# wormlist.txt - This file feeds a hash in the checklogs.pl script # This file contains the string values that we look for to identify a # worm and the name of the worm that the string identifies. The format # of the file is as follows: string value - tab - worm name # DO NOT use spaces or multiple tabs DO NOT leave any blank lines anywhere # Edit this file just as you see it here # find service ntldr Funlove .eml read=No write=Yes Nimda .eml failed Nimda NOTE.COM Qaz RECYCLED/SIRC32.EXE SirCam size 4 would overrun buffer Klez .rar read=Yes write=Yes Klez couldn't find service $c Bugbear couldn't find service c$ SoBig couldn't find service d$ SoBig couldn't find service e$ SoBig Movie_0074.mpeg.pif SoBig Document003.pif SoBig Untitledl.pif SoBig Sample.pif SoBig details.pif SoBig 45443.pif SoBig application.pi SoBig approved.pi SoBig document.pif SoBig documents.pif SoBig movie.pif SoBig submited.pif SoBig your_details.pif Sobig.e Documents and Settings/All Users/Start Menu/Programs/Startup SoBig Windows/All Users/Start Menu/Programs/Startup SoBig scrsvr.exe read=Yes write=Yes Opaserv brasil.exe read=Yes write=Yes Opaserv basil.pif read=Yes write=Yes Opaserv alevir.exe read=Yes write=Yes Opaserv marco!.scr read=Yes write=Yes Opaserv puta!!.exe read=Yes write=Yes Opaserv SRV32.EXE read=Yes write=Yes Opaserv instit.bat read=yes write=yes Opaserv mstask.exe.exe read=Yes write=Yes Opaserv mqbkup.exe read=Yes write=Yes Opaserv .exe read=Yes write=Yes Elkern \.exe read=Yes write=Yes Elkern (Operation not permitted) CHMOD Attempt mssg.exe read=Yes write=Yes Acebot1 tssg.exe read=Yes write=Yes Acebot2 ffen.exe read=Yes write=Yes Acebot3 rdvs.exe read=Yes write=Yes Ultimax.a rrddvvss.exe read=Yes write=Yes Ultimax.b _setup.exe Expore_zip stg.exe read=No write=Yes Lovgate SETUP.EXE read=No write=Yes Lovgate midsong.exe read=No write=Yes Lovgate PsPGame.exe read=No write=Yes Lovgate images.exe read=No write=Yes Lovgate tamagotxi.exe read=No write=Yes Lovgate news_doc.exe read=No write=Yes Lovgate docs.exe read=No write=Yes Lovgate humor.exe read=No write=Yes Lovgate billgt.exe read=No write=Yes Lovgate fun.exe read=No write=Yes Lovgate searchURL.exe read=No write=Yes Lovgate s3msong.exe read=No write=Yes Lovgate Card.exe read=No write=Yes Lovgate joke.exe read=No write=Yes Lovgate Hamster.exe read=No write=Yes Lovgate autoexec.bat read=No write=Yes Lovegate.f The world of lovers.txt.exe read=No write=Yes Lovgate.f How To Hack Websites.exe read=No write=Yes Lovgate.f Panda Titanium Crack.zip.exe read=No write=Yes Lovgate.f Mafia Trainer!!!.exe read=No write=Yes Lovgate.f 100 free essays school.pif read=No write=Yes Lovgate.f AN-YOU-SUCK-IT.txt.pif read=No write=Yes Lovgate.f Are you looking for Love.doc.exe read=No write=Yes Lovgate.f Sex_For_You_Life.JPG.pif read=No write=Yes Lovgate.f CloneCD + crack.exe read=No write=Yes Lovgate.f Age of empires 2 crack.exe read=No write=Yes Lovgate.f MoviezChannelsInstaler.exe read=No write=Yes Lovgate.f Star Wars II Movie Full Downloader.exe read=No write=Yes Lovgate.f Winrar + crack.exe read=No write=Yes Lovgate.f SIMS FullDownloader.zip.exe read=No write=Yes Lovgate.f MSN Password Hacker and Stealer.exe read=No write=Yes Lovgate.f netservices.exe write=No read=Yes Lovgate.f PSEXESVC.EXE Randon inst.exe Deloder ref-394755.pif Palyh approved.pi Palyh password.pi Palyh doc_details.pi Palyh screen_temp.pi Palyh screen_doc.pi Palyh movie28.pi Palyh 10.bat Palyh ipcnl.exe Palyh hack.bat Mumu hfind.exe Mumu ipc.bat Mumu muma.bat Mumu near.bat Mumu ntservice.bat Mumu ntservice.exe Mumu NTService.ini Mumu nwiz.exe Mumu nwiz.in_ Mumu nwiz.ini Mumu ipcpass.txt Mumu tihuan.txt Mumu random.bat Mumu replace.bat Mumu kvfind.exe Mumu bboy.exe Mumu mumu.exe Mumu MSMSGRI.EXE Slanper msslut32.exe Sluter REG32.EXE read=No write=Yes W32/Yaha.y@MM win.ini read=Yes write=Yes W32/Yaha.y@MM ntlord.exe Randex winuser32.exe Randex symantec32.exe Randex pmnt.exe Randex instdrv.exe Agobot