GrimDude schrieb in Nachricht <36afe9f6.0@news.povray.org>...
>Off topic, but I thought I'd let you know of a way to prevent this from
>recurring.
>
>Go into your \Windows\system directory and mark wsock32.dll as read-only.
>You can do this from windows by right clicking the file name, clicking on
>properties, and then marking read-only.
>
>The worm can't bite what it can't write to.


What you can do by hand, any program can do by code too. It's very simple to
reset a read-only attribute. So this is an almost non-existant defense.

The Happy99 "worm" was not very sophisiticated, so it was easy to remove it
(and to find out, what it does). Most viruses are much cleverer though
(unfortunately).

--
Rudy Velthuis

Post a reply to this message