[Gllug] Code Red worm sleeps?

[Richard Cohen]

On Wed, 1 Aug 2001, jim wrote:

> Not entirely ... got the first attempt just now. 213.68.86.210, can't
> resolve it from here. It's still out there ...

>From the current BBC story - which is largely about how the flood has failed
to appear:

"Netcraft, which carries out regular surveys of web server software,
estimates that around 3.5 million sites are using Microsoft IIS software.

Of these about 35% were initially vulnerable, a figure that has now dropped
to 15% following the publicity about the worm.

What might also hamper the ability of the virus to spread is the relative
unreliability of Microsoft web servers.

The Code Red virus lurks in the memory of a web server and is cleared when
the computer is rebooted.

As Microsoft servers crash more often than many of their counterparts, this
might limit the spread of the malicious code."

The BBC aren't all bad :-)

> jim

Cheers
Richard


-- 
Gllug mailing list  -  Gllug at linux.co.uk
http://list.ftech.net/mailman/listinfo/gllug