Home page logo

fulldisclosure logo Full Disclosure mailing list archives

Re: Urgent Alert: Possible BlackWorm DDay February3rd (Snort signatures included)
From: Col <colweb () gmail com>
Date: Wed, 25 Jan 2006 06:56:18 +0000

Is it still considered a worm if it needs admin rights to schedule the AT jobs?

This could be very harmfull in an office environment, more so if your
Dom Admins are logged in with such rights while they read their

Quickly setup a scheduled job on all machines to remove any jobs that
appear for 59mins of the hour... :)
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]