Page is a not externally linkable
MonkeeSage - 9:24 pm on Aug 11, 2003 (gmt 0)
Post #2 has a link with all the specs on the worm. Basics are that it downloads the worm through tftp, it initially uses an RPC exploit on port 4444 to install itself, counter-measures are to turn off File & Print Sharing and Netbios / Remote Procedure Call services (or block their ports in a firewall). Jordan
moltar: