPC patch but looking through the ...
      (Security-Basics)
    Loading