Avoid Worms!

Printable View

09-23-2003, 09:53 PM
Rigel

For those of you that download files such as cracks, patches, or utilities, check the file size of the software before you download it. If the file size is very small for a software program (say, 48 kilobytes for Adobe Photoshop 8.0 + patch), then this is probably a worm in disguise. Allow your virus checker to have a go at it if you're not sure, but do not execute it.

Why, then, do so many people share these files if they are worms?

Take the Supernova worm. It copies itself into folder \Windows\Media\ renaming itself as things such as winrar, half life crack, etc. and opens the media in that folder to Kazaa (as well as other nasty things.) People who don't check their software folder often will unknowingly share these files with other users hoping to download what these programs seem to be. Ergo is another lesson: always keep track of what files you have.

Remember, if you accidentally trigger the file, an antivirus program will detect it (hopefully). Go to the specified site or look the virus up on the internet for information on what it does and how to disable it.

Remember, intelligent downloading is fun downloading! :D
09-24-2003, 02:30 AM
Gre1

Quote:

Originally posted by Rigel@23 September 2003 - 16:53
For those of you that download files such as cracks, patches, or utilities, check the file size of the software before you download it. If the file size is very small for a software program (say, 48 kilobytes for Adobe Photoshop 8.0 + patch), then this is probably a worm in disguise. Allow your virus checker to have a go at it if you're not sure, but do not execute it.

Why, then, do so many people share these files if they are worms?

Take the Supernova worm. It copies itself into folder \Windows\Media\ renaming itself as things such as winrar, half life crack, etc. and opens the media in that folder to Kazaa (as well as other nasty things.) People who don't check their software folder often will unknowingly share these files with other users hoping to download what these programs seem to be. Ergo is another lesson: always keep track of what files you have.

Remember, if you accidentally trigger the file, an antivirus program will detect it (hopefully). Go to the specified site or look the virus up on the internet for information on what it does and how to disable it.

Remember, intelligent downloading is fun downloading! :D

What Supernova worm? U don't mean the Bittorrent program do u.
09-24-2003, 02:32 AM
Skank

There aint no worm on bit-torrent...theres one on eMule though
09-24-2003, 03:48 AM
Rigel

The Supernova Worm is just an example of the many worms on Kazaa that propagate this way. Norton Antivirus recognizes this worm as Supernova because it creates a registry key entitled 'supernova,' which links to a program imbedded in the \Windows\System32\ folder. You can't count on all worms and viruses acting this way, however.
09-24-2003, 04:13 PM
Gre1

Quote:

Originally posted by Rigel@23 September 2003 - 22:48
The Supernova Worm is just an example of the many worms on Kazaa that propagate this way. Norton Antivirus recognizes this worm as Supernova because it creates a registry key entitled 'supernova,' which links to a program imbedded in the \Windows\System32\ folder. You can't count on all worms and viruses acting this way, however.

Ok, cause I was going to tell u there is not a worm on suprnova.org if u would have said yes.
09-28-2003, 09:02 PM
Jay

Quote:

Originally posted by Skank@24 September 2003 - 03:32
There aint no worm on bit-torrent...theres one on eMule though

what worm?? :unsure:
09-30-2003, 09:16 PM
kl365

another way to avoid worms like that is to just not run a crappy OS *cough*MS*cough*. Although, granted there has been one or two cases of *nix worms, how does it compare to the hundreds of thousands that seem to propogate themselves on windows machines,.
09-30-2003, 09:57 PM
asmithz

I hate worms, i just had to get rid of the MBlast worm. :angry:

:lol: :lol:
09-30-2003, 10:52 PM
infamousalbo101

Quote:

Originally posted by Gre1+24 September 2003 - 17:13--></div><table border='0' align='center' width='95%' cellpadding='3' cellspacing='1'><tr><td>QUOTE (Gre1 @ 24 September 2003 - 17:13)</td></tr><tr><td id='QUOTE'> <!--QuoteBegin-Rigel@23 September 2003 - 22:48
The Supernova Worm is just an example of the many worms on Kazaa that propagate this way.  Norton Antivirus recognizes this worm as Supernova because it creates a registry key entitled 'supernova,' which links to a program imbedded in the \Windows\System32\ folder.  You can't count on all worms and viruses acting this way, however.

Ok, cause I was going to tell u there is not a worm on suprnova.org if u would have said yes. [/b][/quote]
he said supernova not Suprnova :P
10-01-2003, 02:42 AM
yahoo

Worm's use to kill my computer evey 8 weeks. I use kaspersky antivirus but it did not do whole lot.

Untill I started to use Diamond WormGuard. It realy did the trick.

You can try there 30 day demo

DiamondCS WormGuard
10-01-2003, 03:15 AM
asmithz

Quote:

Originally posted by yahoo@30 September 2003 - 18:42
Worm's use to kill my computer evey 8 weeks. I use kaspersky antivirus but it did not do whole lot.

Untill I started to use Diamond WormGuard. It realy did the trick.

You can try there 30 day demo

DiamondCS WormGuard

Thanks for the link.
10-01-2003, 03:19 AM
asmithz

Do you have the crack or serial.
10-01-2003, 04:52 AM
wormless

never heard of that product has it got spywear?
10-01-2003, 05:08 AM
Rigel

Quote:

Originally posted by Gre1+24 September 2003 - 02:30--></div><table border='0' align='center' width='95%' cellpadding='3' cellspacing='1'><tr><td>QUOTE (Gre1 @ 24 September 2003 - 02:30)</td></tr><tr><td id='QUOTE'>

Quote:

Originally posted by Rigel@23 September 2003 - 22:48
The Supernova Worm is just an example of the many worms on Kazaa that propagate this way.  Norton Antivirus recognizes this worm as Supernova because it creates a registry key entitled 'supernova,' which links to a program imbedded in the \Windows\System32\ folder.  You can't count on all worms and viruses acting this way, however.

Ok, cause I was going to tell u there is not a worm on suprnova.org if u would have said yes.[/b]

When I was talking about the specified site, I meant some catalog made by an antivirus company or an information group detailing the properties and removal procedures of the virus.

<!--QuoteBegin-wormless@1 October 2003 - 04:52
never heard of that product has it got spywear?[/quote]
Usually not if it is only a 30 day trial. Spyware tactics and other intrusions are more likely to be found on “too good to be true” offers.
10-01-2003, 05:14 AM
asmithz

Ad-aware will take care of it no worries.
10-01-2003, 05:22 AM
Rigel

Quote:

Originally posted by Shad0w Hacker@1 October 2003 - 06:14
Ad-aware will take care of it no worries.

Speaking of Ad-Aware... The last time I used it my computer froze while it was deleting registry keys :( . This (with other causes) eventually led to the breakdown and subsequent servicing of my computer.

I don't blame it on Ad-Aware, though. I blame it on the little imp in my computer that flips the power switch whenever my OS is in the least bit vulnerable (BIOS, uggh.)
10-01-2003, 05:42 AM
wormless

mine works fine with it i also use spy sweeper and S&D