Supernova Worm

Supernova Worm is a malicious computer worm that is spread through the Sharman Networks program KaZaA Media Desktop. When the worm is run, it shows a fake error message that puts the user under the illusion that the program simply "doesn't work" The worm has many variants and aliases. The worm degrades system performance and changes many registry keys to ensure it stays on the machine, it also performs denial-of-service attacks on websites related to religion and Christianity.

Propagation
The worm is mainly known as worm.p2p.supova. Supernova and Supova are the same worm. The worm tries to lure people to download it by giving the exe files names that may appeal to users.

Some examples are:
*Quake 4 BETA.exe
*Grand theft auto 3 CD1 crack.exe
*GTA3 crack.exe
*Battle.net key generator (WORKS!!).exe

When the worm is run on the machine, it multiplies onto the user's computer and changes Kazaa settings to share the files. Increasing the numbers of the worm by over 100 every time a user is infected on the Kazaa network.

The worm also tries to send messages through MSN to share the file that would appear to be from a contact. The user - who would trust their friend, would download the file without a second thought that it may be a malicious program that does harm to the computer.

Variants
There are many variants to the worm but with only one or two differences between them.

*The Filenames - Different variants use different filenames to increase the chances of infecting a user's machine by "offering" more media.

*Size - Some are smaller and some are larger

Additional information
The worm leaves a .txt document on the computer which contains a message. The title of the .txt document is 8 randomly generated digits. The message is as follows.

"Patch the ship or the ship will sink"

Main Menu

See Also

Main Menu