main

MSBlast suspect pleads guilty

malebolgia   on 12 August 2004 - 04:01 · 84 comments & 3091 views

Advertisement (Why?)
Jeffrey Lee Parson today pleaded guilt to creating the "MSBlast" variant "MSBlast.B", which caused so may problems for computer users. For those who don't remember the original Blaster worm exploited the DCOM RPC vulnerability using the TCP port 135. However only Windows 2000 and Windows XP machines were affected by this worm.

This isn't a closed case yet, Jeffrey Parson still has to face his sentencing scheduled for November 12, 2004. Parson could face jail time with a timeframe of 18 to 37 months in prison. The prosecutors claim that Parson's "MSBlast.B" worm infected more than 48,000 computers. It’s likely that the number of infected computers will affect the length of Parsons prison sentence in November.

It's good to see that virus creators are getting tougher penalties for their crimes. Though in this case I wish that they would have found the creator of the first Blaster worm. Still a catch is a catch.

View: More Information


Texas Hold 'Em Poker

In Texas Hold 'Em Poker, it's "all in" for players as they compete in single player or multiplayer action against up to 10 computer players. Via link cable, players can also challenge four friends in the most challenging poker game on the Game Boy(R) Advance. The password save feature allows players to save their bankroll for future games.

Monster Trucks

Monster Trucks takes all the action and excitement of Monster Truck events and brings them to the Game Boy(R) Advance. Players build their ride in the scrap yard then work their way up to arena competitions in a quest to become the best on the circuit. They must face five different Monster Truck opponents determined to knock them out of the league and can earn money to add new upgrades to their truck and Monster Truck Team.

F-18 Super Hornet

In F-18 Super Hornet, players will take to the sky for more than 19 different land and sea missions in real Iraqi cities, to defend the coalition and defeat the insurgent forces with an array of high-powered weaponry.

Post a comment · Send to friend Comments · There are 84 additional comments
#1 frogworm on 12 Aug 2004 - 04:04
hell yeah son! let the jail love'n begin
#2 PanicButton on 12 Aug 2004 - 04:08
Don't drop the soap in the shower
(1 reply) #3 VG11489 on 12 Aug 2004 - 04:09
lol he deserves more too bad they didnt find the creator of the original doom virus i would like a word with him
#3.1 Surr3al on 12 Aug 2004 - 14:43
I don't think he deserves more, first off it's just a variant and secondly him doing time isn't going to fix the worm that's out there. Lastly, giving him a harsh sentence probably won't deter people from doing virus acts like this, just like the death penalty or the "3 strikes you're out" penalty for going to jail doesn't deter any crime either.

Also, I welcome these viruses, if anything they make people money and give Information Security departments a job to do.
#4 McG on 12 Aug 2004 - 04:12
ouch
(12 replies) #5 Ronald_Sandoval on 12 Aug 2004 - 04:19
Viruses aren't that bad. It's only the stupid people who catch them. I've only gotten a virus once and that was for swapping software on disks (i had a DOS based system at the time) from a friend before I knew anything about viruses. Heres how I kept myself safe afterwards:

- Router
- Software Firewall
- Strict guarding of running processes (personally, not with software)
- Not running consumer based os's (wIn98/me/xp-home) I ran NT, 2000 and XP Pro.
- Not saying yes to everything that pops up
- Strict ActiveX access

Not many computer users will do all this because they are stupid and or ignorant. "Works fine for me, I shouldn't have to do all this". But if they bothered to read the news they would find out that Windows is the biggest source of viruses and threats from hackers. You have to be on your guard in a hostile environment.
#5.1 nikvasilev on 12 Aug 2004 - 04:38
QUOTE
Viruses aren't that bad.

QUOTE
Windows is the biggest source of viruses

You must be the dumbest person on earth with your ridicules comments.
#5.2 mufdvr3669 on 12 Aug 2004 - 05:05
QUOTE
Viruses aren't that bad. It's only the stupid people who catch them.
Your an idiot. That's like me saying you deserve to have your house or car broken into if you don't have a security system on them. Virus writers should be locked up for a long time for the millions of dollars in damages that they do. Not everyone is that knowledgeable about computers and they shouldn't be held accountable because someone else tries to exploit them.
#5.3 Turbonium on 12 Aug 2004 - 05:14
I think what he's trying to say is that ignorant people catch them WAY easier than us nerds.

Simply running a firewall, updating with OS patches the moment they're released, and having a regularly updated antivirus solution, in combination with common sense when browsing the Web, makes the risk of catching a virus very slim. I'd bet it's exponentially more slim than if you didn't do all of the above, or if you only did one of them.
#5.4 slowestborg on 12 Aug 2004 - 05:56
QUOTE (#5.1)
You must be the dumbest person on earth with your ridicules comments.

I couldn't agree more.

Besides most people want to use their computers to get useful stuff done and not waste time like everyone who comes here and says that you should protect yourself by doing this and that and changing operating systems and the like..... end of rant.
#5.5 slowestborg on 12 Aug 2004 - 05:57
QUOTE (#5.0)
Not running consumer based os's (wIn98/me/xp-home) I ran NT, 2000 and XP Pro

So, you would be a corporation then eh?
#5.6 EvErSoR on 12 Aug 2004 - 07:22
You are the first person that i "met" that thinks the same way as I do.

I never had i virus on my pc though i got the blaster once i was reinstalling windows for my aunt and forgot my update cd at home...

Most viruses are not using a system wide security hole like MSBlast (the hole was patched one month before MSBlast; hello? Update you System! Or at least use Windows Firewall) Most viruses spread becuase most users are so dumb that they open up every email the get. Anti-Virus Programs are for these people and companies. Most Anti-Virus Programs can only react that means that they create an update if a new virus is out, so your system can still be affected.

Enough. I had a forum discussion on this topic before and nobody thought the same way as I... you only get flamed by the dumb people (not that i can't handle critics but most people just write stupid one liners and don't add something worthy to the discussion)
#5.7 MaceX on 12 Aug 2004 - 08:45
The laws against writing viruses definitely need to be re-written or abolished completely.

What constitutes as a virus? I could say Windows XP is a virus because it came pre-installed on my computer and it deleted some important files on a floppy.

Does this mean the computer user could sue microsoft because he believed Windows XP is a virus?

I really wish all laws on software should be abolished.
#5.8 Sawyer12 on 12 Aug 2004 - 08:48
I think that was a well written post apart from the opening sentance.

QUOTE
Viruses aren't that bad


But the rest is true.
#5.9 Jon on 12 Aug 2004 - 08:56
QUOTE
Viruses aren't that bad. It's only the stupid people who catch them


What a painfully arrogant and misguided comment.
#5.10 matrixhax0r on 12 Aug 2004 - 14:48
That maybe a bit strong. But for instance, if you are running IIS for no reason and you never use it and then you get screwed by a worm, it's probably abit your fault. The problem is probably that we still haven't learned much. After so many worms/viruses I guess we would have understood that it's a good idea to take precautions.
#5.11 Solarix on 12 Aug 2004 - 15:08
only stupid people do get viruses , seriously, i ahvent had one in 2 years
#5.12 Caelamia on 12 Aug 2004 - 18:13


Personally, I believe you are stupid for making such a ridiculous and ignorant comment. Maybe you should actually think before you tappety-tap on your keyboard in future. Not everyone is in your situation, you know?
#6 denzilla on 12 Aug 2004 - 04:21
I say they attach a household hotplate to his @ss, plug it in and give him a water hose. Sure he can always spray his backside to relieve the burning, but he would also risk electrocution by doing so. Yes..I am sick....
(5 replies) #7 Skyfrog on 12 Aug 2004 - 04:25


