School Assignment? Project Due Tomorrow? Chat LIVE With A Programming Expert!

Welcome to Dream.In.Code
Become an Expert!

Join 300,406 Programmers for FREE! Get instant access to thousands of experts, tutorials, code snippets, and more! There are 1,613 people online right now. Registration is fast and FREE... Join Now!




worms in websites

 

worms in websites

gharibah

1 Jul, 2009 - 02:10 AM
Post #1

New D.I.C Head
*

Joined: 1 Jul, 2009
Posts: 5

want to ask a question :-

Are there network worms which leave their signatures in the source of the web page?

In other words,
Can we detect a worm by analysing the web-page (by trying to find the worm signature in the source of the webpage)?

In other words,
Can an intrusion prevention system identify worms by analysing the web pages?

In plain words,
If you open an infected webpage (by notepad), can you find a worm signature in it?

I hobe to get an answer.

Any help is greatly appreciated.

User is offlineProfile CardPM
+Quote Post


RudiVisser

RE: Worms In Websites

1 Jul, 2009 - 03:44 AM
Post #2

.. does not guess solutions
Group Icon

Joined: 5 Jun, 2009
Posts: 1,872



Thanked: 137 times
Dream Kudos: 125
Expert In: PHP, MySQL, HTML, CSS, C#

My Contributions
Worm? What type of worm?

A virus that acts as a proxy between you and a website?

There's a million different types of "worms" so if this is true for one, it probably won't be true for another. The only way you're going to find this out is from your own research on your own "worms".
User is offlineProfile CardPM
+Quote Post

firebolt

RE: Worms In Websites

1 Jul, 2009 - 04:07 AM
Post #3

D.I.C Lover
Group Icon

Joined: 20 Feb, 2009
Posts: 5,463



Thanked: 75 times
Dream Kudos: 1675
My Contributions
Thats why they invented encryption. smile.gif
User is offlineProfile CardPM
+Quote Post

gharibah

RE: Worms In Websites

1 Jul, 2009 - 06:52 AM
Post #4

New D.I.C Head
*

Joined: 1 Jul, 2009
Posts: 5

QUOTE(MageUK @ 1 Jul, 2009 - 03:44 AM) *

Worm? What type of worm?

A virus that acts as a proxy between you and a website?

There's a million different types of "worms" so if this is true for one, it probably won't be true for another. The only way you're going to find this out is from your own research on your own "worms".


I ask about internet worms.

QUOTE(firebolt @ 1 Jul, 2009 - 04:07 AM) *

Thats why they invented encryption. smile.gif



please, explain.
User is offlineProfile CardPM
+Quote Post

RudiVisser

RE: Worms In Websites

1 Jul, 2009 - 06:54 AM
Post #5

.. does not guess solutions
Group Icon

Joined: 5 Jun, 2009
Posts: 1,872



Thanked: 137 times
Dream Kudos: 125
Expert In: PHP, MySQL, HTML, CSS, C#

My Contributions
What type of internet worm??? According to some definitions, advertisements are internet "worms" as they store a million cookies on your computer.

Give us an example, or just take a look for yourself, download a page without a "worm" and then "install" (or whatever you'd do) the "worm" and check it again. Simples!
User is offlineProfile CardPM
+Quote Post

gharibah

RE: Worms In Websites

1 Jul, 2009 - 07:32 AM
Post #6

New D.I.C Head
*

Joined: 1 Jul, 2009
Posts: 5

QUOTE(MageUK @ 1 Jul, 2009 - 06:54 AM) *

What type of internet worm??? According to some definitions, advertisements are internet "worms" as they store a million cookies on your computer.

Give us an example, or just take a look for yourself, download a page without a "worm" and then "install" (or whatever you'd do) the "worm" and check it again. Simples!


This is a good suggestion; but I don't have a worm sample that I can install or run on my computer.
If you have one please post it (if you have a link, remember to post it as a text not as an active link to avoid infecting others).

It is prefered to be one of the following worm:-
CodeRed worm
CodeGreen worm
Nimda worm
Santy worm
Samy worm
Sql slammer worm
Beagle worm
Sasser worm
Bugbear worm

Thanks very much.
User is offlineProfile CardPM
+Quote Post

RudiVisser

RE: Worms In Websites

1 Jul, 2009 - 07:36 AM
Post #7

.. does not guess solutions
Group Icon

Joined: 5 Jun, 2009
Posts: 1,872



Thanked: 137 times
Dream Kudos: 125
Expert In: PHP, MySQL, HTML, CSS, C#

My Contributions
Okay well one that I recognised was the sasser virus, and that doesn't touch web pages.

