Bagle/Beagle Variant Includes Source Code

NASAdude writes "Sunday brought a lot of fireworks... and the release of two new Bagle/Beagle variants. One of the variants includes a copy of its source code as an attachment as it spreads via email. It is expected the inclusion of the source will result in numerous variants. It's been dubbed Beagle.Y and Beagle.Z by Symantec and Bagle.ad and Bagle.ae by McAfee. ZDNet ran a story that covers these new variants."

Comments

Pretty please

[Anonymous Coward]

Can someone please make a variant that makes users regret not patching their systems? Like, overwrite the BIOS, turn ones into twos in all spreadsheet documents, delete all JPGs, MP3s and AVIs, send a resignation to boss@yourdomain.com and a log of your online banking transactions to the FCC, donate 10 bucks each to the KKK and THEN put up a screen which lists all that.

Re:Pretty please

[ObsessiveMathsFreak]

A much better solution would be to turn the computer into a spam zombie that only spams itself. After a few thousand spam messages from themselves cloud their inbox, they might actually realise, "Oh, This IS annoying!"

Shared source

[Snaapy]

Funny.

If you try to google Bagle assembler "source code"

you'll get

Microsoft shares source code with students - ZDNet UK News

Re:Scripting exploit

[I confirm I'm not a]

VBscript or WSH which is inherently Open Source on Windows?

<nitpick>Open-source is a type of licensing; VBScript is a language, and WSH a technology, not licensing regimes. Typically the source-code for a VBScript app is distributed with the application, but not necessarily - it might be obfuscated - but might well be subject to proprietary licensing restrictions.

Just because you can see the source code doesn't make it open source. Open source implies certain freedoms that are additional to being able to see the code: the right to modify and redistribute the code, for example.

</nitpick>

That's to make prosecution more difficult

[Advocadus Diaboli]

So far you could spot a viurs author by the "evidence" that he had the source code of the virus on his PC. Now everybody has the source. I guess we need bigger jails soon.

Something I shoulda Done

[PakProtector]

This just brings to mind an idea I've had for a long time now. And it's in no way an unique idea, I know that for a fact.

So here's the idea: Write a variant of one of these viruses. And he's what it does. When it infects a machine, it sends out copies of itself to every person in the address book. After that, it forces the machine to download some sort of Anti-Virus software. PC-Cillin or NOD32 are favorites of mine. It installs them, then forces a Windows Update.

Sounds good, right? But read on. My second idea is better.

Here it is:
Viral Anti-Virus Software.
Most virus recognition is based on Pattern Recognition, from what I have garnered from my research. Create a virus that spreads like wildfire -- kind of like Melissa and Code Red spread all crazy-fast -- except this little bit of code contains Virus Recognition software in it. It invades unprotected boxen and then starts a continuous scan for Viruses.

You know how most people click 'Yes!' to anything that pops up, a la Gator?

Have this little golden nugget of Illegal Do-Gooding pop up a small dialog saying, "File.Extention is infected with a virus (XX% Probability). Do you wish to delete? Y/N?"

And just to hold with custom:
Step One: Create Virus.
Step Two: JAIL!
Step Three: PROFIT!

Re:Something I shoulda Done

[Anonymous Coward]

There have been several "anti-virus viruses" that didn't quite work, and ended up being a major pain to deal with.

Re:Title

[akadruid]

Not everything space-related is NASA you insensitive clod! :)
You can tell NASA's attempts from UK Universities with this simple test.
Did space object in question:
a. Crash and burn due to problems with the metric system or
b. Vanish without trace

If a then object is of NASA origin, if b, then non-NASA.
Hope this helps clear up any confusion.

Re:what about...

[Anonymous Coward]

Tried to run it once, and it crashed.

Re:Another excuse for MS?

[Anonymous Coward]

Check the EULA that comes with the virus, it's Shared Source, not Open Source!

Re:Scripting exploit

[johannesg]

Don't you suppose the right to redistribute is granted pretty much automatically for a virus?

Didn't Linus predict this?

[Minwee]

"Only wimps use tape backup. Real men just include their important stuff in a Windows worm and let the rest of the world mirror it."

Re:ouch

[Rithiur]

And in the other news today, new variant of the Beagle virus, Beagle.goatse, opens a easily abusable back door in your system. However, so far it seems that hackers have been unwilling to use this hole to breach into our computer.

Re:CVS

[dave_mcmillen]

Laugh if you will, but I for one applaud this new era of open source viruses . . . Wait . . . Oops, my "open source = good" reflex was triggered before my brain had a chance to think about it.