Golfing Internet worms

Hi,

Golf is not practised only in Perl circles. It has become the pastime
of virus and worm writers, too:

    Internet Worm Name       Risk Assessment
    W32/SQLSlammer.worm      Corporate User: High          
                             Home User     : Low-Profiled 
                                                                 
    Internet Worm Information                      
    Discovery Date:       01/25/2003              
    Origin:               Unknown                
    Length:               376 byte data stream  
    Type:                 Internet Worm        
    SubType:              SQL worm            

For more details see: http://vil.nai.com/vil/content/v_99992.htm

Here is an excerpt of NAI's description (they acknowledge the golfing
effort, too):

    This virus exists only in memory of unpatched Microsoft SQL
    servers. Its purpose is simply to spread from one system
    to another and it does not carry a destructive payload.

    [...]

    The malformed packet is only 376 bytes long (which is the full
    worm!) and carries the following strings:
    "h.dllhel32hkernQhounthickChGetTf", "hws2", "Qhsockf", "toQhsend".

    The minimal risk for this worm has been set to Low-Profile
    because of the media attention at CNN.

    The MD5 checksum of the worm (376 bytes) is
    A0AA4A74B70CBCA5A03960DF1A3DC878.

When will we see a virus that's shorter than its MD5 hash?

-- 
 Philippe "BooK" Bruhat

 None suffer so much in a war as those who strive to end it.
                                    (Moral from Groo The Wanderer #51 (Epic))