Saturday, April 07, 2007

 
Spam Poetry

I know, we have not been updating this blog in a while, and have even considered cancelling the project entirely to work on the Wikia (http://virus.wikia.com) but we do have some interesting stuff planned.

Just to let people know that this is not a dead blog, we will leave you with some examples of the funny text that sometimes comes with spam. What does this have to do with self-replicating programs? Well, often worms are created by spammers so that they can use your computer to send their spam without you knowing, although you might get blamed for sending the spam. The purpose of the "poetry" is to fool spam blockers that might read the body of the message for words or phrases that might be used in an unsolicited sales pitch, kind of similar to the reason why Viagra is often spelled V!agr@ in spam emails. An email that only has "Buy Viagra for 99 cents" will certainly be flagged by a spam detector, but one with a few fragments of Hamlet, Jane Austen and Ernest Hemingway with the salespitch will more likely get through.

So are these examples sent to my email address by some spam zombie computer? More likely, it is from someone being payed to use their own computer on their own time. Once I got some spam email asking me to sign up to become a spammer (though they tried to make it sound like some important advertising job, that is essentially what it was). I sent it to the "report as spam" folder and deleted it, as it would be incredibly stupid to answer such an email, since it could just be a scam.

So here they are, some pretty funny examples of the poetry that can come with your spam. The "title" of each piece of poetry is the actual subject line that came with the email. There are four of them here and I have saved the best for last.

**************************************************

This gem is called "enrage", which is what many people probably feel after receiving it. The title is in all lower-case while most of the body is in ALL CAPS. I guess the poet wanted you to feel that he/she was yelling at you about the weather. A new form of pretentious performance art maybe?

Subject: enrage

KAKE 530 AM ADT SAT MAR 31 2007 .
PARTLY CLOUDY THROUGH THE MORNING. MOSTLY CLOUDY SKIES WITH OCCASIONAL SNOW SHOWERS OR FLURRIES THIS MORNING. RUSSELLVILLE 755 AM CDT SAT MAR 31 2007 . HAINES 530 AM ADT SAT MAR 31 2007 . MAINLY CLEAR SKIES WILL CONTINUE PAST 9 AM. NATIONAL WEATHER SERVICE METEOROLOGISTS DETECTED A LINE OF LIGHT
NATIONAL WEATHER SERVICE METEOROLOGISTS DETECTED A LINE OF LIGHT TO MODERATE RAINFALL ALONG A COLD FRONT.
THEY WILL RELAY YOUR REPORT TO THE NATIONAL WEATHER SERVICE FORECAST OFFICE IN LITTLE ROCK. FLOOD WATERS ARE USUALLY DEEPER THAN THEY APPEAR. LOOK FOR MOSTLY CLOUDY SKIES WITH AREAS OF FOG. NATIONAL WEATHER SERVICE METEOROLOGISTS DETECTED A LINE OF LIGHT TO MODERATE RAINFALL ALONG A COLD FRONT.
RUSSELLVILLE 755 AM CDT SAT MAR 31 2007 .
AND ADDITIONAL RAINFALL AMOUNTS OF ONE TO TWO INCHES ARE POSSIBLE THIS MORNING.
KAKE 530 AM ADT SAT MAR 31 2007 . NORTH WIND 15 TO 25 MPH.
MOST FLOOD DEATHS OCCUR IN AUTOMOBILES. RAINFALL AMOUNTS WILL GENERALLY BE A TRACE TO A FEW HUNDREDTHS OF AN AN INCH.
NORTH WIND TO 15 MPH. OTHERWISE MOSTLY SUNNY. LOOK FOR MOSTLY CLOUDY SKIES WITH AREAS OF FOG. NATIONAL WEATHER SERVICE METEOROLOGISTS DETECTED A LINE OF LIGHT NEVER DRIVE YOUR VEHICLE INTO AREAS WHERE THE WATER COVERS THE ROADWAY. THIS ACTIVITY WILL BE NEAR A BENTONVILLE. KLAWOCK 500 AM AST FRI MAR 30 2007 .
THEY WILL RELAY YOUR REPORT TO THE NATIONAL WEATHER SERVICE FORECAST OFFICE IN LITTLE ROCK. 07 - Sat - 10:15:17 AM (EDT) Warnings, Watches and Advisories in Effect for the United States This page contains watches, warnings and advisories that are in effect for the United States.
SKAGWAY 530 AM ADT SAT MAR 31 2007 .
UP TO THREE INCHES OF RAINFALL HAS BEEN INDICATED. STRETCHING FROM MIAMI.
This same information is available in other file formats including the XML based RSS and CAP formats.
MOVING NORTHEAST AT 50 MPH.

*************************************************

This next work of art is called "Don't understand why". Very existential. Towards the end, it apparently makes some political statements.

Subject: Dont understand why

perfectly divine in that boot, polly. get them for my party; you 'll dance like"youcountinghouse while the storm raged.
part is to come. young talbot served in the war, and then came to england to find them. hesitatingly, as he turned to glinda: "i might try it for awhile,-just to see
accordingly; but none of them had ventured to interrupt the interview, lest

a meek culprit at the stern bar of justice, where women try a sister woman.she understood, put both arms'i am very glad, and suppose i shall give in as ifit different heads and bodies together, to try droll effects.
by his cavalier manner that he really did n't think her "worth a sixpence." their cheerful society, and the comfort he took in that humble home of theirs. "is that the task you give yourself,
in the greenhouse.

in the greenhouse.and discomfort, trying meantime to seem quite easy and gay.patient and brave, and happy through poverty and loneliness and years of hardthe wind had taken liberties.
was very uncomfortable, for the children had bereft him of his wife, home was expressive gestures, and spoke in such a clear, soft voice that the side-path came two little girls, one carrying a small pitcher, the
it in silence for a moment, then put it softly back and, shutting

other trouble could be cured as easily as this."so tied up that he is entirely dependent upon her, and the bachelorhumble fortunes worthy of a thought, for they liked their gossip strongjust then, however, there seemed to be no stopping-place
not let us give up so easily," said the pumpkinhead. "let us do something out when he likes. provoking boy! if he had n't plagued us so, we at that instant mr. sydney appeared at her side. how he got there
i spoke it at school. give it to you now; see if it isn't a rouser."
be tiring to be a monitor, for i have to do a lot of work and attend"yes, if you are good,m:mrs. minot had such a gentle
is absent template while thereby making the front of her dress as bad as the back.
sometimes i feel as if i had nothing else to keep me up." she stopped 'make tom sexton;surprised and re-assured. it well, and adding interest to it by crimping the crust, making prettymorning to come in from the bright world outside, with flags flying, cannon on them."
this aristocratic society, and looked about for jo, fervently hoping that read aloud while she worked; she sung to the old piano tuned for her use; the house full and revel in the little dears to my heart's content. think
horse. he heard the scarecrow fall to the ground with a mushy sound, andstaring. your little books?"
says i mean contradick so i put in both words and you can take the properest.into a boy. she did not know that she had ever been a girl until she was that he was looking at her as intently as eyes and glasses could do it, "i wouldn't two tokens, as she had learned to know, of impatience or pain. morning to come in from the bright world outside, with flags flying, cannonmy other master didn't. if we missed a word, didn't we get raps on the cheerful pansies, and one fragrant little rose in the middle; the third,
over the feast with great dignity, and ate a dinner which would have astonishedof it for days and nights afterward. and since you demand to see the great oz i must take you to his palace."do you? shall

************************************************************

The uninhibited soul who wrote this next one, uninhibited, is likely a feminist.

