full-disclosure - msblast.exe

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <3F382DB1.9050103@raguenaud.org>
From: security at raguenaud.org (Cedric Raguenaud)
Subject: msblast.exe

Has it peaked already? It could be only just me because I only have data 
from one of my firewalls at hand, therefore generalisation might be 
misguided, but it shows a peak at about 1900 GMT, then a sharp decrease:
http://www.raguenaud-online.org/cedric/dcom/dcom.jpg

It seems consistent with the Symantec preliminary document if I interpret 
then correctly, though:
https://tms.symantec.com/members/AnalystReports/030811-Alert-DCOMworm.pdf

It might not live long enough to start DoSing windowsupdate.com at this rate.

Robert Ersoni wrote:
> Here is the latest on this from McAfee and Trend.
> 
> http://us.mcafee.com/virusInfo/default.asp?id=description&virus_k=100547
> 
> 
> http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_MSB
> LAST.A 
> 
> 
> Rob.