
	Where results make sense

Topic: Mydoom

	Mydoom - Wikipedia, the free encyclopedia
		Mydoom was named by Craig Schmugar, an employee of computer security firm McAfee and one of the earliest discoverers of the worm.
		Mydoom avoids targeting e-mail addresses at certain universities, such as Rutgers, MIT, Stanford and UC Berkeley, as well as certain companies such as Microsoft and Symantec.
		Although Mydoom's denial of service attack was scheduled to begin on 1 February 2004, SCO Group's website goes offline briefly in the hours after the worm is first released.
	en.wikipedia.org /wiki/Mydoom (1349 words)

	MyDoom (Site not responding. Last check: 2007-10-07)
		The MyDoom vandals are mass mailing worms that cause a massive amount of emails to be sent from infected machines and strain mail servers around the world.
		MyDoom will send itself to a large list of recipients and may spoof the sender's information to appear as if they were sent from someone the recipient knows.
		MyDoom spoofs the sender's address and may appear as a legitimate email delivery error message with an attached text file.
	www.aladdin.com /esafe/MyDoom (980 words)

	PCWorld.com - Mydoom Sets Speed Records
		Mydoom, a new computer virus spreading by e-mail, is breaking records for new infections, antivirus vendors and security companies say.
		Mydoom's authors may have been counting on the fact that people trust the authenticity of computer generated messages more than those purporting to come from other humans, Sunner says.
		While Mydoom has shattered Sobig.F records, in many ways the two viruses are the same, antivirus experts agree.
	www.pcworld.com /news/article/0,aid,114461,00.asp (592 words)

	CBC News - Viewpoint: Patchen Barss (Site not responding. Last check: 2007-10-07)
		Also known as Novarg, the MyDoom virus is reproducing at up to 1,000 times a minute, clogging servers, slowing down regular communication, and generally making life more difficult and expensive.
		MyDoom arrives disguised with an innocuous subject line, a return address that will be familiar to the recipient, and a credible message suggesting it's harmless to open the attachment.
		Several reports suggest the creator of MyDoom was angry at the Utah-based SCO Group Inc. This software company claims copyright on the Unix operating system, and in the past year, it has been aggressively litigious toward companies that use an open-source offshoot of Unix called Linux.
	www.cbc.ca /news/viewpoint/vp_barss/20040127.html (1105 words)

	ISS X-Force Database: mydoom-detected(14958): MyDoom has been detected (Site not responding. Last check: 2007-10-07)
		MyDoom spoofs the "From" address to confuse victims as to the source of the virus.
		MyDoom spreads as an email attachment that is either in an executable or zip archive format.
		MyDoom may open a backdoor on port 3127 or port 3198, which could allow a remote attacker to launch further attacks against infected systems.
	xforce.iss.net /xforce/xfdb/14958 (343 words)

	MyDoom - worst yet to come - www.theage.com.au
		The MyDoom worm wreaked more havoc today after becoming the biggest Internet virus ever - but the emergence of a new strain means the worst damage may be yet to come.
		MyDoom, which clogged the Internet with more than 100 million infected e-mails in its first 36 hours, continued to multiply, Finland's F-Secure said.
		Faulkner said it is possible that one strain of Mydoom contained a so-called keylogger, which enables a hacker to obtain passwords for financial sites to gain access.
	www.theage.com.au /articles/2004/01/29/1075088122616.html?from=top5 (755 words)

	F-Secure Computer Virus Information Pages: Mydoom
		A new minor variant of Mydoom was found on 10th of February 2004.
		F-Secure is upgrading the Mydoom (Novarg) worm to Level 1 because of increased infection reports around the world.
		Mydoom is a worm that spreads over email and Kazaa p2p network.
	www.f-secure.com /v-descs/novarg.shtml (1040 words)

	InformationWeek > Security > Hackers Target Systems Infected By MyDoom > January 29, 2004
		MyDoom, which began spreading on Monday, continues to show signs of slowing, according to some security analysts--but not all.
		MyDoom had broken records once held by Sobig to become the fastest-spreading worm ever, several security and messaging filtering firms have said.
		That may change, and quickly, if MyDoom follows the pattern of other big-time exploits such as last year's Slammer, and even earlier vulnerabilities created by worms such as Nimda and Code Red, all of which were rapidly supported by tools that eliminated the need for an attacker to have a high level of technical expertise.
	informationweek.com /story/showArticle.jhtml?articleID=17501941 (1038 words)

	Mydoom threat still high; Microsoft offers reward - Security - MSNBC.com
		However, antivirus experts say that while Mydoom generated more e-mail traffic, Melissa and LoveLetter had greater impact on corporate operations, since few companies were forced to turn off all their e-mail this time around.
		Mydoom is effective because it arrives posing as a harmless text file containing an e-mail message.
		It often claims to be from a colleague or friend and offers the believable explanation that the original message had to be translated into a plain-text file for delivery. The attachment often displays the notepad icon.
	www.msnbc.msn.com /id/4065701 (1265 words)

