Full Disclosure mailing list archives

Re: Re: Windows Dcom Worm planned DDoS


From: Sebastian Niehaus <killedbythoughts () mindcrime net>
Date: 13 Aug 2003 08:59:48 +0200

martin f krafft <madduck () madduck net> writes:
also sprach Sebastian Niehaus <killedbythoughts () mindcrime net>:

Could be a nice feature of a worm to modify the "hosts" file and
prevent infected maschines to do DNS lookups.

Unless you use a rooted host for that, it would reveal your
identity. And if you use a rooted host, you run the risk of the worm
failing if you loose control over the host.

So we need a daemon to fetch the "hosts" file from somwhere (IRC?)<w
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html


Current thread: