Colin's Journal

It appears that someone has written a new worm, which removes MS Blaster (AKA Lovsan) and patches up the system, by taking advantage of the very same MS RPC vulnerability used by the original. 

Network Associates has a complete description of the worm Nachi.  I wonder if this is the first time someone has written a worm to patch up systems using the same vulnerability as the original worm?