Surely it could be easy to get majority of the ones that use irc / icq etc to contact the relavent makers. It annoys me that all these "zombie pc's" they tend to "phone home" this information seems not provided to authorities for pursue.

Surely the antivirus makers have a vested interest for all these zombie pcs to continue running is toward there own business survival.

How about getting the antivirus manufacturers to assist in the capuring of the criminals that write this kind of virus. It is not the answer but it will certainly reduce in my view the virus reports if these people are caught to a new virus not variations of the same virus by the same virus writer.

I have found irc bots on peoples computers and it really is not that heard to find out where they are accessing eg Connects to a predefined IRC channel, using its own IRC client, and listens for the commands from the attacker. I mean get real.. just get on the network.

What could be done here is havest the list of PC's dns address mail the isp accordingly with a list of pc's with the virus on it. And get the isp to contact the user, Virus companies may even make more money here!!. For a little extra work.

Plus isp's could put that user on "Walled Garden" until they upgrade there systems. It's hopefully not gonna get me flamed by people on here but solutions are a many and this is just one possible option.


jB








[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/246/26636#26636