virus
virus

Virus mobilises Kazaa army against SCO

Mydoom.A mass-mailer scheduled to launch DoS attack on SCO website via P2P network

Robert Jaques and Dinah Greek

A virulent new worm has infected thousands of users across the world within hours of being discovered.

Mydoom.A.worm spreads via email and peer-to-peer network Kazaa, but also leaves port 3127 open to allow malicious hackers to take control of compromised computers.

Advertisement

This virus is also ready to launch a denial of service attack against The SCO Group website on 1 February, according to MessageLabs.

Mark Sunner, chief technology officer at MessageLabs, told vnunet.com that the company expects to intercept over 1.2 million occurrences of the worm.

"The primary intention of Mydoom appears to be a denial of service attack against SCO. We don't know if it has any other intent, but we will be monitoring it," he said.

"It drops a Trojan which gives the potential for something else to happen. In terms of spread, it appears to be following the sun. In contrast with SoBig.F, it has the potential to be bigger."

According to antivirus experts at Panda Software, the ability of MyDoom.A to spread rapidly, as well as the damage it is leaving behind, makes it as serious as last summer's Bugbear and Blaster worms.

McAfee's Avert team said that the infection has already been seen throughout Asia Pacific, Canada, Europe, Japan, Latin America and the US.

Graham Cluley, senior technology consultant at Sophos, said in a statement: "If you launch that file you are potentially putting your data and computer straight into the hands of hackers."

As other countries begin their usual working day, the virus is expected to grow and create more problems.

As with most mass-mailers, MyDoom.A emails itself out as an attachment after being executed. The icon used by the file tries to make it appear as if the attachment is a text file.

It then forwards itself to all the addresses found in the affected computers. It searches email addresses in the computer files with the extensions .htm, .sht, .php, .asp, .dbx, .tbb, .adb, .pl, .wab, .txt.

MyDoom.A uses its own SMTP engine to send itself by email. The message content changes, and may contain the following:

Subject:

Body:

Attached file name:

File extension:

  • Have your say
  • Send to a friend
  • Print
  • Digg
  • Reddit
  • Share

Tags:

Do you agree?

Further reading

Worm mutants spoof Internet Explorer

Alarm bells ring again as Dumaru worm launches bogus Microsoft website

MyDoom

MyDoom.A heads for infection record

Worm hits 15 per cent of global email traffic in first 24 hours

Related whitepapers

Related jobs

Most watched

eu flag

V3.co.uk weekly debrief, 6 Nov 09

This week, Europe decides what to do with illegal file sharers

Intel unveils its micro server platform

Small-enclosure systems take aim at hosting market

Analysis and Reports

Remote access - Three steps to getting connected

3.4 million UK professionals now work from home – is your company equipped?

Cost benefits of a global collaboration network

This white paper is a must read for organisations looking for evidence of the bottom-line benefits of high-definition video and voice communications

Poll

Impact of Information Overload poll

Impact of Information Overload poll

What is the biggest problem your firm faces as a result of the data explosion?

View poll results

Advertisement

White paper library

Keep up to date with the latest products, services and technologies from the world's leading IT companies; IThound.com brings you over 6,000 white papers, case studies and analyst reports.

Advertisement

Newsletter signup

Sign up for our range of FREE newsletters:

Existing User

Newsletter user login:

Enter email address to edit your newsletter preferences

Job of the week

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Hiring now on ComputingCareers:

Related IT jobs

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Advertisement

Spotlight

Alcatel-Lucent logo

Summit: Networks swamped by information overload

Alcatel-Lucent's Neal Tilley talks about how enterprises and carriers can...

EU flag

Breach notification laws get green light

Privacy rights strengthened in Europe

Richard Thomas

Summit: Richard Thomas advises on handling the data deluge

Former Information Commissioner speaks out on government databases and data...

oracle sun

War of words escalates between EU and Oracle

Commission comes out fighting after criticism from Oracle and Washington

Primary Navigation