Not so sure I can agree with you. It's still a worm to me. Although the author had good intentions, the concept is still the same. Anyone who touch my machine(s) w/o my knowledge and processes something should be shot. In fact, I should be shot if I allow it. Don't you think that in a corporate environment that this type of stuff should be done in a test environment PRIOR to release to real world systems? What would happen if this is run against a system that wasn't tested and in fact brought down a major corporate application? Who's then at fault? Good? I think not... Sorry.. Just my $0.02. Rick -----Original Message----- From: windows2000-bounce@xxxxxxxxxxxxx [mailto:windows2000-bounce@xxxxxxxxxxxxx] On Behalf Of Sorin Srbu Sent: Tuesday, September 09, 2003 9:08 AM To: windows2000@xxxxxxxxxxxxx Subject: [windows2000] Re: Bad worm? On Tue, 9 Sep 2003 09:04:20 -0400, Greg Reese wrote: >good concept but it creates a ton of traffic doing it. Apart from that... 8-) Well, seriously, I've never seen a "good" worm until now. >-----Original Message----- >From: Sorin Srbu [mailto:Sorin.Srbu@xxxxxxxxxxxxx] >Sent: Tuesday, September 09, 2003 9:01 AM >To: Windows2000 Mailing List >Subject: [windows2000] Bad worm? > > >Hi all, > >Can this worm really be bad?? > >>http://securityresponse.symantec.com/avcenter/venc/data/w32.welchia.wo >>rm.html > >It downloads the blasterpatch from MS, installs it, reboots the >computer and also tries to remove the blaster worm... 8-) > >Now, this is a virus I like! 8*) > > >BW, > >Sorin BW, Sorin # Sorin Srbu, Systems Engineer Web: http://www.farmfak.uu.se/organisk/ # Dept of Medicinal Chemistry, Phone: +46 (0)18-4714482 >> 5 signals >> GSM # Div of Org Pharm Chem, Mobile Phone: +46 (0)701-718023 # BMC, Box 574, Uppsala University Fax: +46 (0)18-4714474 # SE-751 23 Uppsala, Sweden Visit: BMC, Husargatan 3, D5:512b # # Public PGP key available on request. # # () ascii ribbon campaign - against html e-mail # /\ ********************************************************** To Unsubscribe, set digest or vacation mode or view archives use the below link. http://thethin.net/win2000list.cfm ********************************************************** To Unsubscribe, set digest or vacation mode or view archives use the below link. http://thethin.net/win2000list.cfm