How do advanced Win32 worms really work? presented at Virus Bulletin 2003

by Kurt Natvig (Norman asa),

URL : (2) of knatvig03.xml

Summary : "How do advanced Win32 worms really work?I will walk through the big viruses spreading towards the conference, and explain, in detail,
how they work and show the implications on an infected computer/network etc. I will also present
problems and analysis issues with these viruses - e.g. some viruses communicate with hard-coded
DNS serves to retrieve information which, in many cases, present problems for closed 'virus labs'
which aren't connected to the real Internet. "