Subject: uninhibited

Luckily teachers can fight back to some extent.
Even the doctor had to shove the first one in to show me how it was done, and I tell you, it took forever for him to get it up there. I can only imagine what Samson would do if left alone in the backyard, or house or whatever.
Integrating Women's HistoryMarch is Women's History Month. ] Advertisement: username: password: lost password?
So I wish for a road to be built from here to Tobago. Never wearz anything too tight or too baggy.
Guyanese: "And wha ayo a do wid de condoms aftuh?
11] seconds to load this page. We will stand our ground and assure you that we are NOT doing anything wrong.
Before beginning their journey the pastor asked if the dread prayed. The preacher then dunks him under for quite a bit longer, brings him up and says, "Now, brother, have you found Jesus?
- Funny ways to describe doxies [forums - funny dachshund stuff forum] The Hotdog Blog!
Are you sure that's where you need to travel? Whether you are buying or selling your home this is your one stop on the net.
Hez more iced out Bling Blingin then a jewellery store.
My vet would have given wonderful references and I use to foster Golden Retrievers for one of the local rescue groups so I could have ask them to provide the home check info.
Why do you suppose that is? "You're so worried about your stupid BMW, that you didn't even notice that your left arm was ripped off! TEACHER: Why are you late?
how many are we talking about here?
You can customize your dogs like a hamburger or something.
You will rarely see him without a bandanna, and when you do its only because hes afraid that a Blood or a Crip might beat him up. Seller is really motivated. He drives a souped up HONDA or ACURA. He said not to worry unless they got very large or she started foaming at the mouth.
RealtyTrac has definitely paid for itself, even with the few purchases I have made with the information acquired from your service. I have a new puppy and I know how quickly they get so close to your heart. "SPIT IT OUT, SPIT IT OUT, YOU IGRANT BRUTE! BALGOBIN: Well, I'm a lot closer to the ground than you are.
maybe it wasn't the right dog for you and another one will be available soon. The Swiss watch Chubby asked for is on Mammy's left wrist. Mammy is also wearing eight Docker pants.

***************************************************

This last one is kind of kinky, it is called Is everything felch.

Subject: Is everything Felch?

The most extensive and remarkable rainless region on the earth is a vast The monster Physcon lived, it is true, two or three generations before sand, depend upon certain remarkable results of the general laws of husband's mortal foe, and the implacable hostility and hate of the before him, in which war he had perpetrated all imaginable atrocities, and dangerous enterprises, and was often intrusted with the management the first Egyptian city reached by those who arrived by land from the plains, or from higher latitudes to lower, or if, among the various
succession. The coronation of Philadelphus was made one of the most husbandman who keeps this garden of the world in order, and the means which can not flow to the southward or eastward toward the sea, as the
Physcon.--Origin of his name.--Circumstances of Physcon's Physcon displayed the same qualities of brutal tyranny and cruelty in statue.--Ptolemy's proposal to the King of Sinope.--His ultimate aspect of solitude and desolation which reigns over the region into
Ptolemies.--Means of raising money.--Heavy taxes.--Poverty of the would have sprung up, that his ax must first remove. Nature is the were to remain where it fell, wholly submerge and inundate the country. came from Syria, from all the coasts of Asia Minor, from Greece, and
ancient city named Pelusium near the mouth of it. This was, of course, thousand miles, to determine a very gentle current to the northward in sent him, and to put him nominally upon the throne. Cleopatra yielded to wish to put this favorite son in secure possession of it before his
which he seemed to feel in her fate, aroused Tryphena's jealousy. She another, and however desperately each party may have st marked upon the map, the Pelusiac branch. It forms almost the boundary for twenty centuries in accomplishing the undertaking.
on, notwithstanding the profligacy of the kings, in a course of very the mass of the community during the period of their reign. The internal two daughters.--Unnatural war.--Tryphena's hatred of her sister.--Taking recorded, neither side has been found to have gained any perceptible
two daughters.--Unnatural war.--Tryphena's hatred of her sister.--Taking comparatively few interruptions, one wide-spread scene of busy industry. until the time of her birth, continued much the same. In fact, the exhibiting the spectacle of a newly-married husband murdering the son of
populace, saying that it was Lathyrus that had inflicted the cruel language spoken in Egypt which they could understand, and philosophers Egypt has always been considered as physically the most remarkable the head and hands of Cleopatra's beautiful boy, lying among masses of some years, until at length the death of Philip enabled Alexander to therefore, that of the world, turned aside because of her beauty. Julius

Monday, February 12, 2007

 
Malware on TomTom Navigators?

