Mydoom

RobRob Unknown Enemy Join Date: 2002-01-24 Member: 25Members, NS1 Playtester
<div class="IPBDescription">A new email worm</div> Read up here:

<a href='http://www.sophos.com/virusinfo/analyses/w32mydooma.html' target='_blank'>http://www.sophos.com/virusinfo/analyses/w32mydooma.html</a>

A general reminder to those who may not know: you should NEVER open any attachment you don't expect. This one was painfully obvious to me when I saw 6 different emails with the title "Hello" and the same attachment.

Please use sense when downloading attachments, browsing, or whatever you do online.

Comments

  • ZigZig ...I am Captain Planet&#33; Join Date: 2002-10-23 Member: 1576Members
    who could have forseen the mutilation of this friendly greeting phrase..


    "hello" =\
  • ThansalThansal The New Scum Join Date: 2002-08-22 Member: 1215Members, Constellation
    more warning:

    This one is actualy alot better then the last one (a friken calculater??)

    possible titles also include things that sound technical (maildelivery subroutine and such)

    also the attachments are less stupid looksing (they are tossed in a few different ones)

    Also it was ussing kazaa
    names:
    Winamp5, icq2004-final, Activation_Crack, Strip-gril-2.0bdcom_patches, RootkitXP, Officecrack and Nuke2004

    hmmm....

    suposedly Kazaa has a good antivirus program built in now (I wouldn't trust it though <!--emo&:p--><img src='http://www.unknownworlds.com/forums/html/emoticons/tounge.gif' border='0' style='vertical-align:middle' alt='tounge.gif' /><!--endemo-->)
  • Vulgar_MenaceVulgar_Menace Join Date: 2003-10-29 Member: 22118Members
    Dont trust any virus protection with the word "lite" built right it.
  • HairyNevusHairyNevus Join Date: 2004-01-29 Member: 25694Members
    here's a site about it: <a href='http://securityresponse.symantec.com/avcenter/venc/data/w32.mydoom.b@mm.html' target='_blank'>http://securityresponse.symantec.com/avcen...ydoom.b@mm.html</a> . if u have norton, you can update to protect. if not, they give you a way to remove it at the bottom. and if your worried about spyware, this is probably the best free remover out there: <a href='http://www.pcworld.com/downloads/file_description/0,fid,22262,00.asp' target='_blank'>http://www.pcworld.com/downloads/file_desc...id,22262,00.asp</a> . after i ran it i got less spam and my internet wasn't all bogged down.
  • CreepieCreepie Join Date: 2003-02-19 Member: 13734Members
    <!--QuoteBegin-Vulgar Menace+Jan 29 2004, 06:41 PM--></div><table border='0' align='center' width='95%' cellpadding='3' cellspacing='1'><tr><td><b>QUOTE</b> (Vulgar Menace @ Jan 29 2004, 06:41 PM)</td></tr><tr><td id='QUOTE'><!--QuoteEBegin--> Dont trust any virus protection with the word "lite" built right it. <!--QuoteEnd--> </td></tr></table><div class='postcolor'> <!--QuoteEEnd-->
    "lite": a word that is very close to another that ends with "-ite".
  • chis1chis1 Join Date: 2004-01-13 Member: 25281Members
    OH

    so im not the only one <!--emo&:D--><img src='http://www.unknownworlds.com/forums/html//emoticons/biggrin.gif' border='0' style='vertical-align:middle' alt='biggrin.gif' /><!--endemo-->

    ive been getting about 10 a day

    I just delete them, never knew everyone else was getting them <!--emo&:p--><img src='http://www.unknownworlds.com/forums/html//emoticons/tounge.gif' border='0' style='vertical-align:middle' alt='tounge.gif' /><!--endemo-->
  • BeastBeast Armonkyi Join Date: 2003-04-21 Member: 15731Members, Constellation
    I heard something about this virus affecting the microsoft servers, shutting down hotmail or something? anyone care to explain maybe?o.o
  • That_Annoying_KidThat_Annoying_Kid Sire of Titles Join Date: 2003-03-01 Member: 14175Members, Constellation
    I think it rapped sco pretty badly, which is what it was intended to do
  • chis1chis1 Join Date: 2004-01-13 Member: 25281Members
    reading about it makes me think "god that sounds amazing at what it can do"

    but ofcourse its evil <!--emo&:p--><img src='http://www.unknownworlds.com/forums/html//emoticons/tounge.gif' border='0' style='vertical-align:middle' alt='tounge.gif' /><!--endemo-->
  • SupernornSupernorn Best. Picture. Ever. Made. Ever. Join Date: 2002-11-07 Member: 7608Members, Constellation
    Looks Like my Spam Filter owned MyDoom, and Sent me an E-Mail telling me about it:

    <!--QuoteBegin--></div><table border='0' align='center' width='95%' cellpadding='3' cellspacing='1'><tr><td><b>QUOTE</b> </td></tr><tr><td id='QUOTE'><!--QuoteEBegin-->

    Greetings!

