full-disclosure - Tracking a virus by logging infected machines

lists.openwall.net		lists / announce john-users owl-users popa3d-users / xvendor oss-security / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4
Open Source and information security mailing list archives

Order Openwall GNU/*/Linux 2.0 on a CD with delivery worldwide

[<prev] [next>] [<thread-prev] [thread-next>] [month] [year] [list]

From: m.graf at firmenwelt.de (Marcus Graf)
Subject: Tracking a virus by logging infected machines

Richard M. Smith wrote:

> Not that I want to encourage virus writing, but I think it would be very
> helpful to gather infection statistics if a  virus were to keep a log of
> the IP addresses of all the machines it infected.  The log could be

I don't think that it would be very helpful. Many of the unsecured 
machines where the virus will be successful are private PCs with a 
dialup internet access and are changing their IPs in short intervals. 
IMHO your IP list would be worthless within some hours or even some 
minutes.

Ciao
  Marcus

-- 
Windows is not the answer.
Windows is the question and the answer is no.