A Tech Blog recently reported that a user of the TomTom satallite navigator found two Trojan programs on the unit, W32.Perlovga.A Trojan and TR/Drop.Small.qp (some in the media and the TomTom company itself have been calling them viruses, but they are actually trojans). The navigator had been recently purchased and this was the first time that its owner, an experienced IT consultant with a clean, Antivirus-protected computer used the unit.

The TomTom company avoided the situation at first (or, giving them the benefit of the doubt, trying to figure out the situation themselves), but then released a statement saying "... a small, isolated number of TomTom GO 910’s, produced between September and November 2006, may be infected with a virus. The virus is qualified as low risk and can be removed safely with virus scanning software. Appropriate actions have been taken to make sure this is prevented from happening again in the future."

The only versions of TomTom found with malware on them are the GO 910 with software version 6.51. The trojans themselves are low risks. As TomTom software is Linux based, the trojans cannot do anything to the TomTom device itself, but may be loaded onto the user's computer and cause damage if they are running MS Windows. According to Sophos, users have been detecting malware on their TomToms since 2006 September.

Tuesday, February 06, 2007

 
What is happening to 29A?'''

Three more members of the famous group of virus/worm writers have left, leaving it down to roy g biv, vallez and VirusBuster. A statement on their website, which has been updated for the first time in over a year, says that they have had some internal issues (no specifics on what the issues are) and that they are unsure of the future of the group.

29A was started by MrSandman in Spain, with a few other relatively unknown virus creators. The group and its members eventually became famous in the virus creating and antivirus world and even made it into mainstream news. 29A had high ethical standards, mostly creating concept viruses with no malicious payload and rarely releasing them into the wild.

Friday, February 02, 2007

 
Hello and welcome to the Virus Report! Our mission is to bring you the latest news on Viruses, Worms and any kind of self-replicating code. We are working closely with The Virus Encyclopedia and many of the reports in this blog may end up as entries there.

Posts will usually be about the latest most prominent virus or worm that is spreading on computers and will contain an in-depth analysis of the code's inner workings and behavior (at least as in depth as we can make it at the time). We will also discuss new infection techniques, the latest in activities of prominent virus/worm creators and operating system exploits or anything newsworthy in the world of viruses and worms.

Generally we take a positive view of viruses and worms, particularly those that were created to demonstrate new concepts, were created out of the curiosity of the creator or that do not have a destructive payload. The ones that were created to destroy files or entire computers and those created to open holes for data theft are looked down upon (or rather, their creators are, as the viruses and worms themselves can be very interesting). Creating an original virus or worm takes a great deal of computer knowledge, and this should be admired on some level, even if the intent is malicious. On the other hand, "script kiddies" who compile other people's code or, worse yet, use a virus/worm generator are deserving of the worst contempt.

This blog deals primarily with viruses and worms, but may occasionally discuss system vulnerabilities, exploits, trojans, adware and spyware where they are relevent to self-replicators.

As we have a virus/worm wiki to work on, real jobs and something resembling a social life, it may take a little while to get things started. In the mean time, if you really want to get news and information on viruses and worms, you can do it the way we do, by going to all of the different sites that only focus on one aspect of malware and piece it together to get the whole picture of that particular virus or worm. We will make this easier for you by posting some links.

This page is powered by Blogger. Isn't yours?