Security Incidents mailing list archives

New gnutella worm found in the wild.


From: grid_goolah () HOTMAIL COM (Matt Merhar)
Date: Sat, 22 Jul 2000 01:35:02 EDT


Hi,
   I recently saw this file up for grabs (July 22, 1AM) on the gnutella
filesharing network. Attached is the source of what seems to be a
non-destructive, self-replicating 'worm' which has already spread quite
rapidly around the gnutella network. It also appears to be semi-polymorphic,
as it changes it's filename to the names in an array called NewFilenames.
The contents of it are as follows:
NewFilenames    = Array(ProgramName & ".vbs", "Jenna Jameson movie
listing.vbs", "Pamela Anderson movie listing.vbs", "Asia Carerra movie
listing.vbs", "xxx FTP movie listing.vbs", "ASF Compressor (No quality
loss).vbs", "collegesex.vbs", "Gladiator.vbs", "Battlefield Earth.vbs",
"Evangelion complete episodes scripts.vbs", "Scan Master checklist.vbs",
"How to eat pussy.vbs", "Alicia Silverstone.vbs", "Pearl Jam.vbs", "Mp3
compressor (Half the size but same quality).vbs", "Napster Metallica
Crack.vbs", "Santana.vbs", "NSync.vbs", "Nirvana.mp3.vbs", "Shania
Twain.mp3.vbs", "Jesus loves you.vbs", "Gnutella upgrade.vbs", "OFFICIAL
Gnutella Option Pack.vbs")

   -Matt

________________________________________________________________________
Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com

<HR NOSHADE>
<UL>
<LI>application/x-unknown-content-type-VBSFile attachment: Santana.vbs
</UL>


Current thread: