Perl/Santy-A

Category: Viruses and Spyware Protection available since:01 Mar 2013 16:25:42 (GMT)
Type: Win32 worm Last Updated:01 Mar 2013 16:25:42 (GMT)
Prevalence: Small Number of Reports

Download Download our free Virus Removal Tool - Find and remove threats your antivirus missed

Perl/Santy-A is a worm that exploits a vulnerability in the phpBB bulletin board software.

The worm spreads to vulnerable bulletin boards on both Windows and Unix based platforms.

Infected sites may display the message:

This site is defaced!!!
NeverEverNoSanity WebWorm generation

Defaced website
The Santy worm has defaced thousands of web bulletin boards.

Perl/Santy-A is a worm that exploits a vulnerability in the phpBB bulletin board software.

The worm spreads to vulnerable bulletin boards on both Windows and Unix based platforms.

Once the worm has spread to 3 or more servers it will attempt to overwrite all HTM*, PHP*, ASP*, SHTM*, JSP* and PHTM* files with a web page containing the following message:

This site is defaced!!!
NeverEverNoSanity WebWorm generation #

where '#' is the number of infection cycles the worm has been through to infect the compromised server.

Defaced website
The Santy worm has defaced thousands of web bulletin boards.