very simply, if MS releases a patch then the hackers and script kiddies decompile and reverse engineer it to see what the patch is patching then they go from there.
But then again this is only one way that these unscrupulous people attack another's computers. Plus they monitor dns traffic on the web then again this is off topic ;) bob ----- Original Message ----- From: "Steven Olson" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Friday, October 03, 2003 8:34 AM Subject: [wdvltalk] RE: Viruses > Peter MacGregorwrote: > > >How does a virus identifier such as Sophos or Norton or whoever, know the > >worm, virus, trojan or whatever is out there if no-one reports it? > > Honeypots, I've read: attractively named and configured (i.e., unpatched, > etc) computers used to atttract virii and worms. > > /steven > > > ____ . The WDVL Discussion List from WDVL.COM . ____ > To Join wdvltalk, Send An Email To: mailto:[EMAIL PROTECTED] > Send Your Posts To: [EMAIL PROTECTED] > To set a personal password send an email to [EMAIL PROTECTED] with the words: "set WDVLTALK pw=yourpassword" in the body of the email. > To change subscription settings to the wdvltalk digest version: > http://wdvl.internet.com/WDVL/Forum/#sub > > ________________ http://www.wdvl.com _______________________ > > You are currently subscribed to wdvltalk as: [EMAIL PROTECTED] > To unsubscribe send a blank email to %%email.unsub%% > > ____ • The WDVL Discussion List from WDVL.COM • ____ To Join wdvltalk, Send An Email To: mailto:[EMAIL PROTECTED] Send Your Posts To: [EMAIL PROTECTED] To set a personal password send an email to [EMAIL PROTECTED] with the words: "set WDVLTALK pw=yourpassword" in the body of the email. To change subscription settings to the wdvltalk digest version: http://wdvl.internet.com/WDVL/Forum/#sub ________________ http://www.wdvl.com _______________________ You are currently subscribed to wdvltalk as: [EMAIL PROTECTED] To unsubscribe send a blank email to [EMAIL PROTECTED]