Perl/Santy.A Worm

 Information about the Perl/Santy.A Worm:

Perl/Santy.A is a worm. The worm is written in Perl script and attempts to spread to Web servers running versions of the phpBB applications.

Upon execution, the worm searches for viewtopic.php using the Google search engine to generate a list of possible targets.

It scans all the directories on the affected site and modifies the contents of the files with the following extensions:

.asp
.htm
.jsp
.php
.phtm
.shtm

The worm replaces the contents of the infected sites with the message:

This site is defaced!!! This site is defaced!!! NeverEverNoSanity WebWorm generation XX
(where XX is the number of infections which increases upon every infection).

This worm first appeared on 21st December, 2004.

 Other names of Perl/Santy.A Worm:

This Worm is also known as WORM_SANTY.A, Perl.Santy,.