Free Republic
Browse · Search
General/Chat
Topics · Post Article

Skip to comments.

Tetris game hides Cellery worm ( Windows only though )
vnunet.com ^ | 13 Jan 2005 | Robert Jaques

Posted on 01/14/2005 12:34:07 PM PST by Ernest_at_the_Beach

Tetris game hides Cellery worm

Worm uses cult game to spread via email
Robert Jaques, vnunet.com 13 Jan 2005

A worm, dubbed Cellery-A (W32/Cellery-A), which poses as a playable version of the classic Russian computer game Tetris has been detected in the wild, security experts have warned.

The Cellery worm, which gets its name from a message it displays saying 'Chancellery', makes changes to Windows settings to ensure that it automatically runs when the operating system starts up.

While the Tetris-like arcade game is running, the worm plays a MIDI music tune, and searches for other network drives and attached computers to also try and infect.

"This worm puts up the Tetris game as a smokescreen while it tries to hop from computer to computer across your network," said Graham Cluley, senior technology consultant for Sophos.

"If your company has a culture of allowing games to be played in the office, your staff may believe this is simply a new game that has been installed - rather than something that should cause concern."

Sophos reported that Cellery is not the first virus to allow infected users to play games on their PCs. The Bibrog worm posed as a shooting game, while the Coconut worm, written by the female Belgian virus writer Gigabyte, gave users the opportunity to throw coconuts at photographs of members of the computer security community.

Although there have only been a small number of reports of the Cellery worm, Sophos recommends computer users ensure their anti-virus software is up-to-date.

This article was printed from the VNU Network


TOPICS: Computers/Internet
KEYWORDS: computersecurity; getamac; internetexploiter; lookoutexpress; lowqualitycrap; malware; securityflaw; spyware
Another way to get bad stuff onto your computer.
1 posted on 01/14/2005 12:34:07 PM PST by Ernest_at_the_Beach
[ Post Reply | Private Reply | View Replies]

To: backhoe; NormsRevenge

Got to find a Tetris game for Linux...


2 posted on 01/14/2005 12:35:31 PM PST by Ernest_at_the_Beach (A Proud member of Free Republic ~~The New Face of the Fourth Estate since 1996.)
[ Post Reply | Private Reply | To 1 | View Replies]

Gee, it seems like all those PC programmers are buuuuuuuuuuusy with stuff like this... ;)


3 posted on 01/14/2005 12:41:21 PM PST by oolatec
[ Post Reply | Private Reply | To 2 | View Replies]

To: oolatec; NormsRevenge
Looks that way:

He's got the virus-writing bug

******************************************

Excerpt:

**********************************


For five years, Czech student Marek Strihavka programmed computer viruses as part of the underground group 29A.

A twist of fate, however, has led the former virus writer to take a job stopping digital pests like those he used to create. About a year after leaving 29A, which takes its name from the base-16 representation of 666, the 22-year-old resident of Brno in the Czech Republic became the main developer of Zoner Software's antivirus system.

I am glad that I can use the skills I achieved by studying viruses in practice and real life.

Now Strihavka finds himself under attack. The Czech police have raided his home and confiscated his computer equipment as part of an investigation into the Slammer worm. In addition, some antivirus companies are attacking Zoner for hiring a known virus writer.

In an interview with CNET News.com, the man who used to be "Benny" claims that he never took part in spreading his programs on the Internet and maintains that virus writers contribute to online security.

*************************

See link for the interview.

4 posted on 01/14/2005 12:46:12 PM PST by Ernest_at_the_Beach (A Proud member of Free Republic ~~The New Face of the Fourth Estate since 1996.)
[ Post Reply | Private Reply | To 3 | View Replies]

To: All
Antivirus companies frequently say that no virus writer should ever have a job in security. What are your views of this opinion?
From the interview:

**********************************

That is funny. Why? Just because a lot of skilled virus writers already have jobs in the antivirus industry. I don't want to cause any problems to my friends, so I won't give concrete examples. But believe me, this is just marketing theater for customers--the truth is a bit different.

5 posted on 01/14/2005 12:52:31 PM PST by Ernest_at_the_Beach (A Proud member of Free Republic ~~The New Face of the Fourth Estate since 1996.)
[ Post Reply | Private Reply | To 4 | View Replies]

To: backhoe; ShadowAce

tech ping

Thanks for the bump, Ernest. Anyone else who has tech ping lists add me to it, please.


6 posted on 01/14/2005 1:43:46 PM PST by JoJo Gunn (More than two lawyers in any Country constitutes a terrorist organization. ©)
[ Post Reply | Private Reply | To 1 | View Replies]

To: Ernest_at_the_Beach

http://www.zophar.net/unix/nes.html


7 posted on 01/14/2005 1:48:54 PM PST by JoJo Gunn (More than two lawyers in any Country constitutes a terrorist organization. ©)
[ Post Reply | Private Reply | To 2 | View Replies]

To: Ernest_at_the_Beach
Got to find a Tetris game for Linux...

Here ya go

8 posted on 01/14/2005 1:58:21 PM PST by ShadowAce (Linux -- The Ultimate Windows Service Pack)
[ Post Reply | Private Reply | To 2 | View Replies]

Disclaimer: Opinions posted on Free Republic are those of the individual posters and do not necessarily represent the opinion of Free Republic or its management. All materials posted herein are protected by copyright law and the exemption for fair use of copyrighted works.

Free Republic
Browse · Search
General/Chat
Topics · Post Article

FreeRepublic, LLC, PO BOX 9771, FRESNO, CA 93794
FreeRepublic.com is powered by software copyright 2000-2008 John Robinson