We've recently seen a large number of headlines on the subject of a worm having been released within Microsoft's network. The initial reports say this has been going on for three months. Later reports said just over a month and most recent reports give a number of a few weeks. The finger is clearly being pointed to an email address in Russia.

What interests me is the similarity of the PROMIS back doors. When VMS was king, PROMIS ran on VMS. VMS is another operating system, character based like UNIX. I have no doubt that these systems have already begun to be replaced by MS Windows based systems running some new type of software to replace PROMIS.

If someone or some group had access to MS's network for three months, I see two possible outcomes:

1. They had access to insert backdoors into the source for a pending "service pack". Users who install this rigged update would get a back door installed into their system along with their update.

2. They had access to download enough source code to build their own rigged library files (ie. kernel32.dll, win.com). With these files they could produce their own rigged install CD. Anyone who installs from it gets your backdoor too.

An interesting side note is that MSFT stock is rising rather then falling after the release of this news. Highly abnormal seeing as the release of MS Windows source into the wild would hinder profits for years to come.

We are also witnessing the birth of many conspiracy theories and urban legends on the subject. For many years to come we'll have to wonder if we can trust Windows.