Attack of the icmp pinging morons.........

[Garrett Goebel]

Gerald Combs wrote:
>
> This is apparently the Welchia worm.  It's someone's idea of a clever
> response to the Blaster worm -- it scans for vulnerable hosts
> and tries to patch and disinfect them:

It will deactivate itself in January...

http://www.hkcert.org/valert/vinfo/w32.welchia.worm.html

--
Garrett Goebel
IS Development Specialist

ScriptPro                   Direct: 913.403.5261
5828 Reeds Road               Main: 913.384.1008
Mission, KS 66202              Fax: 913.384.2180
www.scriptpro.com          garrett at scriptpro dot com