New Virus Hits the computers worldwide
agencies, Feb 18, 2005.
A year ago MyDoom virus had caused havoc in the internet worldwide. A year later another variant, definitely more powerful than its sibling, hit the world causing breadkdown of computers with Windows, culling e-mail addresses from search engines, and installing a backdoor that gives the attacker control of systems.
Some are calling it MyDoom.as or MyDoom.au, and even MyDoom.bb -- depending on the anti-virus software vendor. The biggest difference, said experts, is that it's assembled with a different code "packager."
""Like other e-mail worms, it searches your hard drive for addresses, but then it uses the domain names it's found to discover other victims via search engines," said Cluley. "So, if it finds the e-mail address "mickey.mouse@disney.com" on your drive, it then searches Google and perhaps finds Donald Duck and Bambi's addresses, too."
Unlike last summer, however, when Google's (and other search sites') performance suffered because of the large number of searches run by infected machines, it's unlikely it (and others) will be affected by the newest MyDoom.
MyDoom.as/au/bb has common characteristics with other members of the family, including posing as an e-mail system error message, disguising the payload in a variety of file formats (including .zip), and most damaging, depositing a backdoor on the infected PC.
Several anti-virus companies have posted detection and removal tools, including this one from Symantec.
When MyDoom recently had its first "anniversary," experts pegged the worm as a "turning point" and "major milestone" in worm creation, thanks to the for-profit motivation of its writer(s), who are more interested in creating vast armies of compromised machines than gaining 15 minutes of infamy.
agencies
|
|