Page Two

By Dennis Fisher  |  Posted 2004-01-26 Print this article Print

As IT departments continue to battle the MyDoom worm, it likely will come as little comfort that anti-virus companies are nearly unanimous in their opinion that the worm is the fastest-moving virus theyve ever seen. MyDoom is now infecting one in every 12 e-mail messages, worse even than the 1:17 ratio achieved last year by SoBig, according to MessageLabs Inc., a New York-based e-mail security company. The company said Tuesday morning that it has stopped more than 1.2 million copies of MyDoom from nearly 170 countries. Late Monday afternoon, officials at Network Associates said that one of the companys customers was blocking 5,000 copies of the worm every minute.
These numbers are only going to get worse in the next few hours, experts say, as users in the western part of the United States come online and begin opening their e-mails.
In addition to its ability to cripple corporate networks, MyDoom also has the ability to launch a denial-of-service attack and its intended target is The SCO Groups Web site. It seems to be doing that job as well, as the much-maligned companys site was unreachable Tuesday morning. Read "MyDoom More Bad News for SCO." At the same time, MyDoom was hardly the only thing attracting security experts attention Monday. Two other viruses, dubbed Mimail.Q and Dumaru.Y also hit the Web in the last couple of days. Mimail.Q, which debuted Monday, is a polymorphic virus, meaning it changes its characteristics over time. It is a mass-mailer and contains the subject line: "Hi my sweet Nancy." The Mimail.Q message body changes, as does the name of the attachment containing the virus, according to MessageLabs Inc., an e-mail security company based in New York.


Submit a Comment

Loading Comments...
Manage your Newsletters: Login   Register My Newsletters

Rocket Fuel