The latest worm to hit the internet has more than just a cool name; MyDoom (W32/MyDoom-A) may have been purposely spread as a weapon in the current SCO/Linux debarcle, researchers from Sopho suggest.
Designed to infiltrate Windows computers, the MyDoom worm turns the target computer into a 'zombie', which in turn spreads the worm to other machines. Once the machines are infected, they can then be used to launch an attack on the SCO website, between 1st and 12th of February.
The W32/MyDoom-A spreads via email, once received, it reads through address books, and from files with the following extensions: WAB; TXT; HTM; SHT; PHP; ASP; DBX; TBB; ADB; and PL. The worm then creates a file named 'Message' in a folder, and then runs Notepad to display the file.
More information can be found here: http://www.sophos.com/virusinfo/analyses/w32mydooma.html
Source: Sophos
-- ne()phyte
Issue: 111 | April, 2010