January 3, 2005

Anti-Santy-Worm V4


by brian_turner

If you're new here, you may want to subscribe to my RSS feed. Thank you for visiting!

A new worm has been reported by F-secure, which tries to correct damage caused by the Santy worm.

Automatically searching Google for affected sites, Anti-Santy-Worm V4 will then try and infect the website to install a patch against further attacks.

Apparently released from Argentina, the anti-Santy worm has been spotted on a handful of sites, and may have tried to fix many more.

However, as reported by CNet’s Ingrid Marson in Anti-Santy worm on the prow, Mikko Hyppönen, director of antivirus research at F-Secure, said:

“I can’t comment how effective it is in fixing the sites. If a site is infected, the worm causes a huge amount of traffic and slows down the site. I don’t think it’s possible to write a beneficial worm.”

Sites that have been attacked by the anti-Santy worm are defaced with the words: “viewtopic.php secured by Anti-Santy-Worm V4. Your site is a bit safer, but upgrade to >= 2.0.11.”

Discuss this in the Internet Business forums

Story link: Anti-Santy-Worm V4

Add to Bookmarks:

ADD TO DEL.ICIO.US     ADD TO DIGG     ADD TO FURL
ADD TO STUMBLEUPON     ADD TO YAHOO MYWEB     ADD TO GOOGLE     ADD TO SPURL

 

Leave a Reply




 

Previous: « New Google filter flaws search results
Next: SMF 1.0 released »

Visited 478 times, 3 so far today