Mydoom Worm!

n00bee_cracker

DAMN THE PERSON WHO WROTE THAT WORM!!!!!!!!!!!!!!
okay question time: is downloading the source code for a virus or worm illegal???

zAbbo

I R L33T HAX0R, I SND j00 SOURCE CODE NOW K THKS

PS. I R L33T, I GOT r00t on ALL j00r BoX0rz

:rolleyes:

mneylon

http://securityresponse.symantec.com/avcenter/venc/data/w32.novarg.a@mm.removal.tool.html - tool for removing it

muffen

okay question time: is downloading the source code for a virus or worm illegal???

No, but why would you want to do it?

Don't tell me it's to protect yourself better, because it won't help (the time it takes for you to get the source of a new worm is probably way longer than the time it takes for updates for AV apps to be out, unless you write the worm, which IS illegal).

If you want to understand how they work, read the infopages on the AV companies sites.

I cannot see any legitimate good reason for wanting to DL virus source.

n00bee_cracker

Originally posted by muffen

I cannot see any legitimate good reason for wanting to DL virus source.

I need to use it as an example in a project I'm doing for college!
thats a pretty legitimate reason for doing it!

Cake Fiend

What project would ever require you to download a virus' source code?
Write your own.

Unless, of course, you are 13 years old as your nick and overuse of exclaimation marks would imply.

Capt'n Midnight

Dear Friend,
my computer was infected by a virus and I may have sent it on to you. Please check for a file called wscript.exe or cscript.exe, if you find them delete immediatley and send a copy of this email to everyone on your mailing list immediatley to warn them to.
Your Friend.

seamus

Ummm.......people seem to be going crazy about this thing.

I haven't received a single suspicious email since it started. I feel all warm and cosy....like being wrapped in sunshine....

mneylon

Seamus - you are one of a quickly diminishing group :P

We've blocked several hundred so far today... and the number is not dropping

seamus

Originally posted by Capt'n Midnight
Dear Friend,
my computer was infected by a virus and I may have sent it on to you. Please check for a file called wscript.exe or cscript.exe, if you find them delete immediatley and send a copy of this email to everyone on your mailing list immediatley to warn them to.
Your Friend.

Uh....don't.

They're windows system files, and are found on Windows XP (at least).

Capt'n Midnight, tis probably best to double-check all warnings to delete stuff you receive by email. If you have virus software installed, you'll be safer to ignore all warnings to delete stuff via email and just keep your virus db up-to-date.

Cake Fiend

I'd imagine our dear Captain was merely expressing his taste for irony.

And for the original poster, the source code for this particular worm hasn't appeared in the usual places yet so I wouldn't bother asking here.

seamus

Originally posted by Sico
I'd imagine our dear Captain was merely expressing his taste for irony.

A reread of teh post indicates you may be right. I have to get used to the subtle humour of these security types.

All mailboxes still clean this morning

Capt'n Midnight

Well someone did request SOURCE CODE for a virus

(ok it was a virtual virus)

BTW: the files are used for VB scripting so it might stop some .VBS viruses

Typedef

ndisasm worm.exe


What's to know about s0urce code?

muffen

BTW: the files are used for VB scripting so it might stop some .VBS viruses

You can disable the Windows Scripting Host by changing one regkey, which is much better than deleting files. There's a tool on the Symantec site that does it, or you can find the regkey you need to change by using google.