War of the Worms ends
p2pnet.net Virus News:- NetSky.E discovered yesterday will be the last Netsky.
Or so says its creator.
Unlike Bagle and MyDoom, which have been rampaging around the Net since last month, the Netsky worm isn’t meant to hurt.
Rather, it’s a Nice Guy kind of worm with a distinct taste for bagles.
“The guy behind NetSky thinks he is doing a good thing – most likely a teenager and probably just one guy who is not part of a group of criminals,” Mikko Hypponen, director of antivirus research at F-Secure is quoted as sahing in a CNET story here.
Hypponen said he expects the NetSky author to stick to his word and stop releasing new variants: “We have no reason to doubt it, so I would be surprised if it isn’t true.”
However, CNET goes on, Bagle.L, discovered yesterday, contains a back door, which opens the TCP (Transmission Control Protocol) port 2745, according to antivirus firm Panda Software. Infected computers attempt to connect to an Internet address that hosts a PHP script. According to Panda, this is how the worm notifies its author that another computer has been infected.
“Hypponen said the behavior of the latest Bagle worm is suspiciously similar to that of the original MyDoom worm, which so successfully launched a denial-of-service attack on the SCO Group’s Web site,” adds the story. “He suspects that Bagle and MyDoom are written, if not by the same person, then by the same team of coders.”
