[Gllug] The Code Red worm turns?

[French, Alastair]

Shouldn't Windows machines be reboot daily anyway (this will fix most of the
known win problems!!!)

Alastair

> -----Original Message-----
> From:	Gordon Joly [SMTP:gordon.joly at pobox.com]
> Sent:	Wednesday, August 01, 2001 9:10 AM
> To:	gllug at linux.co.uk
> Subject:	[Gllug] The Code Red worm turns?
> 
> At 8:25 +0100 2001-08-01, French, Alastair wrote:
> >You would have thought the BBC would read there own information wouldn't
> >you. They state in the article below
> >
> >"The worm reportedly spends two-thirds of every month looking for new
> >machines to infect and the rest of the time using these machines to
> bombard
> >the site of the White House, with bogus data packets. For the last few
> days
> >of every month, it lies dormant. "
> >Does this not imply that the virus would be dormant up until last night
> and
> >then spread from today, with the "bombardment" starting later in the
> month.
> >I believe that the start date for this is around the 19th of the month as
> >discussed a couple of weeks ago on this very list.
> >
> >Alastair
> 
> 
> Yes, on the 19th to the IP address of www.whitehouse.gov...
> 
> The virus also dies when machine are switched off.
> 
> How abou "World Switch Off Day", on say 15th of every month. Windows 
> 2000 and NT only need to switch off of course.
> 
> And the CISCO switches?
> 
> Gordo
> 
> P.S. Does the worm use GMT or localtime? My "tidal wave" analogy only 
> works if the worm uses local time of course!
> -- 
> Gordon Joly//////////
> gordon.joly at pobox.com
> http://pobox.com/~or/
> 
> -- 
> Gllug mailing list  -  Gllug at linux.co.uk
> http://list.ftech.net/mailman/listinfo/gllug


*******************************************************************************************************
The information contained in this e-mail is confidential. It may also be legally privileged.
It is intended only for the stated addressee(s) and access to it by any other person
is unauthorised. If you are not an addressee, you must not disclose, copy, circulate or
in any other way use or rely on the information contained in this e-mail.
Such unauthorised use may be unlawful.

If you have received this e-mail in error, please inform us immediately on
+44 (0)1628 604455 (ask for the I.T. dept) and delete it and all copies from your system.
*******************************************************************************************************

-- 
Gllug mailing list  -  Gllug at linux.co.uk
http://list.ftech.net/mailman/listinfo/gllug