    We found an email in your mailbox that contained what appears to be a virus. Here are the details:

    Email sender: albert_so@terra.es [this is unchecked and may be bogus]
    Email subject: Hello
    Virus: W32/MyDoom-A
    Location: message.zip

    We recommend you notify the sender (if known) and ask them to re-send the email after it has been disinfected, if it was legitimate.

    Best regards
    The EMF team

    PS: this message was auto-generated.

    <!--QuoteEnd--></td></tr></table><div class='postcolor'><!--QuoteEEnd--> <!--emo&:D--><img src='http://www.unknownworlds.com/forums/html//emoticons/biggrin.gif' border='0' style='vertical-align:middle' alt='biggrin.gif' /><!--endemo-->
  • SuperTeflonSuperTeflon Join Date: 2003-12-31 Member: 24893Banned
    <!--QuoteBegin-_Creep_+Feb 3 2004, 07:30 PM--></div><table border='0' align='center' width='95%' cellpadding='3' cellspacing='1'><tr><td><b>QUOTE</b> (_Creep_ @ Feb 3 2004, 07:30 PM)</td></tr><tr><td id='QUOTE'><!--QuoteEBegin--> <!--QuoteBegin-Vulgar Menace+Jan 29 2004, 06:41 PM--></div><table border='0' align='center' width='95%' cellpadding='3' cellspacing='1'><tr><td><b>QUOTE</b> (Vulgar Menace @ Jan 29 2004, 06:41 PM)</td></tr><tr><td id='QUOTE'><!--QuoteEBegin--> Dont trust any virus protection with the word "lite" built right it. <!--QuoteEnd--></td></tr></table><div class='postcolor'><!--QuoteEEnd-->
    "lite": a word that is very close to another that ends with "-ite". <!--QuoteEnd--> </td></tr></table><div class='postcolor'> <!--QuoteEEnd-->
    lite could be l1t3, which is similar to l33t, so therefor kazaa virus protection is l33t.
  • Vulgar_MenaceVulgar_Menace Join Date: 2003-10-29 Member: 22118Members
    Theres an oxymoron for you..
  • DemiguiseDemiguise Marks Servers Reg Join Date: 2004-01-19 Member: 25462Members
    did you know that kazzaa is spyware?
    Its main file is a spy program that basically tells everyone who wants to know, whats on your hard-drive and such.
    If you get ad-adware run it a couple times and it will pick it up i think... That is what happened to me....
  • Vulgar_MenaceVulgar_Menace Join Date: 2003-10-29 Member: 22118Members
    I think that its safe to say that everyone knoes that Kazza is spyware.
  • ParaseticLifeFormParaseticLifeForm Join Date: 2003-07-23 Member: 18384Members
    edited February 2004
    theres are reason i use winmx. Dont use iMesh either it gave my cusion a virus in 3 weeks
  • Head_like_a_HoleHead_like_a_Hole Join Date: 2004-02-12 Member: 26478Members
    edited February 2004
    <!--QuoteBegin-Demiguise+Feb 8 2004, 04:34 AM--></div><table border='0' align='center' width='95%' cellpadding='3' cellspacing='1'><tr><td><b>QUOTE</b> (Demiguise @ Feb 8 2004, 04:34 AM)</td></tr><tr><td id='QUOTE'><!--QuoteEBegin--> did you know that kazzaa is spyware?
    Its main file is a spy program that basically tells everyone who wants to know, whats on your hard-drive and such.
    If you get ad-adware run it a couple times and it will pick it up i think... That is what happened to me.... <!--QuoteEnd--></td></tr></table><div class='postcolor'><!--QuoteEEnd-->
    well that's wher ei got confused.

    the denoune lite, but kaza-lite is acutly better. no spyware. or virus detection....

    <a href='http://gamecache.net/quizes/ns/' target='_blank'><img src='http://gamecache.net/quizes/ns/images/vet.jpg' border='0' alt='user posted image' /></a>
  • Nemesis_ZeroNemesis_Zero Old European Join Date: 2002-01-25 Member: 75Members, Retired Developer, NS1 Playtester, Constellation
    MyDOOM was set to deactivate on Feb 12th, so I guess I can safely <span style='color:red'>***lock***</span> and <span style='color:white'>***unsticky***</span>.
This discussion has been closed.