[Full-Disclosure] Tracking a virus by logging infected machines
morning_wood
se_cur_ity at hotmail.com
Tue Sep 2 08:04:04 BST 2003
> I don't think that it would be very helpful. Many of the unsecured
> machines where the virus will be successful are private PCs with a
> dialup internet access and are changing their IPs in short intervals.
> IMHO your IP list would be worthless within some hours or even some
> minutes.
>
try a non trojan ( no backdoor ) cgi notifer available at
http://illmob.org/files/cginotify3.zip
this reports both wan / lan at startup posting to an online notification
via a cgi ( perl ) script. includes password protection for the list.
morning_wood
Full-Disclosure is hosted and sponsored by Secunia.