-=PCTechTalk=- Fw: [WinTips-Tricks] Mydoom worm spreading rapidly

  • From: "Lionel." <percy10@xxxxxxxxxxxxxxx>
  • To: <"Undisclosed-Recipient:;"@freelists.org>
  • Date: Tue, 27 Jan 2004 16:09:55 +1100

----- Original Message ----- 
From: B 
To: WinTips-Tricks@xxxxxxxxxxxxxxx 
Sent: Tuesday, January 27, 2004 2:12 PM
Subject: [WinTips-Tricks] Mydoom worm spreading rapidly


Mydoom worm spreading rapidly

JANUARY 26, 2004 ( IDG NEWS SERVICE ) - A new e-mail worm has appeared on
the Internet and is spreading rapidly, according to leading antivirus
companies.

The worm, called W32/Mydoom, surfaced late today and is currently being
analyzed by antivirus companies.

"This worm is taking off like a rocket, with well over 20,000 interceptions
in just 2 hours of it being discovered," Ken Dunham, director of malicious
code at iDefense Inc. in Reston, Va., said in a statement.

The virus is also being called MiMail.R, Shimg, Novarg and Mydoom, althought
it's not certain yet that this code is a variant of the MiMail virus, Dunham
said.

Mydoom carries varying subjects such as "HELLO" or a blank subject, as well
as a variety of messages and attachments. When loaded, it calls up Notepad
and displays random characters, while creating a copy of itself and
modifying the infected machine's Windows registry to run the code upon
start-up. It may open a TCP port to listen for commands from a remote
attacker, according to Dunham.

"It also attacks sco.com with a DDoS [denial-of-service] attack," said a
statement from F-Secure.

It can spread by both e-mail and the Kazaa file-sharing system, several
antivirus vendors said.

Computer Associates International Inc.'s research labs received 11 copies of
the new worm almost simultaneously today, indicating a rapidly spreading
infection, according to a company spokesman.

Network Associates Inc.'s McAfee AVERT antivirus lab was also analyzing
copies of the virus. Mydoom appeared to be a "high risk" virus, according to
a spokeswoman.

b


      Yahoo! Groups Sponsor 
            ADVERTISEMENT
           
     
     


--------------------------------------------------------------------------------
Yahoo! Groups Links

  a.. To visit your group on the web, go to:
  http://groups.yahoo.com/group/WinTips-Tricks/
    
  b.. To unsubscribe from this group, send an email to:
  WinTips-Tricks-unsubscribe@xxxxxxxxxxxxxxx
    
  c.. Your use of Yahoo! Groups is subject to the Yahoo! Terms of Service. 


To unsub or change your email settings:
//www.freelists.org/webpage/pctechtalk

To access our Archives:
http://groups.yahoo.com/group/PCTechTalk/messages/
//www.freelists.org/archives/pctechtalk/

For more info:
//www.freelists.org/cgi-bin/list?list_id=pctechtalk

Other related posts:

  • » -=PCTechTalk=- Fw: [WinTips-Tricks] Mydoom worm spreading rapidly