MyDoom E-Mail Worm Spreading Quickly

[bigc73542]

Link to story: http://www.eweek.com/article2/0,1759,1489325,00.asp

MyDoom E-Mail Worm Spreading Quickly
By Dennis Fisher
January 26, 2004

A fast-moving Windows worm known as MyDoom on Monday began spreading at a furious rate on the Internet.

MyDoom arrives via e-mail and has a randomized sender's address and subject line. The body of the message varies, but purports to be an error message, such as: "The message cannot be represented in 7-bit ASCII and has been sent as a binary attachment."

The file attachment is often in a ZIP archive format and can have any one of a number of file extensions, including...

.
.
.

[Paul Wilders]

For those interested in the technical aspect from this nastie:


"We've released a digest of a few of the messages that passed through TH-Research about this new worm.

In it is information about the worm that is not included in the different vendors web pages, and requires a higher understanding of assembly and reverse engineering.

We release it for the purpose of assisting sysadmins and security researchers by making the information available publicly."

www.math.org.il/newworm-digest1.txt

source: SecurityFocus

regards.

paul

[meneer]

Nice article... but does it mean that until february 12 my mailserver will receive 2 virusses per minute, perhaps growing to a larger number?
O well, I'll just create a procmail rule