What exactly are you trying to do with this? Just wondering.
User is offlineProfile CardPM
+Quote Post

gharibah

RE: Worms In Websites

1 Jul, 2009 - 07:55 AM
Post #8

New D.I.C Head
*

Joined: 1 Jul, 2009
Posts: 5

I'm asked to give an approve or counterapprove about weather the internet worms can be detected by analysing the web-pages.
This is what I said in the first post.

I Preferred the above worms specifically beacause I know their signatures (I found them by searching on google).

What exactly I wanted to do is to run the worm and search for its signature in the web page (i.e the HTML code of the webpage).

I have another way, if i knew an infected webpage, I can search for a worm signature on it; but still I don't have a webpage that I'm sure it is infected with a specific worm.


User is offlineProfile CardPM
+Quote Post

RudiVisser

RE: Worms In Websites

1 Jul, 2009 - 08:03 AM
Post #9

.. does not guess solutions
Group Icon

Joined: 5 Jun, 2009
Posts: 1,872



Thanked: 137 times
Dream Kudos: 125
Expert In: PHP, MySQL, HTML, CSS, C#

My Contributions
Hmm, but it's very rare that a computer capable of getting a worm (ie. non-server systems, since they should be locked down) would be hosting a website anyway, so I'm still not sure I understand what you're trying to acheive from it.
User is offlineProfile CardPM
+Quote Post

gharibah

RE: Worms In Websites

1 Jul, 2009 - 08:21 AM
Post #10

New D.I.C Head
*

Joined: 1 Jul, 2009
Posts: 5

really, I don't understand your tention!!!

I want to say that I'm a beginner and have little information a bout web develpment and almost no information a bout worm or virus programming; otherwise I wouldn't come here and ask a question like this.

Anyway,
Thanks for your help.
User is offlineProfile CardPM
+Quote Post

RudiVisser

RE: Worms In Websites

1 Jul, 2009 - 12:17 PM
Post #11

.. does not guess solutions
Group Icon

Joined: 5 Jun, 2009
Posts: 1,872



Thanked: 137 times
Dream Kudos: 125
Expert In: PHP, MySQL, HTML, CSS, C#

My Contributions
There is no tension... I just don't have a clue what you're trying to do.

You said you wanted to detect signature of worms?? But if you don't even know if they leave signatures, why??
User is offlineProfile CardPM
+Quote Post

no2pencil

RE: Worms In Websites

1 Jul, 2009 - 09:13 PM
Post #12

i R L33t Skiddie, k?
Group Icon

Joined: 10 May, 2007
Posts: 13,228



Thanked: 289 times
Dream Kudos: 2875
Expert In: Goofing Off

My Contributions
QUOTE(gharibah @ 1 Jul, 2009 - 09:55 AM) *

I'm asked to give an approve or counterapprove about weather the internet worms can be detected by analysing the web-pages.

I thin that what you are describing is Adware/Spyware. Adware/Spyware runs on a website & gathers information about the viewers, through malicious cookies or malicious applications.

A worm would bounce from IP to IP collecting data on users of subnets across the internet, & return that data to a source, & would act independent of a website.

A virus would be like the worm, except that it copies itself to the machines.

Viruses are programs that self replicate
Worms gather data
Spyware & Adware target 1 person for advertisement or data collecting

Know your terminology smile.gif

User is online!Profile CardPM
+Quote Post

CamoDeveloper

RE: Worms In Websites

2 Jul, 2009 - 06:15 AM
Post #13

D.I.C Head
Group Icon

Joined: 12 Jun, 2009
Posts: 204



Thanked: 12 times
Dream Kudos: 200
My Contributions
Our company once got attacked by a virus that would intercept the post from a forum to update content on the page and interject a javascript routine that wrote out a path to an IP address with a folder containing a virus file. It was pretty neat seeing how it worked but was kind of easy to find out where the file location was since the creator wrote the IP address in ASCII characters. It turns out that one of our clients had it on their machine and when we would go to the clients sites to view our updates it attached it to our machines.

One way of seeing if a website has Adware/Spyware is knowing how your site works. If it takes longer than normal for the site to load a page, submit a form, or anything else than normal then view the source. That's how we found the virus that attacked us.

Hope this can clear up any confusion.

~Camo
User is offlineProfile CardPM
+Quote Post

Fast ReplyReply to this topicStart new topic

Time is now: 11/7/09 10:47PM

Live Help!

Be Social

Dream.In.Code RSS Feed Dream.In.Code LinkedIn Group Follow Us On Twitter Fan Us On Facebook

Tutorials

Programming

Web Development

Reference Sheets

Code Snippets

DIC Chatroom

Bye Bye Ads

Monthly Drawing

Thumb Drive

Top Contributors

Top 10 Kudos This Month