Last edited by 3601 on 12 Aug 2004 - 17:13
#7.1 pogz on 12 Aug 2004 - 04:35
#7.2 SW5 on 12 Aug 2004 - 11:02
Not Funny
#7.3 matrixhax0r on 12 Aug 2004 - 14:48
Yeah, not funny
#7.4 Solarix on 12 Aug 2004 - 15:09
please specify, if its not funny what is it?
#7.5 Skyfrog on 12 Aug 2004 - 17:15
In order to avoid offending any Neowin readers I have changed the picture of an empty electric chair to this cute furry kitten.
(6 replies) #8 dannymp3 on 12 Aug 2004 - 04:29
Wow... 18 to 37 months for creating a virus?... hmm... kinda' rough.
#8.1 mufdvr3669 on 12 Aug 2004 - 05:10
He created a virus that affected 48,000 computers!!! Kinda' rough? He should of gotten a longer time than that or else had to repair or buy computers for everybody he affected, or would that not be fair either. Maybe we should just give him a petty ticket so it doesn't stop others from causing millions of dollars in damages. Everybody is affected by these losers, I have to watch what I download and use a virus scanner that slows down my computer. Pisses me off for just those reasons.
#8.2 Ronald_Sandoval on 12 Aug 2004 - 05:24
All of those 48,000 computeres were windows based.

You don't even need to use a virus scanner, switch operating systems. Or try switching to secure non microsoft alternatives to your windows software.
#8.3 mufdvr3669 on 12 Aug 2004 - 05:37
I've tried linux and think it sucks. Gave it a couple week run and though windows was superior in it's ease of use and it's amount of programs available (such as games). I shouldn't have to run a second operating system just cause some dorks thinks it's cool to hack people's computers and screw with them. This kid got off lightly, I just hope he's getting screwed in prison just like the people he was trying to screw with.

Last edited by 10676 on 12 Aug 2004 - 06:00
#8.4 sentio on 12 Aug 2004 - 05:52
QUOTE
it's ease of use

Which is why you should stick with Windows.
#8.5 EvErSoR on 12 Aug 2004 - 07:25
QUOTE (#8.2)
You don't even need to use a virus scanner, switch operating systems. Or try switching to secure non microsoft alternatives to your windows software.

Updating your system and using a firewall is enough even for windows based pc's
#8.6 epple on 12 Aug 2004 - 07:54
That's exactly what he said, sentio.
(4 replies) #9 kylmcg on 12 Aug 2004 - 04:30
#9.1 sentio on 12 Aug 2004 - 05:51
:rofl:
#9.2 Sawyer12 on 12 Aug 2004 - 08:46
What the hell is that
#9.3 Grappa on 12 Aug 2004 - 16:00
That's really sick.

