[70138] in North American Network Operators' Group
Worms versus Bots
daemon@ATHENA.MIT.EDU (Sean Donelan)
Sun May 2 23:04:41 2004
Date: Sun, 2 May 2004 23:04:05 -0400 (EDT)
From: Sean Donelan <sean@donelan.com>
To: nanog@merit.edu
Errors-To: owner-nanog-outgoing@merit.edu
The antivirus vendors are bemoaning the fact the Sasser worm has been
slow to spread. On the other hand, most of the vulnerable computers
seem to have already been taken over by one or more Bots days or weeks
before the worms arrived.
Other than the obvious, don't let a bot on get on your computer in
the first place, are there any opinions about the best anti-bot tools
for naive computer users? The major virus vendors seem to be having
a bit of trouble dealing with bots, frequently recommending manual
editing of files and use of regedit. There is also a much longer
delay between the apperance of a new bot and updates to antivirus
packages.
