Re: [Full-Disclosure] Tracking a virus by logging infected machines

["morning_wood" <se_cur_ity@xxxxxxxxxxx>]

> I don't think that it would be very helpful. Many of the unsecured
> machines where the virus will be successful are private PCs with a
> dialup internet access and are changing their IPs in short intervals.
> IMHO your IP list would be worthless within some hours or even some
> minutes.
>
try a non trojan ( no backdoor ) cgi notifer available at
http://illmob.org/files/cginotify3.zip
this reports both wan / lan at startup posting to an online notification
via a cgi ( perl ) script.  includes password protection for the list.

morning_wood

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html