But in the context of the topic, I couldn't help but laugh.
#9.4 Cyranthus on 12 Aug 2004 - 16:26
LOL just wrong, but funny.
#10 DrIndianaJones on 12 Aug 2004 - 04:33
Not long enough! I say put him away for five or even ten years!
#11 vetToxicfume on 12 Aug 2004 - 05:00
Not to say this guy doesn't deserve punishment, but I bet a LOT of people learned (for the good) to protect themselves better from his actions.
#12 BananaMan on 12 Aug 2004 - 05:07
I feel sorry for him, but he deserves it.
#13 zerolimit on 12 Aug 2004 - 05:15
its true alot of people dont protect themselfs. Firewall and keeping updates will keep you away from virus. Also not downloading junk off the net. If people would watch closer what they download they would be virus free. I have yet to get a virus
#14 slowestborg on 12 Aug 2004 - 05:51
He should be given 1 month for every computer his virus infected.
That will work out to 48000 months or 4000 years
(5 replies) #15 Ruciz on 12 Aug 2004 - 06:23
use linux or a mac. Wow, that was easy
#15.1 NyaR on 12 Aug 2004 - 06:32
why not amiga? or dos?
#15.2 SW5 on 12 Aug 2004 - 11:00
amiga all ther way!
#15.3 nikvasilev on 12 Aug 2004 - 11:36
Microsoft all the way
#15.4 darksoul on 12 Aug 2004 - 13:33
if everyone started using linux things would be even worse... linux is less straight forward and has just as many bugs. I agree that someone who knows that they are doing would be very secure under linux but the same can be said about windows.
#15.5 matrixhax0r on 12 Aug 2004 - 14:56
Less straight forward for windows users? (No really?)
Isn't Microsoft supposed to be practicing security by hidding? Linux should be more practical since the publicity of the source code encourages the authors to code better and fix bugs quicker. Pluse, there is usally much more freedom if you are running a server on *nixes since none of them are "more intergrated" into the system. And more freedom lets you choose what's good for you.
#16 NyaR on 12 Aug 2004 - 06:31
i think a much better punishment would be to have every person whos computer was infected get 1 punch at the creator, with him funding the airplane fare
(3 replies) #17 MitchShrader on 12 Aug 2004 - 06:31
Several Points.. his jail time will cost (lets say 48 months, 25K$ per year, estimated)
100K$. Add in investigation & prosecution charges, (paid by society) and good chance that'd more than double. Making HIM suffer doesn't change the cost. 48K comps (call it 2 hrs downtime per comp, lost productivity) and a strictly minimal estimate (average wage 15$ hr) and we're at (approx 1,700,000 dollars). This is from ONE two-bit nerd with a missing sense of public ethics. What sort of value does society gain from any of the proposed actions? (Jailtime)..

I'm not argueing for or against any choices the legal system comes up with. I'm just asking the question.. what connection between penalty and positive benefit exists?
Any? No doubt others can find different numbers, I picked some that aren't too far off just to illustrate the point. Longer jail terms cost us MORE, (unless you can show me somehow they prevent other idiots from doing likewise {which i do not see}..

Do I have a proposed alternative? Ha. I wish. Best guess is public service, indef, that would do some discernable and measureable good. Pay Back The Debt..

I'm not in any way saying don't sanction the virus writers. I'm just saying.. jail costs US and not him.. how can we actually regain some of the stolen value (time) that is
gone forever under the punishment system? I'd prefer and support a 'recompense' system. Do something useful.

If that meant being recycled into spare parts for organ transplants, or teaching basic computing to third world children, or becoming a medical experiment guinea pig, or ANY thing that looked like 'payback'.. i'd be a heck of a lot more comfortable with the logic of it. As is, seems to me the system charges society to support wrong-doers and does nada to actually make THEM responsible. His suffering does me no good. What's in it for me?
#17.1 epple on 12 Aug 2004 - 08:00
This has always been a problem and there will be no solution to it anytime soon unless big things changes pretty soon.
I say let him work for free for the rest of his life, at some really ****ty place behind fences where no one wants to work, among other wrong-doers, where they actually produce something. Or let him fry.
#17.2 darksoul on 12 Aug 2004 - 13:35
simple solution... cut off his dominant hand
#17.3 Grappa on 12 Aug 2004 - 16:04
You people have heard of the punishment fitting the crime, right?
(1 reply) #18 CubanPete on 12 Aug 2004 - 07:18
I could be on the wrong lines here but wasnt this a worm and not a virus??

Also unless im mistaken it didnt actually do any damage?
It simply caused your pc to be rebooted every 30 seconds.

Now i actually got this worm and so did the place where i work but to be completly honest did he actually commit a serious crime, In my view this worm could have done ALOT more, but its not like it burnt out your cpu or hard drive? Admittedly he should have informed MS about it first but at the end of the day he's simply taking the flak for something someone else created and something that has proven to people how careful they should be when online.

It seams to me that this is about equal to walking into someones front door and setting their alarm off then walking back out. Not stealing anything, or if the person doesnt have an alarm leaving them a note telling them what they managed to do.


Sorry if i've got the wrong end of this stick with this but thats based on my experiance of actually recieving the worm. If it did do something more destructive then ignore this whole thing.
#18.1 Jon on 12 Aug 2004 - 08:58
A worm is a type of virus.

