Difference between revisions of "W32/Crog.worm"
m (change link to citation) |
(artist creds) |
||
| Line 4: | Line 4: | ||
The name stems from two files the worm copies to the root of the infected computer's file system: <code>Crazy frog gets killed by train!.pif</code> and <code>Annoying crazy frog getting killed.pif</code>. The actual executable was not named after Crazy Frog, but rather, disguised as an MSN updater. | The name stems from two files the worm copies to the root of the infected computer's file system: <code>Crazy frog gets killed by train!.pif</code> and <code>Annoying crazy frog getting killed.pif</code>. The actual executable was not named after Crazy Frog, but rather, disguised as an MSN updater. | ||
Somewhat notably, the worm opens a web page on the user's web browser, listed as <code><nowiki>http://frog.0catch.com/(blocked)big_deal.jpg</nowiki></code>. This could | Somewhat notably, the worm opens a web page on the user's web browser, listed as <code><nowiki>http://frog.0catch.com/(blocked)big_deal.jpg</nowiki></code>. This could possibly be using the "What's the big deal?" image by illustrator/tattoo artist Thomas "Lee" Wendtner.<ref>https://web.archive.org/web/20061103041645if_/http://www.turboforce3d.com/annoying/index.htm</ref> | ||
<references /> | |||
Revision as of 18:27, 28 January 2022
W32/Crog.worm is a worm (computer virus) which spread via MSN Instant Messenger and peer-to-peer file sharing networks circa March 7, 2005. Its name is a contraction of Crazy Frog. Its goal is to weaken a computer's security, but not to cause any real damage. Not much information is available about this virus, apart from an archived McAFee report on it.[1] No binaries seem to exist presently.
The name stems from two files the worm copies to the root of the infected computer's file system: Crazy frog gets killed by train!.pif and Annoying crazy frog getting killed.pif. The actual executable was not named after Crazy Frog, but rather, disguised as an MSN updater.
Somewhat notably, the worm opens a web page on the user's web browser, listed as http://frog.0catch.com/(blocked)big_deal.jpg. This could possibly be using the "What's the big deal?" image by illustrator/tattoo artist Thomas "Lee" Wendtner.[2]