high
Summary
Summary
Action- More Information
| Affected operating systems |
|
|---|---|
| Protection available since | 21 December 2004 22:14:52 (GMT) |
| Detected by | All Sophos products |
Free virus scan
- Free virus, spyware, and adware scan
- Test your existing anti-virus protection
- Find threats your anti-virus missed
Action
- Summary
- Action
- More Information
Please follow the instructions for removing worms.
More Information
Perl/Santy-A is a worm that exploits a vulnerability in the phpBB bulletin board software.
The worm spreads to vulnerable bulletin boards on both Windows and Unix based platforms.
Infected sites may display the message:
This site is defaced!!!
NeverEverNoSanity WebWorm generation
 |
| The Santy worm has defaced thousands of web bulletin boards. |
The worm spreads to vulnerable bulletin boards on both Windows and Unix based platforms.
Once the worm has spread to 3 or more servers it will attempt to overwrite all HTM*, PHP*, ASP*, SHTM*, JSP* and PHTM* files with a web page containing the following message:
This site is defaced!!!
NeverEverNoSanity WebWorm generation #
where '#' is the number of infection cycles the worm has been through to infect the compromised server.
|
| The Santy worm has defaced thousands of web bulletin boards. |
|
