At my signal, unleash hell.

In a car crash kinda way, I was really interested in seeing what the SoBig worm was going to try to do.  Hopefully now that they've identified the servers they'll be able to dissect the payload. 

I'm surprised this was the first worm (that I know of) that harvested documents looking for e-mail address.  I'm surprised no app hasn't harvested connection strings from .exes, .dlls, DSNs and UDL files looking to connect into databases.  I'd assume that you'd be reasonably successful at connecting into many databases.  Heck, I'd be pretty concerned about the number of those connection strings that would be logging in with admin privledges...

Edit: It appears it is downloading some pornographic materials (source Bloomberg.com).  This worm really set the tone for future virii.  People will expect suspense and drama from now on.  Computer geeks rushing across the world shutting down 20 computers before computers all over the world START DOWNLOADING PORN!  Yeah, so the ending needs some work...

No Comments