	MyDoom: Prevention and cure - ZDNet UK Insight (Site not responding. Last check: 2007-10-07)
		MyDoom is a mass-mailing worm that masquerades as a test message.
		MyDoom (w32.mydoom@mm, also known as Novarg, Shimgapi, Shimg, and MiMail.r) takes advantage of the ZIP file format's ability to pass through email filters.
		MyDoom is known to open Windows Notepad and display garbage text; it is also thought to be flooding Sco.com with a denial-of-service attack.
	www.zdnet.co.uk /insight/internet/security/0,39020457,39143766,00.htm (431 words)

	Security \| A Complete Look At Mydoom \| Small Biz Pipeline
		Mydoom's success at forcing software company SCO Group Inc. to take down its Web site, despite knowing days in advance that the virus would launch a denial of service attack over the weekend, demonstrates that no company can necessarily withstand an attack of this magnitude.
		The Mydoom variant that joined the original virus in raising havoc on the Internet this week contains a cryptic message in which the author appears to apologize for the malicious code.
		As the Mydoom worm continues to race through the Internet, security experts are increasingly troubled by why the year's biggest attack spread so quickly.
	www.smallbizpipeline.com /trends/17501832 (717 words)

	ZDNet AnchorDesk: MyDoom: How it became the fastest worm ever
		The author of MyDoom (which gets its name from a misspelling in the code for "my doomain," hence "MyDoom") crafted basic messages that looked like they could be legitimate e-mails.
		Also, because MyDoom used the common Zip file format, it was able to sneak through most corporate e-mail gateway filters in the first few hours of the attack.
		What it means is that subsequent variations of MyDoom won't have to entice users to open its messages; it'll already have a base of several thousand infected computers from which to broadcast itself the next time around.
	reviews-zdnet.com.com /AnchorDesk/4520-7297_16-5119550.html (963 words)

	BBC NEWS \| Technology \| Q&A: The Mydoom virus
		Mydoom is the latest in a long line of viruses or malicious programs that exploit Microsoft products.
		Mydoom is also known as Novarg or Mimail-R. You may have seen e-mail messages turning up in your inbox bearing its signature subject lines (see box below).
		The original Mydoom worm targets the website of software firm SCO and the new version is programmed to bombard the Microsoft website with bogus data early next month.
	news.bbc.co.uk /2/hi/technology/3441525.stm (763 words)

	G4 - Feature - Doom Arrives as Email Attachment
		MyDoom, or Novarg virus raises alarm as first major threat of 2004.
		It's a variant of a familiar foe, the Mimail worm that wreaked havoc in 2003.
		Antivirus agencies are now warning that the worm may trigger a distributed denial-of-service attack aimed at SCO, a Utah software company embroiled in a bitter legal dispute over ownership of Linux.
	www.g4tv.com /techtvvault/features/46988/Doom_Arrives_as_Email_Attachment.html (498 words)

	MyDoom is the worst virus ever \| The Register
		MyDoom spoofs the 'from' field in infectious emails, but AV products are still incapable of recognising this: hence the tide of confusing messages.
		This is, as far as we are aware, the first time that virus writers have used this stealth-spreading approach, which further exposes the shortcomings of the scanner model in fighting rapidly spreading computer viruses.
		MyDoom is programmed to packet SCO’s web site from infected machines starting February 1 and is programmed to stop spreading on February 12.
	www.theregister.co.uk /2004/01/28/mydoom_is_the_worst_virus (463 words)

	Microsoft Monitor: MyDoom SoMuchBigger (Site not responding. Last check: 2007-10-07)
		The sophistication of the virus is a reminder that hackers and virus writers should be treated as criminals and not noble antisocialists.
		MyDoom outbreak may turn out to be one of the more sophisticated viruses in recent memory.
		Antivirus companies are still investigating MyDoom, but what they have found so far indicates the worm will be a tough clean-up.
	www.microsoftmonitor.com /archives/002217.html (597 words)

	MyDoom virus declared worst ever \| Tech News on ZDNet
		The MyDoom e-mail virus is only a few days old and still growing, but at least one security firm is ready to crown it as the worst ever.
		MyDoom raced onto the Internet on Monday, quickly clogging e-mail servers, as it propagated itself with millions of messages laden with malicious software code.
		Infection rates were averaging one out of every 10 messages for large customers and one out of three for small customers, indicating that the virus concentrates on PCs in the home, where security precautions are often less stringent than in the office.
	news.zdnet.com /2100-1009_22-5149764.html (739 words)

	CNN.com - Security firm: MyDoom worm fastest yet - Jan. 28, 2004
		It often arrives in a zip archive of 22,528 bytes and is represented by a text icon even though it is an executable file, which are renowned for carrying viruses.
		MyDoom is a mass-mailing worm that attempts to spread via e-mail and by copying itself to any available shared directories used by Web sites such as Kazaa.
		Web-monitoring firm Keynote said MyDoom slowed Internet performance significantly Monday afternoon, but by Wednesday many companies, made wiser by the SoBig worm, had activated new security plans to protect their computers, security analysts said.
	www.cnn.com /2004/TECH/internet/01/28/mydoom.spreadwed (915 words)

