01-30-2004, 07:55 PM
|
|
Pontificator
Join Date: Feb 2004
Posts: 1,398
|
|
$500,000 in cash if you find the MyDoom author
You've probably heard this already, but I thought a discussion would be interesting.
http://www.wired.com/news/technology...w=wn_tophead_7
Does anyone have any idea how to track down the author? Due to it's nature it would be infinately difficult to trace back through all of it's infections unless another worm-like device was made. And the author problably released it in an intelligent manner (internet cafe, then server hopping).
What do you think of the personal string the code holds? "Andy; I'm just doing my job, nothing personal, sorry."
|
| |
|
|
|
01-30-2004, 08:22 PM
|
|
Sage
Join Date: Apr 2004
Posts: 631
|
|
Well, since "Andy" is at the beginning of the sentence I think the comment is directed TO Andy. I think the bastard was pissed at this "Andy" and hacked into their computer, then used "Andy's" email to send the virus and eventually it will be traced back to this "Andy" who will be blamed for it. The virus is apologizing because it is only doing what it was told to do. (By the writer/enemy)
OK, if this get's turned into a movie I have documented proof I came up with it here, today on Jan 30th, 2004 at 11:21 am Pacific. 8)
|
| |
|
|
|
01-30-2004, 08:58 PM
|
|
Pontificator
Join Date: Jul 2003
Posts: 1,264
|
|
Quote:
|
Originally Posted by JackTheTripper
OK, if this get's turned into a movie I have documented proof I came up with it here, today on Jan 30th, 2004 at 11:21 am Pacific. 8)
|
The movie was made, the virus is just a marketing gimic. 
|
| |
|
|
|
01-30-2004, 11:04 PM
|
|
Pontificator
Join Date: Feb 2004
Posts: 1,398
|
|
Shouldn't the author have made it insanely easy to track? So "Andy" gets framed?
How about this -
Write another worm that sniffs computers for MyDoom, and if it's infected it sends the infection time and source sender to a central server. The server compiles the list of infected computers, and makes a map that shows the worm's progress and general origin.
Or you could hack into Interpol and find out what they know about it... :wink:
|
| |
|
|
|
01-31-2004, 12:13 AM
|
|
Mystic
Join Date: Sep 2003
Posts: 1,766
|
|
I found him!:jawdrop:
Here he is, ladies and gentlemen!
-Justin.
|
| |
|
|
|
01-31-2004, 12:54 AM
|
|
Thinker
Join Date: Jul 2003
Posts: 406
|
|
Maybe "Andy" should turn this guy in, and get the last laugh... :wink:
|
| |
|
|
|
01-31-2004, 01:12 AM
|
|
Sage
Join Date: Apr 2004
Posts: 631
|
|
Quote:
|
Originally Posted by David Prahl
How about this -
Write another worm that sniffs computers for MyDoom, and if it's infected it sends the infection time and source sender to a central server. The server compiles the list of infected computers, and makes a map that shows the worm's progress and general origin.
|
Didn't the last big worm (4 months ago?) have a rev B where someone took it and re-wrote it so it repaired what the first worm did, then delete itself off your system? Why can't someone do the same thing here? I read MyDoom opens a particular port, couldn't you write a worm that looks for that port, crawls in, installs a patch then deletes itself?
And how stoopid is it that if someone DID do this then they could get busted too? :roll:
|
| |
|
|
|
01-31-2004, 02:11 AM
|
|
Pontificator
Join Date: Feb 2004
Posts: 1,398
|
|
Quote:
|
Originally Posted by Honda_Civic_Si
I found him!:jawdrop:
Here he is, ladies and gentlemen!
-Justin. |
Experts have just seen a surge in web traffic that they attribute to yet another worm, called MiMail.S, or "MyDoom.C". Although similar to the last variant, this one targets www.ppcc.vze.com, and contains the message "Justin; I'm just doing my job, nothing personal, sorry."
|
| |
|
|
|
01-31-2004, 02:13 AM
|
|
Pontificator
Join Date: Feb 2004
Posts: 1,398
|
|
I've written my share of malicious code, but have never let it go. Besides, experts think that the worm originated in Russia. (Good! My server-hopping worked!) 8)
|
| |
|
|
|
01-31-2004, 07:11 PM
|
|
Theorist
Join Date: Mar 2002
Posts: 305
|
|
Quote:
|
Originally Posted by David Prahl
experts think that the worm originated in Russia.
|
An undercover Symantec operative using Siberia as his ( her ) base of operations perhaps? :twisted:
Kidding! ( sort of :wink: )
|
| |
|
|
|
|
|
Linear Mode
