Velocity Reviews - Computer Hardware Reviews

Velocity Reviews > Newsgroups > Computing > Computer Security > NACHI-B : WHITE WORM ?

Reply
Thread Tools

NACHI-B : WHITE WORM ?

 
 
sam1967@hetnet.nl
Guest
Posts: n/a
 
      02-13-2004
Nachi-B attempts to clean up Mydoom and download patches from
microsoft.com.
Is it a White Worm ?
Was it written by Chinese hackers ?

It drops a text file containing the following (my notes are in square
brackets)

-----------------------------------------------------------------
LET HISTORY TELL FUTURE !

1931.9.18 [Japanese invasion of Manchuria]
1937.7.7 [July 7th incident, Japanese troops launched bombarded(Marco
Polo Bridge)the Lugouqiao Bridge. ]
1937.12.13 300,000 ! [Rape of Nanking]

1941.12.7 [Pearl Harbour]
1945.8.6 Little boy [First atomic bomb dropped on Hiroshima]
1945.8.9 Fatso [Second atomic bomb dropped on Nagasaki]

1945.8.15 [End of WW2 in the East .Hirohito surrenders ]

Let history tell future !
----------------------------------------------------------------------------
 
Reply With Quote
 
 
 
 
sam1967@hetnet.nl
Guest
Posts: n/a
 
      02-13-2004
On Fri, 13 Feb 2004 10:55:14 +0000, "(E-Mail Removed)"
<(E-Mail Removed)> wrote:

>Nachi-B attempts to clean up Mydoom and download patches from
>microsoft.com.
>Is it a White Worm ?
>Was it written by Chinese hackers ?
>

PS just noticed that it only patches machines using English , Korean
and Chinese versions of windows.
Also if the OS is a Japanese it overwrites the HTML files with the
historical dates shown above.

A White Worm which only cleans up Chinese , Korean and English OS
versions and leaves taunting messages on Japanese ones.
Very interesting indeed.

 
Reply With Quote
 
 
 
 
Mimic
Guest
Posts: n/a
 
      02-13-2004
<(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> Nachi-B attempts to clean up Mydoom and download patches from
> microsoft.com.
> Is it a White Worm ?
> Was it written by Chinese hackers ?
>
> It drops a text file containing the following (my notes are in square
> brackets)
>
> -----------------------------------------------------------------
> LET HISTORY TELL FUTURE !
>
> 1931.9.18 [Japanese invasion of Manchuria]
> 1937.7.7 [July 7th incident, Japanese troops launched bombarded(Marco
> Polo Bridge)the Lugouqiao Bridge. ]
> 1937.12.13 300,000 ! [Rape of Nanking]
>
> 1941.12.7 [Pearl Harbour]
> 1945.8.6 Little boy [First atomic bomb dropped on Hiroshima]
> 1945.8.9 Fatso [Second atomic bomb dropped on Nagasaki]
>
> 1945.8.15 [End of WW2 in the East .Hirohito surrenders ]
>
> Let history tell future !
> --------------------------------------------------------------------------

--

Yuh so i see, bastards, me and a mate did start working on a worm to knock
out
MyDoom before it dropped its payload, unfortunatley more important projects
needed finishng

--
Mimic

ZGF0YWZsZXhAY2FubmFiaXNtYWlsLmNvbQ== ( www.hidemyemail.net )
"Without knowledge you have fear. With fear you create your own nightmares."
"There are 10 types of people in the world. Those that understand Binary,
and those that dont."
"He who controls Google, controls the world".



 
Reply With Quote
 
Cal
Guest
Posts: n/a
 
      02-13-2004
"Mimic" <(E-Mail Removed)> wrote in message news:<(E-Mail Removed)>...
> <(E-Mail Removed)> wrote in message
> news:(E-Mail Removed)...
> > Nachi-B attempts to clean up Mydoom and download patches from
> > microsoft.com.
> > Is it a White Worm ?


White worm? Any code executing on my PC without my authorisation is
definitely not of the white variety.
 
Reply With Quote
 
 
 
Reply

Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Security Experts Warn of Kama Sutra Worm (yet another MS worm) Imhotep Computer Security 4 01-30-2006 01:53 PM
Worm\Spybot (P2P-Worm.Win32.SpyBot.a) Danny Computer Information 0 08-14-2005 01:09 PM
worm/spybot.17.t (worm spybot 17t) detected by AVG code_wrong Computer Security 0 05-15-2004 04:40 PM
Antigen found VIRUS= I-Worm.Sobig.f (Kaspersky,CA(InoculateIT)) worm ANTIGEN_ML-MAIL Ruby 0 09-09-2003 07:11 PM
New anti-blaster worm attempts to fix RPC/DCOM vuln - W32/Nachi.worm Lord Shaolin Computer Security 6 08-20-2003 10:39 PM



Advertisments