	MyDoom virus worms its way into internet infamy - www.theage.com.au
		MyDoom arrives as an email with a word such as "test" in its subject line and a message in the text area saying an email has failed and has been attached.
		If the attachment is opened, the worm invades the computer, harvesting names from the address book and opening a communications port that could allow hackers to steal information from the hard drive.
		Sean Richmond, technical support manager for Sophos, said yesterday that the MyDoom worm turned an infected computer into "a zombie", which could be programmed without the owner's knowledge to attack the website of US IT company SCO Group, which is in dispute with the Linux community.
	www.theage.com.au /articles/2004/01/28/1075088091365.html (373 words)

	MyDoom.C Analysis - LURHQ
		Update: Most AV firms are now calling this variant "Doomjuice" due to substantial differences from the original MyDoom, most notably the fact that it is not a mass-mailer.
		Naming conventions aside, MyDoom.C/Doomjuice is definitely an offshoot of the original MyDoom code and is likely by the same author.
		This may be an indication that the author is discontinuing development of MyDoom, instead passing it along to other miscreants to finish.
	www.lurhq.com /mydoom-c.html (703 words)

	BBC NEWS \| Technology \| Mydoom virus 'biggest in months'
		"Mydoom has now surpassed this, infecting an incredible one in every 12 e-mails, and so the impact of this latest virus may be very serious for affected e-mail users."
		"Mydoom works by harvesting e-mail addresses from the infected computer, and randomly chooses from these the address identified as the next sender," explained Mr Sunner.
		"Mydoom can pose as a technical-sounding message, claiming that the e-mail body has been put in an attached file," said Graham Cluley from security firm Sophos.
	news.bbc.co.uk /1/hi/technology/3432639.stm (695 words)

	New version of Mydoom worm identified - Nov. 9, 2004
		The vulnerability was discovered and made public by two hackers with aliases "ned" and "SkyLined" on Friday, and only four days later a worm exploiting the weakness was developed and set loose, several virus-trackers reported.
		Microsoft Corp. (Research), the maker of Explorer, the dominant Internet browser, was expected to issue its monthly batch of security patches later Tuesday, but the software maker could not immediately say if a patch for the new worm would be part of it.
		Microsoft said the worm is a variant of Mydoom and that it is investigating the threat the worm poses.
	money.cnn.com /2004/11/09/technology/mydoom (444 words)

	USATODAY.com - E-mail worm, hoax spread quickly across Web (Site not responding. Last check: 2007-10-07)
		SEATTLE — MyDoom, the latest worm to infect computers over the Internet, has become the fastest-spreading attack since last summer's twin attacks by the Blaster worm and SoBig virus, computer security experts said Tuesday.
		"This one (MyDoom) is different and much more troubling, since it harms not just our company, but also damages the systems and productivity of a large number of other companies and organizations around the world," Darl McBride, SCO's chief executive, said in a statement.
		MyDoom also mails itself out to addresses in the victim's computer and is clogging mail servers and degrading network performance at companies, experts said.
	www.usatoday.com /tech/news/computersecurity/2004-01-27-mydoom-virus_x.htm (794 words)

	'Mydoom' Computer Infections Still Climbing (TechNews.com)
		Reported infections caused by the "Mydoom" e-mail worm rose as employees returned to work Tuesday morning and opened attachments that contained the virus.
		Security researchers attributed the high infection rate to the deceptive nature of the messages, which appear to be error messages generated by the employee's corporate network.
		A computer becomes infected with Mydoom only after the attachment is opened.
	www.washingtonpost.com /wp-dyn/articles/A53096-2004Jan27.html (479 words)

	CNN.com - MyDoom worm spreads as attack countdown begins - Jan. 29, 2004
		Instead, MyDoom is designed to entice the recipient of an e-mail to open an attachment with an.exe,.scr,.zip or.pif extension.
		For the ordinary computer user, MyDoom's toll will be measured in bounced e-mails and an inability at times to enter your inbox as ISPs seek to filter out bogus traffic.
		Some security experts theorized that the MyDoom variants were written by the same individual or group, but had no solid clues on their whereabouts.
	edition.cnn.com /2004/TECH/internet/01/29/mydoom.future.reut (756 words)

	Wired News: MyDoom Spawns More Potent Variant
		But when MyDoom, versions A and B, commences its expected 12-day denial-of-service attacks against Microsoft and SCO on Super Bowl Sunday, there could be a noticeable impact on overall Internet performance, Keynote analysts warned.
		Besides hoping that the majority of infected users purge their machine of MyDoom, there is little that either Microsoft or SCO can do to avoid the attacks, which are intended to overwhelm their servers.
		If that application is found, MyDoom will copy itself to the folder in which Kazaa users store files that they want to share.
	www.wired.com /news/infostructure/0,1377,62082,00.html (845 words)

Try your search on: Qwika (all wikis)