nanog mailing list archives
Re: Worms versus Bots
From: Rob Nelson <ronelson () vt edu>
Date: Mon, 03 May 2004 07:41:52 -0400
At 11:04 PM 5/2/2004, Sean Donelan wrote:
The antivirus vendors are bemoaning the fact the Sasser worm has been slow to spread. On the other hand, most of the vulnerable computers seem to have already been taken over by one or more Bots days or weeks before the worms arrived. Other than the obvious, don't let a bot on get on your computer in the first place, are there any opinions about the best anti-bot tools for naive computer users? The major virus vendors seem to be having a bit of trouble dealing with bots, frequently recommending manual editing of files and use of regedit. There is also a much longer delay between the apperance of a new bot and updates to antivirus packages.
One of my concerns is that it's easy to download an anti-virus package which will most likely delete (it seems that unless it's a VBA macro virus the files can never be cleaned!) some of the 100% worm or virus files. The trojan programs, bots, and spyware stick around. It would be a wonderful program that scanned for and cleaned up BOTH virus and bot files...
Rob Nelson ronelson () vt edu
Current thread:
- Worms versus Bots Sean Donelan (May 02)
- Re: Worms versus Bots Rob Nelson (May 03)
- Re: Worms versus Bots Mike Lewinski (May 03)
- Re: Worms versus Bots Rob Thomas (May 03)
- Re: Worms versus Bots Sean Donelan (May 03)
- Re: Worms versus Bots william(at)elan.net (May 03)
- How long before infected - Internet addresses are not uniform Sean Donelan (May 03)
- Re: How long before infected - Internet addresses are not uniform Marshall Eubanks (May 04)
- Re: Worms versus Bots Stephen J. Wilcox (May 04)
- Re: Worms versus Bots Rob Thomas (May 03)
- <Possible follow-ups>
- FW: Worms versus Bots Eric Krichbaum (May 03)
- Re: FW: Worms versus Bots Henry Linneweh (May 04)