Mydoom Worm (re)Turns
p2pnet.net News:- Mydoom is back and it’s apparently wreaking havoc, using Google & Co to spread.
F-Secure says MyDoom.M, MyDoom.M@mm or MyDoom.O isn’t much different from its predecessors in most of its behaviors and characteristics BUT: it uses search engines to find new victims to infect.
“The Google search engine experienced slowness for a short period of time early today because of the MyDoom virus, which flooded major search engines with automated searches,” F-Secure quotes Google spokesman Nathan Tyler as saying here, going on:
“Once the worm infects a machine, it searches the PC for e-mail addresses and then begins mailing itself out. But it also uses the search engines to find other valid e-mail addresses in the same domains as the ones it finds on the infected machine.
“With thousands of machines estimated to be infected already, this flood of traffic to the search engines appears to be wreaking havoc.”
It was responsible for causing alarm and despondency at SCO, Microsoft and the RIAA, all of which were targets.
At one point, Bill and the Boyz were offering $250,000 for the head of Mydoom’s author.
The ‘O’ variation appeared for the first time Sunday night.
July 27th, 2004 at 3:17 am
a simpleton at my work opened the attachment this morning, and for most of the day our domain was blacklisted from google…there are actually still people out there that open attachments (zip file no less this time) from strange addresses!!