RE: Windows Dcom Worm planned DDoS

[Szappanos Gábor (VBuster) <gszappanos () virusbuster hu>]

> > The examinations of the code so far indicate that the worm is
> > coded to DoS the windowsupdate site from the 15th of August 
> > onwards through the end of the year.
>
> I'll ignore the sloppiness in that description, as several of the 
> published descriptions have (or at least initially got) it confused 
> through slightly wrong too...

> The examinations of the code *that I have read so far* indicate 
> that...?

... the Dos takes place any month it the day is after the 15th, or any day if the month is after August. So starting 
from August 15th it wil DoS windowsupdate.com to the end of the year, but the attack is possible in earlier months as 
well. And it will not stop at the end of the year, just gets paused for 15 days.

Regards,
Gabor Szappanos
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html