Comments on: Dismantling the Storm Worm botnet

By: hazed

hazed — Sun, 15 Feb 2009 09:59:57 +0000

Sucks for the malware writers. Cool concept though. It really puts meaning to “fighting fire with fire”.

By: jude

jude — Mon, 19 Jan 2009 01:51:21 +0000

JUDE HERE, HAHAHA DISREGARD THAT, I SUCK COCKS

By: Techninja

Techninja — Sun, 18 Jan 2009 06:29:49 +0000

I see why people would be hesitant to send this out because it may screw up some machines. But if the machine is susceptible to bots already, what guarantee that the system is working properly already? Or that some other piece of malware won’t break it anyway..

By: Rob A

Rob A — Sun, 18 Jan 2009 02:30:12 +0000

@jude: yea i agree with everyone else, your retarded.

I just sent this link to a prof. of mine at RIT. I took a malware class with him and we took a look at the storm bot. It was hard to analyze it because of its defensive mechanisms. If this stormfucker app really can beat it i say let people download it and opt in. I certainly would download it.

By: nebulous

nebulous — Sat, 17 Jan 2009 21:57:39 +0000

Hey jude, don’t make it bad. Etc etc.

My own ISP actually does detect botnet (and spambot) hosts, and disconnects a person’s internet access, by redirecting every HTTP request to a dummy site, and denying everything else. The page just tells people to call the ISP for help on getting unstuck, and the helpdesk can tell them to clean up their shit.

I’m sorry to say I got stung by this. Had an old laptop working on an out-of-house connection, unfirewalled, for a bit. Picked up a bot, got it home, and started spamming from there. Easily and unavoidably fixed.

By: TJHooker

TJHooker — Sat, 17 Jan 2009 21:00:22 +0000

@jude: Nice 4chan’ish troll. Something tells me you’re not capable of much else than what you’ve shown here.

The truth is the control nodes are hidden behind hundreds of tiers of DNS and researchers can’t just break into the computers. Also in some aspect corporate governance is profiting off of the spam, so they won’t directly prosecute and interrogate the people charging for lease time on them, or the companies who pay to have their stuff advertised in the spam.

By: Wwhat

Wwhat — Sat, 17 Jan 2009 20:47:11 +0000

Problem with your idea ragnar is that any sensible person would not believe such redirects, because that’s a known trick of viruses/worms, to fake being a helpful site or ‘alert’, like the famous ‘your IP is x.x.x.x, hackers can already start to attack you! install our crap now!’
Let the ISP’s just send a regular snailmail.

By: matt

matt — Sat, 17 Jan 2009 20:23:37 +0000

@jude:

oh dear, did sombody just get turned down a place at university?

By: az

az — Sat, 17 Jan 2009 19:18:46 +0000

@Jude:

You hint that you are part of the botnet scene – but judging from the language used in your post I’m guessing you’re nothing to do with storm botnet. Writing that would take some skill.

I’m guessing you’re just some kiddie with maybe a few zombies using rxbot or some other p.o.s malware trying to make yourself look “l33t”.

You’re really not kidding anyone.

Oh, and the researchers “don’t have the education of the street”? Computers aren’t the street. On computers you get flamed for a dumbass post like that. You did that to someone on the street and I’m fairly certain you’d get your kiddie ass kicked.

By: Nox13last

Nox13last — Sat, 17 Jan 2009 18:52:23 +0000

@Jude:
I expect your extent of ‘teh streetz’ involves shagging anything that moves and fantastic use of a cocaine knife. Maybe you should stick to that?

@:
It’s not the first. At least one virus I’ve read about actually puts itself on your computer, patches your computer against it and another virus in the wild, then deletes itself completely. If your computer were to be infected by it again, it would look for the patch it made and delete itself again if it found it.
How helpful, I like it.

By: jude's dad

jude's dad — Sat, 17 Jan 2009 18:33:11 +0000

jude: finish your homework, and clean your room, or I’ll take your computer away!!

By: anti-judge

anti-judge — Sat, 17 Jan 2009 18:02:53 +0000

shut the fuck up jude

By: jude

jude — Sat, 17 Jan 2009 17:33:14 +0000

OMFG the fucking wanker geek squad want to fight with the evil storm worm. These so called researchers are the most disgusting scum of the community go back wank in the dark you retards instead of fight us. We will destroy you faggots.
Until people make profit from storm worm like malware you won’t have a restfull night.

You think you are the good guys and you want to make a cleaner internet when the whole world is a toilet more or less shit in it doesnt matter. Go fuck yourselves, you will lose at the end!

Go back to the university suck more cock u are too dumb to grow up yet shitheads you don’t have the education of the street yet!

By: TJHooker

TJHooker — Sat, 17 Jan 2009 16:53:06 +0000

double post: What’s really hilarious is that any of us can go lease portions of the botnet right now, and nobody knows who controls it. yet you get DMCA letters for P2P downloads, and supreme court prosecutions for distributed soliciting while not under trademark.

By: TJHooker

TJHooker — Sat, 17 Jan 2009 16:41:36 +0000

@loldongs: three reputable researchers have done this exact same thing with various botnets in the last 2 years. The red tape is the legality of running arbitrary code on remote machines.

Even if they could, a new DNS system would be made making it harder, because spam is extremely profitable. If you look at the statistics these bot nets are mainly used for denial of service attacks and spam.