[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [Full-disclosure] Urgent Alert: Possible BlackWorm DDay February3rd (Snort signatures included)
- To: full-disclosure@xxxxxxxxxxxxxxxxx
- Subject: Re: [Full-disclosure] Urgent Alert: Possible BlackWorm DDay February3rd (Snort signatures included)
- From: Col <colweb@xxxxxxxxx>
- Date: Wed, 25 Jan 2006 06:56:18 +0000
Is it still considered a worm if it needs admin rights to schedule the AT jobs?
This could be very harmfull in an office environment, more so if your
Dom Admins are logged in with such rights while they read their
emails.
Quickly setup a scheduled job on all machines to remove any jobs that
appear for 59mins of the hour... :)
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/