Slashdot Mirror
PhatBot Trojan Spreading Rapidly On Windows PCs
prostoalex writes "The Washington Post alerts Windows users about a new peer-to-peer backdoor client that is installed maliciously on broadband-connected computers around Asia and the United States. The client is then used for distributed DOS attacks and sending out large amounts of spam. Phatbot, according to government sources, is installed on hundreds of thousands machines already. Phatbot snoops for passwords on infected computers and tries to disable firewall and antivirus software, albeit it is detectable by antivirus packages." An anonymous reader submits a link to this description of the beast.
... or does this sound dirty to you too??
a new peer-to-peer backdoor client that is installed maliciously
Good quote, too many chars. Seriously, the slashdot 120 char limit sucks!
Since when did Snoop Dogg start writing code? Shizzle, dawg, dis virizzle be PHAT!
How long before someone bootstraps a distributed Artificial life simulator to their virus and then we all watch in amazement as the first AI evolves and owns all our computers. This could never happen though...right?
Slashrank
I can't find out how the gory details of backdooring a computer. Oh well, I guess I'll have to settle for the more traditional form of pr0n.
-- PhoneBoy
The views expressed herein are not necessarily those of anyone, including the poster.
PhatBot Trojan would be a good name for a hip-hop group?
### fictional code comment snipet ### "The PhatBot team would like to shout a big thanks to the US Department of Infrastructure for their help in beta testing PhatBot!"
I would really like to see a worm/virus/trojan that makes the user's hard drive rip itself out of the computer, beat the user with a bat and run screaming down the hall.
Can someone code that feature?
Seriously, I would love to see one of these programs that just turns the victims internet connection OFF. Granted, I don't think it would spread very well.
:::# Checks to see if it is allowed to send mail to AOL, for spamming purposes:::
Best. Feature. Ever.
---
According to the latest ruleset, this post should be modded as Vorpal Flamebait +5.
Has anyone come across a removal tool and/or removal instructions? They would be helpful for future reference.
Here is a helpful site. It provides instructions on how to get rid of windows viruses forever. Even ones not yet invented.
If only Microsoft gave us this much cool stuff with their godforsaken updates. I just KNOW Longhorn is gonna be WinXP with DRM (YAY!), just like XP was Win2000 with Prettiness Plus(TM), just like 2000 was WinNT with a blue default background, just like NT was Win98 with less games, just like 98 was Win95 with double the base install size, just like 95 was Win3.1 with less speed and stability, just like Win3.1 was DOS with a mouse.
What better resume than a good virus or trojan?
I'm not normally an irrational zealous dickhead, but I figure "When in Rome..."
1) Extract Windows product keys
2) ???^H^H^H Email software keys to software@bsa.net and tell them that you think your employer is not running legitimate software. Include a paypal link for the reward
3) Profit
This bot looks NASTY.
-B
is installed maliciously on broadband-connected computers...
who knew that dial up internet was a form of virus protection? I dont feel so bad anymore!
WoW: Scheod 70 orc warlock on Shadowmoon
Nobody cares about the baghdad blast, or the crappy election that is going nowhere
it's a slow news day, what do you expect?
Runnin' On Empty
...giving the RIAA another 1 to 2 million people to sue for--something...it is P2P after all;)
But with all those features, how big is it? if Microsoft wrote something with all those features it'd probably come on 4 CDs.....
I have heard from very reliable sources that there is absolutely no reason to panic. Microsoft are, as per usual, working on a patch for this Phatbot. Microsoft take computer security very seriously, as you all know. There are no flaws in Windows system architecture or any of the programs running under Windows - it's just the prevalence of Windows that does it. Microsoft and Windows are copyright Microsoft Corporation Redmond Washington USA.
Jesus god, Amazon needs to partner with Google. Searching for that title got me several search results, including:
* 'The Phallus Palace: Female to Male Transsexuals'
* 'Clinical Neurology: A Modern Approach (Paper)'
* 'The World Almanac and Book of Facts 2004'
* 'When Girls Feel Fat: Helping Girls Through Adolescence'
* 'Principles of Frontal Lobe Function'
Whoever coded their search engine could use some advice from that last title.
Here's the correct link.
Assuming that list is correct, with all the features, what are the chances the virus author actually coded them all? I'm guessing some extensive customization probably had to go into whatever code was used. Possibly it was created using open source libraries for certain components?
Also, this strikes me as the first truly bloatware virus... how big is this thing anyway??
www.mandrake.com
follow the links to download the ISO's and simply follow the steps after rebooting from disc 1.
you will now be 100% immune from any current and future microsoft compatable virus.
Oh good...I'm not the only one that restarts sendmail when I'm drunk...
I AGREE!
I've was recently berated by some talking head (in writing) for insulting a clients "menstrual abilities", and making "inflammible remarks".
My boss read the letter to me, and asked me what I said to piss them off. He shit himself laughing when I told him I called the girl a halfwit.
"Problem lies between Keyboard and Chair".
At work we say "It was a Layer 8 problem". You can say that in front of non-geeks without them catching on.
Trolling is a art,
nice to know something does.
They use GPL'd code from WASTE but haven't released the whole source code! They're in a world of legal hurt now.
been there done that..
I wrote a email "virus" that simply made everyone think their hard drive was being erased andthen emailed it to all my users here at work and waited for the calls.. even after the "scare" I sent a second "virus" that silently wrote the username of the person that opened it to a file on the server... guess what... the damned sheep still did everything as normal...
you cant, educate most people. once they have a "way" of doing something it's like pulling teeth to get them to change...
hell we had people bitch for 2 months about the change in the color of the office pencil supply.
Do not look at laser with remaining good eye.
No, Windows ME was just Windows '98 with a broken broom handle in one hand and a jar of Vaseline in the other.
w00t,
Its peeps like you that make spreading of these trojans possible
I'm not e real M$-soft fan, but w2k and winxp do function quiete ok and safe with the proper user permissions. Never use administrator to run daily stuf.
If can run everything i want on it just with restrictive user privileges.
So youre argument s*u*c*k*s, never had a trojan, and nver [NO CARRIER]
What happens when someone steals your source without obeying GPL or anything and turns it into a monster?
That's what Dr. Frankenstein said when he took the corpses for his creature. But he showed them, didn't he! They all thought he was crazy! Bbbut whooss teH CRzy onE now, HAH? You fooLS, YOU ALL LAUGHED, BUT IL HAV THE LAAST LAUHG!
MWAHAHAHAHAHA!
Have it grep the HD for pr0n keywords, and mail the results to Outlook's Adressbook. After that, nobody would think little of viruses ever again...
(here in double-moral country, that is)
Anybody remember the slot machine virus that
would store the disk's file allocation table in
memory, wipe it off the disk, and give you 3 tries to win it back?