Damage caused caused net excessive network traffic, down time, money spent fixing etc.
#19 CabiMan on 12 Aug 2004 - 07:45
Does it matter what OS you are using anyway - these things effect everyone who uses the internet. Maybe not this particular one, but mass mailers slow down the net, and we all use the net regardless of OS. It may have effected 48k computers, but how many net users did it effect? How much traffic did it cause? Worms, viri along with spam are choking the net with unwanted garbage - these people need to learn, and if it means getting a sore bottom in a damp cell somewhere, then so be it.
#20 Breach on 12 Aug 2004 - 08:01
Criminally evil, sure. Still, it is people like this guy who actually give the security effort the greatest boost, forcing big evil corporations (ahem) to actually at least try to do something. The real criminals remain the black hats, those who keep 0-dayz private and target the big dough.
(1 reply) #21 xtatic43 on 12 Aug 2004 - 08:04
lol and to think i was debating on coding a worm for the virus.. i was messin with it 2 hours after the exploit was released.
#21.1 matrixhax0r on 12 Aug 2004 - 14:58
You know the exploit code usally float around for weeks/months before it hits bugtraq or until MS does anything
(5 replies) #22 YaZoR on 12 Aug 2004 - 08:47
QUOTE
18 to 37 months in prison.

What a waste of programming talent and security knowledge. When will the governments understand that its better to learn from them and use their knowledge than banish them. I have respect for anyone who can write a virus, (not trojans they're different), and has immense security knowledge. Though this article doesn't prove he's talented nor a master of security. I just mean in general.

Another thing, if your sh!t scared of being hacked/exploited, no one held you at gun point to connect your computer to the internet.
#22.1 CubanPete on 12 Aug 2004 - 09:50
I agree,
With this guys knowledge he could have made this worm much more destructive, but he chose not too. Most of the worlds governments actually hire poeple to do this for them yet when someone does it who isnt working for them its a crime. Instead of punishing him ms should give the guy a job, if more companies actually give them jobs we'd all benefit from more secure operating systems.
People who cause physical damage or data loss to computer systems should be punished, but people who simply demonstrate the dangers should be added to the friendly side

People like this could improve systems security to save us all from the wreckless hackers/crackers and virus writers

Now for a bit of conspiricy theory:-
If all systems were 100% secure, would anyone bother to upgrade?
Its the danger that makes most people upgrade, newer software is seen to be more secure, yet interestingly the exploit in question exists in all NT based operating systems since NT 4

Just of of interest, how often do you see microsoft (sorry to use them as an example again) patch a flaw in their software before it has been exploited?
And therefore are they constantly checking security in their software, or simply letting the public virus writers do it for them for free?

Last edited by 28857 on 12 Aug 2004 - 10:00
#22.2 Deryck on 12 Aug 2004 - 10:52
Many companies hire ex-crackers so to test out such programs. But whatever he did, it was still a crime.
As for the theory, what about the upgrads having features that the consumer would find useful then just sticking with what they have, features such as support for USB and being up-to-date?
#22.3 epple on 12 Aug 2004 - 10:53
The movie 'Catch me if you can' comes to mind.
#22.4 CubanPete on 12 Aug 2004 - 11:04
Yer i agree it is still a crime but the government seam to be able to do it yet when someone else does it they get convicted.
#22.5 BananaMan on 12 Aug 2004 - 15:26
You're painting him as some sort of child prodigy. But remember, he did not create the virus, all he did was take the source code for it and in a fit of complete stupidity, merely added some details (his website, his online alias) and released it into the wild. It was traced back to him almost immediately.
(2 replies) #23 SW5 on 12 Aug 2004 - 10:59
Must suck for him, not even the original creator

He HELPED everyone, got Microsoft to patch holes in there system fast! Microsoft knew about DCOM exploit for MONTHS! We should pat him on the back

Remember if the data is that important backup on cd-r
#23.1 chacho on 12 Aug 2004 - 15:21
well, that's certainly a different way of looking at it.

