[Gllug] The Code Red worm turns?

[Gordon Joly]

At 8:25 +0100 2001-08-01, French, Alastair wrote:
>You would have thought the BBC would read there own information wouldn't
>you. They state in the article below
>
>"The worm reportedly spends two-thirds of every month looking for new
>machines to infect and the rest of the time using these machines to bombard
>the site of the White House, with bogus data packets. For the last few days
>of every month, it lies dormant. "
>Does this not imply that the virus would be dormant up until last night and
>then spread from today, with the "bombardment" starting later in the month.
>I believe that the start date for this is around the 19th of the month as
>discussed a couple of weeks ago on this very list.
>
>Alastair


Yes, on the 19th to the IP address of www.whitehouse.gov...

The virus also dies when machine are switched off.

How abou "World Switch Off Day", on say 15th of every month. Windows 
2000 and NT only need to switch off of course.

And the CISCO switches?

Gordo

P.S. Does the worm use GMT or localtime? My "tidal wave" analogy only 
works if the worm uses local time of course!
-- 
Gordon Joly//////////
gordon.joly at pobox.com
http://pobox.com/~or/

-- 
Gllug mailing list  -  Gllug at linux.co.uk
http://list.ftech.net/mailman/listinfo/gllug