virus
virus

Virus mobilises Kazaa army against SCO

Mydoom.A mass-mailer scheduled to launch DoS attack on SCO website via P2P network

Robert Jaques and Dinah Greek

A virulent new worm has infected thousands of users across the world within hours of being discovered.

Mydoom.A.worm spreads via email and peer-to-peer network Kazaa, but also leaves port 3127 open to allow malicious hackers to take control of compromised computers.

Advertisement

This virus is also ready to launch a denial of service attack against The SCO Group website on 1 February, according to MessageLabs.

Mark Sunner, chief technology officer at MessageLabs, told vnunet.com that the company expects to intercept over 1.2 million occurrences of the worm.

"The primary intention of Mydoom appears to be a denial of service attack against SCO. We don't know if it has any other intent, but we will be monitoring it," he said.

"It drops a Trojan which gives the potential for something else to happen. In terms of spread, it appears to be following the sun. In contrast with SoBig.F, it has the potential to be bigger."

According to antivirus experts at Panda Software, the ability of MyDoom.A to spread rapidly, as well as the damage it is leaving behind, makes it as serious as last summer's Bugbear and Blaster worms.

McAfee's Avert team said that the infection has already been seen throughout Asia Pacific, Canada, Europe, Japan, Latin America and the US.

Graham Cluley, senior technology consultant at Sophos, said in a statement: "If you launch that file you are potentially putting your data and computer straight into the hands of hackers."

As other countries begin their usual working day, the virus is expected to grow and create more problems.

As with most mass-mailers, MyDoom.A emails itself out as an attachment after being executed. The icon used by the file tries to make it appear as if the attachment is a text file.

It then forwards itself to all the addresses found in the affected computers. It searches email addresses in the computer files with the extensions .htm, .sht, .php, .asp, .dbx, .tbb, .adb, .pl, .wab, .txt.

MyDoom.A uses its own SMTP engine to send itself by email. The message content changes, and may contain the following:

Subject:

Body:

Attached file name:

File extension:

  • Have your say
  • Send to a friend
  • Print
  • Digg
  • Reddit
  • Share

Tags:

Do you agree?

Further reading

Worm mutants spoof Internet Explorer

Alarm bells ring again as Dumaru worm launches bogus Microsoft website

MyDoom

MyDoom.A heads for infection record

Worm hits 15 per cent of global email traffic in first 24 hours

Related whitepapers

Related jobs

Most watched

iPhone

Video Review: iPhone 3GS

We put Apple's latest iPhone through its paces

Xperia X1

Video Review: Sony Ericsson Xperia X1

First Looks Editor Ian Williams gets hands on with the Sony Ericsson Xperia X1

IT white papers

Search white papers

Top categories

Poll

Poll: Summer smartphones

Poll: Summer smartphones

Which smartphone will you be taking to the beach this summer?

View poll results

Advertisement

Advertisement

Newsletter signup

Sign up for our range of FREE newsletters:

Existing User

Newsletter user login:

Enter email address to edit your newsletter preferences

Job of the week

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Hiring now on ComputingCareers:

Related IT jobs

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Spotlight

iPhone

Video Review: iPhone 3GS

We put Apple's latest iPhone through its paces

old computer

Government honours veterans of Bletchley Park at last

Surviving veterans of the code-breaking facility to receive badge of...

Motorola MC55 Enterprise Digital Assistant

Review: Motorola MC55 Enterprise Digital Assistant

A rugged Windows Mobile device for mobile workers

BT

BT promises 1.5m fibre connections by summer 2010

Telco begins major rollout in 69 locations across the UK

Primary Navigation