Slashdot Mirror


RPC DCOM Cleanup Worm Appears

UnderAttack writes "This morning, the SANS Internet Storm Center posted a note about an increase in ICMP traffic, including a quick initial analysis. As it turns out, yet another worm, this time the W32/Nachi.worm, is going around taking advantage of the RPC DCOM vulnerability. The twist this time: the worm will actually clean up machines. It tries to download the correct patches from Windows Update and remove the Blaster worm."

1 of 758 comments (clear)

  1. Re:Time till first lawsuit by ChrisDolan · · Score: 0, Troll

    The ends do not justify the means. Worms are bad, and vigilantism rarely achieves long-lasting good. (Case in point: What good did Bernhard Goetz achieve by his shootings?)

    If you support the actions by the author of this worm to rid the computers of the illegal blaster worm, then I claim you cannot deny RIAA the ability to raid the same computers to rid them of illegal music downloads. They're both examples of non-authority actions to rid computers of a perceived wrong.