----- Original Message ----- From: B To: WinTips-Tricks@xxxxxxxxxxxxxxx Sent: Tuesday, January 27, 2004 2:12 PM Subject: [WinTips-Tricks] Mydoom worm spreading rapidly Mydoom worm spreading rapidly JANUARY 26, 2004 ( IDG NEWS SERVICE ) - A new e-mail worm has appeared on the Internet and is spreading rapidly, according to leading antivirus companies. The worm, called W32/Mydoom, surfaced late today and is currently being analyzed by antivirus companies. "This worm is taking off like a rocket, with well over 20,000 interceptions in just 2 hours of it being discovered," Ken Dunham, director of malicious code at iDefense Inc. in Reston, Va., said in a statement. The virus is also being called MiMail.R, Shimg, Novarg and Mydoom, althought it's not certain yet that this code is a variant of the MiMail virus, Dunham said. Mydoom carries varying subjects such as "HELLO" or a blank subject, as well as a variety of messages and attachments. When loaded, it calls up Notepad and displays random characters, while creating a copy of itself and modifying the infected machine's Windows registry to run the code upon start-up. It may open a TCP port to listen for commands from a remote attacker, according to Dunham. "It also attacks sco.com with a DDoS [denial-of-service] attack," said a statement from F-Secure. It can spread by both e-mail and the Kazaa file-sharing system, several antivirus vendors said. Computer Associates International Inc.'s research labs received 11 copies of the new worm almost simultaneously today, indicating a rapidly spreading infection, according to a company spokesman. Network Associates Inc.'s McAfee AVERT antivirus lab was also analyzing copies of the virus. Mydoom appeared to be a "high risk" virus, according to a spokeswoman. b Yahoo! Groups Sponsor ADVERTISEMENT -------------------------------------------------------------------------------- Yahoo! Groups Links a.. To visit your group on the web, go to: http://groups.yahoo.com/group/WinTips-Tricks/ b.. To unsubscribe from this group, send an email to: WinTips-Tricks-unsubscribe@xxxxxxxxxxxxxxx c.. Your use of Yahoo! Groups is subject to the Yahoo! Terms of Service. To unsub or change your email settings: //www.freelists.org/webpage/pctechtalk To access our Archives: http://groups.yahoo.com/group/PCTechTalk/messages/ //www.freelists.org/archives/pctechtalk/ For more info: //www.freelists.org/cgi-bin/list?list_id=pctechtalk