PDA

View Full Version : Worm uses Google to infect phpBB boards



Tranquility
2004-Dec-23, 04:50 AM
Folks, always use an antivirus when browsing phpBB forums. A worm called Santy.A uses Google to search for internet boards that have a particular vulnerability which affects the phpBB software.

Read about it here (http://www.pcworld.com/news/article/0,aid,119024,tk,dn122204X,00.asp).

The worm infects the servers that host phpBB forums, but I don't know if it actually infects visitors to the forums.

Jim
2004-Dec-23, 02:28 PM
Folks, always use an antivirus when browsing ...

The worm infects the servers that host phpBB forums, but I don't know if it actually infects visitors to the forums.

The article you link says it doesn't, but your opening caveat is a good one to follow.

TrAI
2004-Dec-23, 03:56 PM
It seems the Google people hacked up a fix, by blocking the keywords the worm uses to search for targets(Article here (http://www.cooltechzone.com/index.php?option=content&task=view&id=879&Itemid=0 ))

This virus in itself only attacks vulnerable servers running phpBB, not the average machine out there, but it seems that it is OS independent(It is based on Perl script, I think).

But the advice about using antivirus software is good(at least for windows users, most viruses seems to be for Windows), it can be very hard to detect a virus on a computer if one does not have antivirus software. You can even get free antivirus software, for example AVG Free edition (http://free.grisoft.com/freeweb.php/doc/2/).

Firewall software is a good idea too, it can block certain kinds of viruses,the free version of Zone Alarm (http://www.zonelabs.com/store/content/company/products/znalm/freeDownload.jsp?lid=zaskulist_download) is a popular choice.

Tranquility
2004-Dec-23, 07:25 PM
The article you link says it doesn't, but your opening caveat is a good one to follow.

I know, but I remembered reading in another article that there's a possibility it might infect visitors to the infected board with certain configurations of IE, but I can't find it now.