The Symantec Antivirus Research Center (SARC) this week
reported the first known instance of a Java-based virus.
Strange Brew, as it's called, is what's known as a parasitic virus.
A parasitic virus attaches itself onto a host program so that the host
program is still capable of functioning after it is infected. The Strange
Brew virus attaches itself to ".class" files, which are the executables
that make up Java applets and applications.
Brew Of Excreted Coffee Beans Is Cat's Meow:: be the first to share your thoughts on this question. - Sorry, comments are closed for this story. Brew Of Excreted Coffee Beans Is Cat's Meow http://www.sfgate.com/cgi-bin/article.cgi?file=/gate/archive/2004/01/22/MNcivetpoop.DTLHOME |
The virus cannot be spread with the Internet Explorer or Netscape Navigator
Web browsers because the infected applets will always fail the built-in
security checks of the browser, and are promptly "killed."
The Strange Brew virus is also a direct action virus that, once it has
infected a file, will attempt to infect other files. When it is finished
infecting files, it yields control to the host application and terminates
itself.
Once the virus has located a file that is infected by Strange Brew, it will
load regions of the infected file into memory, and then start the second
phase of the infection process. At this point the virus looks for new files
to infect, and it inserts itself into these new "hosts."
Strange Brew infects the new host .class files by making a new section in
the file and adding its own program logic to this section before all of the
host file's original program logic sections. The virus will try to infect
every suitable Java file in the directory it resides in before turning over
control to the host application, increasing each infected file's size by
roughly 3,890 bytes. It also changes the directory date and time stamp of
each infected file.
Specific Virus Information:: Strange Brew(Java.StrangeBrew): The Strangebrew virus infects Java Class(CLA) The first is a hoax. The other is a joke program that wobbles windows. http://www.geocities.com/SiliconValley/Heights/3652/vinfo.htmlHOME | Microsoft PowerPoint - Bits of Morality -- Overview v02 (B&W for :: File Format: PDF/Adobe Acrobat - View as HTMLYour browser may not have a PDF reader available. Google recommends visiting our text version of this document.1998 -- Strange Brew virus: First Java virus. released. 1998 -- Back Orifice: First remote administration. Trojan Horse that allows others to completely http://www2.norwich.edu/mkabay/ethics/bits_morality.pdfHOME |
SARC has provided users with a method of detecting the new Java virus by
posting the virus definitions today on the SARC download
page.
For more information, visit see the Strange Brew Virus information on the site.
Macromedia Unveils Web Design 101
Web Site Update Tool Released
|