Slashdot Mirror
LovSan Clone Let Loose
JMullins writes "According to Kaspersky Labs the LovSan virus has been re-released in a new form that has changed the appearance of the worm. It looks like the outbreak continues to get worse and worse, with no real end in sight until people can patch their systems. Net slowdowns are expected over the weekend when both versions of the virus start their attack."
Don't let the legislature get wind of this story.. They'll try to use it as justification to ban cloning.
I'm starting to feel left out.. Maybe I'll install Windows on a box and join the fun.
When the source is open, the possibilities are endless.
"All Kaspersky Labs products effectively detect both modifications of "Lovesan", without requiring an update."
Guess they were just damned lucky there.
Woot, new way to make money:
1. Capture virus
2. Rerelease it so it's harder to stop, harder to detect and more harmful
3. PROFIT!!!
If we're lucky the power will be out and the worms won't be able to carry out their attack.
Sheesh, evil *and* a jerk. -- Jade
Those in the US north east and south east Canada.....
SCO declares that it holds the copyrights to LoveSan and demands that all clones pay a $1500 licensing fee.
I am feeling left out. That worm is striking everything. Please, worm writers, try it out under WINE (http://www.winehq.org) before you release that worm. Better yet, write your worms in something cross-platform like Java. Oh wait, java doesn't have buffer so you can't do buffer overflows so most worms won't work. Never mind.
Lovsan is a proprietry product of SCO. All users who are running Lovsan on their computers without a lisense will face charges of $5,000.
Lisensing fees start at $699 for home users.
Saying your OS is the best because more people use it is like saying MacDonalds make the best food
Most common "problem" I have seen is that people do the following:
1)Get a computer, with OS and some software installed
2)Use the computer
3)If buy commercial software, install it, hitting OK every time it appears
4)If download arbitrary software from the net, install it, hitting OK every time it appears
5) If computer seems sluggish or something seems wrong, do one or more of the following:
- Go to the Program Files directory (of course it's Windows) and delete one or more directories containing programs you recall having installed recently
- Hunt around the hard disk and delete things that don't look right
- Buy software that supposedly fixes your system, and run it several times consecutively, choosing different options each time
- Reboot
- Re-install the operating system
6) Go to 2)This algorithm is run continuously for several years.
Hey AV experts, just wait till the 17th to post a fix, please?, in the meantime, have fun, enjoy the beach, watch windowsupdate.com as it goes DoSed, what a wonderful life!. At last a virus that goes to the source of the problem. hehehe I think I'll get some Karma for saying this, well, some Karma is not too bad!.
Agreed, my moose couldn't read it either.
Damn if you are going to write a worm make it do some damage. You back hats are really starting to bore the shit out of me.
For instance take this worm and add the ability for it to seek the network for every single excel spread sheet it can find and randomly mix up a couple of cell values. Then have it set the access time back to the original.
Hell just write a few bytes to a random location in any file you can access.
Come on black hats, quit boring me!
Got Code?
My parents windows 2k and windows xp boxes are safe from this bug, thanks to a single, very basic security fix: rename the Administrator account, make sure it has a password, and then make sure no other user has Administrator rights on the computer.
To make this smile even bigger: Compile this and execute it as root (all ports below 1024 are restricted and needs root permission to be listened to)
Now you can actually *see* when the worm tries it's futile attack on your superior OS.
There are massive legal rammifications to this.
:
Firstly, the second strain of the virus is clearly derived from
the first strain. This is blatant piracy, and a violation of the
cherished IP of the original authors.
The original author of the virus is now in a position to reap a windfall, by
- Suing the second author to the tune of $3Bn for having blatantly stolen their code.
- Suing the thousands of owners of infected machines because they may be running pirated code in violation of the DMCA.
- Offering infected users a $699 licence fee for running the derived virus, which will protect them from any further legal action.
What the authors of the second, derived virus have done is abominable, and shows a callous disregard for the IP rights of the original authors. They are nothing but pirates, and a threat to the wholesome values of benign free-trade capitalism.
-----------------------
Perhaps to not be redundant, most appear to view this as a comedy issue. Maybe all future Microsoft security issues, worms and trojans should be filed under the comic section?
It is certainly redundant to state the simple solution is to abandon all Microsoft products. There must be hundreds of exploits 'widely known among hackers' but not known to Microsoft and/or published. Any 'hacker' worth his salt can get into any NT type server with a minimal effort and can certainly get to clients and install servers. The truth of he matter is us old hacks are really bored with Microsoft.