New Worm

[Grok]

WORM_WUKILL.E

It hit us within 5 hours of release.  Written in VB6.  heh.

[Newby]

"RUN-TIME ERROR" :p

[Zorm]

Why are these things called worms? Whatever happened to just a plain virus?! To me a plain virus is one that is harmless until the person in the chair does something and a worm would be something like blaster/sql slammer/ect that doesn't require the user opening a file or such to cause infection.

[Adron]

Why are these things called worms? Whatever happened to just a plain virus?! To me a plain virus is one that is harmless until the person in the chair does something and a worm would be something like blaster/sql slammer/ect that doesn't require the user opening a file or such to cause infection.

I think it's because it distributes itself from one computer to the next as opposed to just infecting ("trojaning") local files and expecting the user to move an infected file to another computer.

[quasi-modo]

Its kind of amazing how trend micro can research and come up with fixes for new viruses so fast, because this virus does not look to be spreading too fast (from the link in the first post).

[iago]

Its kind of amazing how trend micro can research and come up with fixes for new viruses so fast, because this virus does not look to be spreading too fast (from the link in the first post).

I was reading somewhere about the number of "buckets" on the internet used for tracking worms, and there are _a lot_ of them.  

One thing I don't understand:

Discovered: 18 hours, 26 minutes ago
(Jul. 19, 2004 12:00:00 AM GMT -0800)   
Detection available: 18 hours, 26 minutes ago
(Jul. 19, 2004 12:00:00 AM GMT -0800)

They instantly had detection: :-/

[MyndFyre]

Its kind of amazing how trend micro can research and come up with fixes for new viruses so fast, because this virus does not look to be spreading too fast (from the link in the first post).

I was reading somewhere about the number of "buckets" on the internet used for tracking worms, and there are _a lot_ of them.  

One thing I don't understand:

Discovered: 18 hours, 26 minutes ago
(Jul. 19, 2004 12:00:00 AM GMT -0800)   
Detection available: 18 hours, 26 minutes ago
(Jul. 19, 2004 12:00:00 AM GMT -0800)

They instantly had detection: :-/

Heh.  I noticed a new worm came out because my virus scanner didn't pick up the dog.scr attachment -- of all things, Outlook 2003 did.  

[iago]

Why are these things called worms? Whatever happened to just a plain virus?! To me a plain virus is one that is harmless until the person in the chair does something and a worm would be something like blaster/sql slammer/ect that doesn't require the user opening a file or such to cause infection.

I was wondering about that myself, actually.  Generally worms are things that could happen when nobody is even touching the computer, and that spread through exploits.  But *shrug* MassMailers are normally called Worms, so who knows?

[quasi-modo]

Well netsky is a worm, it has its own built in smtp type of deal going on. Now there is something called html netsky, it is an html email but encorperates an ie exploit to run the attachments from the html, pretty slick.

[muert0]

A mass-mailer is a worm because it self replicates.
http://www.webopedia.com/TERM/w/worm.html

[iago]

Hmm, it seems that you're right

<networking, security> (From "Tapeworm" in John Brunner's
novel "The Shockwave Rider", via XEROX PARC) A program that
propagates itself over a network, reproducing itself as it
goes. Compare virus. Nowadays the term has negative
connotations, as it is assumed that only crackers write
worms.

Perhaps the best-known example was the Great Worm.

Compare Trojan horse.

From The Free Online Dictionary of Computing

[muert0]

Definitions seem about the same to me. And a mass-mailer propogates over a network through email, right? But I guess they don't move by thereselves because there's that one step that requires a retard to just open any random attachments. And they think I have a/v so I'm protected.

[quasi-modo]

Definitions seem about the same to me. And a mass-mailer propogates over a network through email, right? But I guess they don't move by thereselves because there's that one step that requires a retard to just open any random attachments. And they think I have a/v so I'm protected.

well thats the neat thing about html netsky, it realies on ie's crappyness to automatically run the attachments.

[muert0]

I block out any email with attachments.

[quasi-modo]

I should... but every so often friends send me stuff with attachments. unfortunatly they are the types of people that download coolsong.mp3               .exe on kazaa.