MS06-040 and the post-patch worm wave 18 August 2006 MS06-040 shipped on 8 August. Specific bot variants exploiting the Server Service vulnerability appeared within days. The patch-to-worm gap continues to shrink. microsoft mocbot ms06-040 patching worms