|
Wednesday, 25 February 2004 |
The Netsky.C worm started showing up in my inbox and on the systems I administer a few minutes ago. NAI has their description and so does TrendMicro. That's very nice of them to describe the worms but in both cases the virus definitions you can download do not yet contain patterns to detect the virus. Trend requires pattern 779, but 777 is the stable download and 778 is listed as the beta download. NAI requires 4328 but only offers 4327. In fairness, NAI offers daily dats that are updated more often, but it's not made clear if the current daily dat contains the pattern for this particular virus. In addition, like the beta pattern from TrendMicro, you run the risk of untested pattern files causing other problems.
There has been a lot of talk recently about the shrinking window of opportunity to get your defenses up. I think this is an excellent case in point.
Powered by AkoComment 2.0! and SecurityImage 3.0.4 |