A new GPL virus : NetSky

jeudi 27 mai 2004.
 
VOUS AVEZ ENVOYE UN MESSAGE A l’ADRESSE CONTENANT LE VIRUS WORM_NETSKY.C DANS LE FICHIER message.doc.com. L’ACTION deleted A ETE EFFECTUEE. LE DESTINATAIRE A ETE PREVENU. VEUILLEZ VERIFIER VOS MESSAGES AVANT DE PROCEDER A TOUT NOUVEL ENVOI.

This is normal. This virus intends to infect the strategic French defense. You know, a bad guy (sarko-ko) injected a lot of money in a bad system, conduced by W.B. (secret agent) and they want to dominate the world. The gros-naze team, which is the most linux integrist secret group of the world (whith some shit-esthetic sub-groups inside) is investigating some viruses to attack the so called "gendarmerie".

Now, two versions of Sasser and Dabber are currently rewritten by our specialists, to produce LGPL worms, that you can freely download and branch to create your own version. These viruses can now attack the Windows machines of Gendarmerie, destroying some files like "plaintes.doc", "photos_2_q.doc" and also "vols_meurtres_liste_des_courses.doc". All files named "*.sdw", "*.tex", "*.pdf" are chmoded "a-w" (for Windows users, write protected against a foolish man who should want to modify them). The hard disk of the infected computer is partitioned, one unit for the document I told you about before, and one partition for windows, which is erased, hard-formated (one pass with zeros, one pass with ones), and reinstalled with a Debian system.

As Sasser and Dabber are well known by some malicious codes like Symantec or Norton (well known viruses which make feel the user he is protected (against what ?)), we changed their nameds to NetSky.C because "NetSky" is a great world, first, and second because ".C" seems to mean that we coded the virus in C, but as you know, all good programmers are coding in Java. NetSky is embedded into a file "message.doc.com", because we know that 90% of users think that Microsoft World and Internet is quite the same thing (or maybe that one of these things is an extension of the other). Anyway, Netsky is quickly spreading among the web and infiltrating the different posts of Gendarmerie (not touching other computers). At the time of this article, we know that 65% of Gendarmerie’s machines are infected, and we also know that 98% of the users are trying to call Bill G. to know what is happening. The defense ministery has passed this morning at 05h32 GMT at level 4 of defense. Currently, Jacques Chirac is trying to remember the code of our tactical nuclear defense. We hope he does not use the same key to command on Amazon.

As a result, we advice you not to enter the Gendarmerie before having installed a Debien at home, because our virus is propagating directly from work place to Gendarme’s houses. If you got married with a Gendarme, use sexy advices to convince him/her to update your home computer("s" if you are a Nerd-Gendarme (shame on you !)). We do not give any guaranty about what it could happen to your system as our goal is to reach the sarko-ko organization, and disturb the French defense. Maybe the Gros-Naze web site will be closed after that all our strategy have been revealed. But we don’t mind ; the server which provides the page you read is a Debian system.

Seul le message en français est véridique (dans le sens où nous l’avons reçu (en tant que spam))
Répondre à cet article