mydoom worm

[michael9824]

its only a chain letter except it fowards itself 100 times by itself instead of you doing the work. its account for 10% of all wortrhless spam email.

I have been on the internet for years and NEVER got any viruses.

[Goat]

...

What in teh fuck? Might I ask what the point of this post is n00b?

[Starkist]

Mydoom relies on the trusting nature of computer users to spread. (Read that: human stupidity.) It pretends to be an email error message, instructing users to open an attached file. I have gotten several of these, and all the attachments were in .zip format. However they can also come in .scr, .vbs, .exe, .pif, and others.

[Pablo]

If you open an attachment on an email sent by someone you don't know/trust, you deserve what you get. I mean, come on, people.

[Mander]

Originally posted by michael9824
its only a chain letter except it fowards itself 100 times by itself instead of you doing the work. its account for 10% of all wortrhless spam email.

I have been on the internet for years and NEVER got any viruses.

Well then you are very very lucky. I have been infected a few times.

[AtmaWeapon]

Here is document you requested. Spellcheck please if thank you.



Attachment: XXX_Pics.jpg.vbs (http://www.google.com)

[michael9824]

oh no its the google virus.. no way im touching that

[Kirby of Doom]

Originally posted by Pablo
If you open an attachment on an email sent by someone you don't know/trust, you deserve what you get. I mean, come on, people.

Remember, also, not to open unexpected attatchments even from people you do know, since they might have a virus that sends itself to everyone in their address book.

[Ich]

This has been on slashdot for a while.

http://slashdot.org/article.pl?sid=04/01/27/0038234

Gordon got a copy from some random person and I asked him to forward it to me but he sighed and said no. Bastard.

What it does is spreads itself about, and then performs a DDoS attack against www.sco.com.

[Melonhead]

I haven't heard whether or not the DDoS is happening or not, but there was a link on Slashdot to this page:
http://www.math.org.il/newworm-digest1.txt
Quoted from near the bottom:

D'Aloisio Marc observed some things about the DoS attack, and raised some preliminary questions:
-----
Has anyone seen the DOS against SCO actually happen?

I have the new critter in a test environment where we conducted a
preliminary and rudimentary functionality and threat analysis and the
only activity I can get it to perform related to www.sco.com is to
resolve the name. In fact, it seems very unhappy if it cannot resolve
www.sco.com. Once it can, it happily scans local files for anything
that can be construed (very loosely) as a domain and tries to resolve
mail servers based on these. In fact, right now it's trying to resolve
'mx.makewin.rsp'. "Makewin.rsp' is a file referenced in the help files
of my DigitalMars C++ compiler on a test machine, so it's not a very
smart worm. The worm also seems to like to increment the third octet of
the host IP by one and syn to port 25 of that address over and over and
over... I have played with the date, etc, but still no activity directed
toward www.sco.com. It did die after 12 February, but gladly
resurrected when the date was set back prior to that.

I haven't had time to go through a code analysis - that will come later
as time permits.

But then again, that might be a unique situation. Some people have been saying the the DDoS against SCO is just a distraction so that the writers can use the hole opened by the virus to install key-loggers and turn your computer into a spam-zombie. I guess we'll see come February 1st.

[slothman]

Well I got the email but not the virus. It was in the email but I didn't open it of course. I like DOS so maybe I should. DOS isn't an outdated O/S. Wrong DOS, oh well.

[DarkDragon]

My roommate was infected by this virus; he received a message saying his mail was undeliverable, and opened the attachment like the dumbass he is.

[linkofzelda1]

This thing has totally fucked our school. Currently it is trying to send itself into our inboxes at a rate of 15 times per minute. I haven't gotten it, though.

[Starkist]

Originally posted by linkofzelda1
...rate of [I]15 times per minute....

That means you have a lot of idiots at your school.