Now this is probably the most obvious example of blatant snake oil salesmanship I've ever seen. I am utterly astounded that this company does such little fact checking of their database that it actually contains this...

For those not on the up-and-up with Unix software, shadow-utils is the package that provides shadow password authentication for pretty much every Linux distribution out there that isn't using PAM authentication. It does not even work on Win32, and the PestPatrol entry is actually listing the files that come in the shadow-utils *source* package. *Nothing* of the files listed is actually executeable on a Windows machine without some _serious_ application of the Cygwin development suite.

Someone was very, *very* st0ned when it came time to analyze this one for inclusion in the database.

sum1 plz hlp me 2 remov shadow-utils virus frm my box! it has tken ovah!

Get it. Install it.

Let me know if it kvetches about not being able to find atapi.sys in c:\WINDOWS\system32\drivers\. That little glitch may be specific to my system.

WindowsXP SP2 Final

] The Witty worm: A new chapter in malware
]
] Opinion by Bruce Schneier, Counterpane Internet Security
] Inc.
]
] JUNE 02, 2004 (COMPUTERWORLD) - If press coverage is any
] guide, then the Witty worm wasn't all that successful.
]
] But Witty was a big deal. It represented some
] scary malware firsts and is likely a harbinger of worms
] to come. IT professionals need to understand Witty and
] what it did.
]
] Witty was the first worm to target a particular set of
] security products -- in this case Internet Security
] System's BlackICE and RealSecure. It infected and
] destroyed only computers that had particular versions of
] this software running.
]
] Witty was wildly successful. Twelve thousand machines was
] the entire vulnerable and exposed population, and Witty
] infected them all -- worldwide -- in 45 minutes.

The Witty worm: A new chapter in malware - Computerworld