although his intention wasnt to be constructive...
#23.2 RangerLG on 12 Aug 2004 - 19:32
Um, Microsoft patched the hole two weeks before the original Blaster was released. He did nothing but take advantage of people who had not updated for one reason or another.
#24 Aasum on 12 Aug 2004 - 11:52
way to go teekid oh yea his worm was just a modified ms blaster to create irc drones in purpose to make tons of xdcc's if u couldnt tell i knew da dude on irc hehe he was a NA on a network i used to be a TA/Services Admin on till well the FBI sorta took the main hub machine
(2 replies) #25 Mando on 12 Aug 2004 - 12:01
what you all seem to be missing here is that the person in question was using a pc malisciously and the the dtriment of other users.

this is illegal and wrong her ein the uk under the misuse computer act and because of that infantile moronic yank buinesses worldwide lost money and time because of his script kiddy antics.

He is a criminal and such be treated as such.

Creating viruses aint big or clever, the only thing it highlights is that these morons are using their talents destructively and havnt got the intellect or balls to actually use their coding talents to a contsructive cause.

hope your ready for your ass raping boy "your my little puppy now!"
#25.1 YaZoR on 12 Aug 2004 - 12:42
QUOTE
He is a criminal and such be treated as such.

He isn't a criminal in my eyes (Although, yes technically he is a criminal). The two guys who smashed my roller-shutter door of my shop, smashed my shop door window, broke into my store early hours of the morning, stole a sh!it load of my stock, smashed my store computer, are criminals and there are many just like them. Just so they could enjoy a scummy heroin addicted lifestyle.
#25.2 matrixhax0r on 12 Aug 2004 - 15:02
[qoute]
Creating viruses aint big or clever[/qoute]
If that was true, what is Microsoft worring all about? We don't need patches because every dumbass in the land can exploit and make viruses for windows.
(1 reply) #26 Capiora on 12 Aug 2004 - 13:32
I don't want to offend anyone, but...

computer programmers get locked up for a year, while terrorists and killers still run arround terrorizing the neighbourhoods...
#26.1 mufdvr3669 on 12 Aug 2004 - 14:54
what the hell???
#27 Gary_Player on 12 Aug 2004 - 14:04
So he'll do a year's jail time, then he'll have 20 software companies fighting to bail him out and give him a 100,000 a year job
#28 AxelStone on 12 Aug 2004 - 14:08
You know, the variants that were created were just plain stupid. A person who makes a "variant" of a worm should be punished to the full extent. There is no reason for such a thing. As for the origina, as much wrong as he did I'd classify him more as a vigilante. MSBlaster no matter how much damage that was done, M$ was warned over a year prior. I watched as people started exploiting that vuln more and more. I'm kinda glad that he did it, M$ was ignoring it and hoping it would go away. What he did was wrong, but at least the results he got paved the way for people to finally be forced to learn and it just like we think its just plain stupid to leave your door open and unlocked and your car with your window down and cash in the seat.... thats just my 10 cents.
(1 reply) #29 matrixhax0r on 12 Aug 2004 - 15:04
I just wana point out that it says he's 19. Though break dude. Should have done it 2 years ago (and he probably did)
#29.1 Magallanes on 12 Aug 2004 - 16:09
he doesn't create the virus!


He only modified a created virus (i.e. a stupid script kiddie playing with assembler and hex editor). So he have ZERO MERITS. Anyways, now he's famous because it.

So, IMHO he want to be punished because he can earn a lot more for it (fame). Later, he can work in security, many big-and-stupid business will contract hackers to their security..

#30 jay420 on 12 Aug 2004 - 16:21
I think the justice is served, the men's rea is present (intentional Harm) in this case, and bi the way its a serious crime, even if u are modifying a virus, you are intentionally thinking to harm (in this case the target is network and computers), so he has to pay the price of whatever he did, but i think 37 months in prison is too harsh, he should be given 18 months in prison and a limited amount of fine.