[Full-Disclosure] Tracking a virus by logging infected machines

Marcus Graf m.graf at firmenwelt.de
Tue Sep 2 07:31:25 BST 2003


Richard M. Smith wrote:

> Not that I want to encourage virus writing, but I think it would be very
> helpful to gather infection statistics if a  virus were to keep a log of
> the IP addresses of all the machines it infected.  The log could be

I don't think that it would be very helpful. Many of the unsecured 
machines where the virus will be successful are private PCs with a 
dialup internet access and are changing their IPs in short intervals. 
IMHO your IP list would be worthless within some hours or even some 
minutes.

Ciao
  Marcus

-- 
Windows is not the answer.
Windows is the question and the answer is no.





Full-Disclosure is hosted and sponsored by Secunia.