High-Outbreak Alert W32/Mydoom@MM
26 January 2004, 09:44 PM
#1
Scooby Regular
Thread Starter
Join Date: May 2003
Posts: 1,165
Likes: 0
Received 0 Likes
on
0 Posts
27 January 2004, 03:16 AM
#3
Scooby Regular
Join Date: Apr 2002
Location: living in the Pans !!!
Posts: 1,008
Likes: 0
Received 0 Likes
on
0 Posts
Thought I was going to have a quiet night but not now, office in Holland is now disconnected from the network aswell as office in Melbourne grrrrrrrr
) so bring it on Trending Topics
27 January 2004, 04:52 PM
#9
Moderator
Join Date: Dec 1998
Location: Staffs
Posts: 23,573
Likes: 0
Received 0 Likes
on
0 Posts
A plea to Sys Admins...
Please turn off sending AV notifications to the external sender.
I'm not infected, I didn't e-mail your user, it was wasn't me.
Gawd knows how much extra traffic the AV alerts generate and it's all pointless with spoofed From: fields.
Please turn off sending AV notifications to the external sender.
I'm not infected, I didn't e-mail your user, it was wasn't me.
Gawd knows how much extra traffic the AV alerts generate and it's all pointless with spoofed From: fields.
27 January 2004, 05:20 PM
#11
Scooby Regular
Join Date: Mar 1999
Location: The Great White North
Posts: 25,080
Likes: 0
Received 0 Likes
on
0 Posts
Chris, think that is what my problem in my other thread is, some sysadmin is sending me out, so far 200 plus, notifications. mmm, nice, pity I'm on a mac which won't be effected by this (though I think I can still spread it).
27 January 2004, 05:30 PM
#14
Scooby Regular
Please turn off sending AV notifications to the external sender.
28 January 2004, 08:48 AM
#19
cheers, just seen this on the sophos website, which explains it well (http://www.sophos.com/virusinfo/articles/linuxwars.html) :
MyDoom worm: the latest weapon in the Linux wars? Sophos comments
Virus researchers at Sophos are suggesting that the W32/MyDoom-A worm, currently spreading widely across the internet, may have been deliberately constructed as a weapon in the current round of "Linux wars". The worm launches a distributed denial of service attack against the website of SCO, who have recently courted controversy in the Linux community. Such an attack could potentially knock SCO's website off the internet.
In May 2003 US-based SCO claimed that versions of the Linux open source operating system use code owned by SCO. It has begun offering Linux users a licence to protect them against possible legal action. Leading Linux developers such as Linus Torvalds, the inventor of Linux, have denied that Linux source code contains any SCO intellectual property. SCO has also launched legal actions against IBM, Red Hat, and Novell.
"Rows between SCO and the open source community have been continuing for some months. The MyDoom worm takes the Linux Wars to a new intensity," said Graham Cluley, senior technology consultant for Sophos. "It appears that the author of MyDoom may have taken the war of words from the courtrooms and internet message boards to a new level by unleashing this worm which attacks SCO's website. If we ever get our hands on MyDoom's creator my guess is that he will be an open source sympathiser. Of course, it's the last kind of assistance the open source community would want at this time."
Once the MyDoom worm has infected a PC it attempts to spread via mass-emailing, and turns the computer into a "zombie" which can unwittingly launch the attack against SCO's website between 1 and 12 February.
"All computer users should ensure their computers are adequately protected against these kind of attacks with updated anti-virus and firewall software," continued Cluley.
MyDoom worm: the latest weapon in the Linux wars? Sophos comments
Virus researchers at Sophos are suggesting that the W32/MyDoom-A worm, currently spreading widely across the internet, may have been deliberately constructed as a weapon in the current round of "Linux wars". The worm launches a distributed denial of service attack against the website of SCO, who have recently courted controversy in the Linux community. Such an attack could potentially knock SCO's website off the internet.
In May 2003 US-based SCO claimed that versions of the Linux open source operating system use code owned by SCO. It has begun offering Linux users a licence to protect them against possible legal action. Leading Linux developers such as Linus Torvalds, the inventor of Linux, have denied that Linux source code contains any SCO intellectual property. SCO has also launched legal actions against IBM, Red Hat, and Novell.
"Rows between SCO and the open source community have been continuing for some months. The MyDoom worm takes the Linux Wars to a new intensity," said Graham Cluley, senior technology consultant for Sophos. "It appears that the author of MyDoom may have taken the war of words from the courtrooms and internet message boards to a new level by unleashing this worm which attacks SCO's website. If we ever get our hands on MyDoom's creator my guess is that he will be an open source sympathiser. Of course, it's the last kind of assistance the open source community would want at this time."
Once the MyDoom worm has infected a PC it attempts to spread via mass-emailing, and turns the computer into a "zombie" which can unwittingly launch the attack against SCO's website between 1 and 12 February.
"All computer users should ensure their computers are adequately protected against these kind of attacks with updated anti-virus and firewall software," continued Cluley.
29 January 2004, 10:26 AM
#22
Scooby Senior
Doing my bit to ecourage the disabling of auto responders. http://news.zdnet.co.uk/internet/sec...9143774,00.htm
New variant out yesterday, this one attacks Microsoft. McAfee products detected it before it was composed.
New variant out yesterday, this one attacks Microsoft. McAfee products detected it before it was composed.
29 January 2004, 03:04 PM
#23
Used to work here!!
Join Date: Jun 2000
Location: Peterhead, Scotland
Posts: 1,488
Likes: 0
Received 0 Likes
on
0 Posts
our IT boys tell me that the system has rejected 6000 e-mails in the least 1/2 of them were infected 
They dindn't say why the other 3000 were rejected
They dindn't say why the other 3000 were rejected
29 January 2004, 06:24 PM
#25
Scooby Regular
Join Date: Mar 1999
Location: The Great White North
Posts: 25,080
Likes: 0
Received 0 Likes
on
0 Posts
Well, things are settling down here.
Funny thing is that the PC users have not reported that many alerts from Norton AV, neither have the other mac users, looks like it's me that has been hit the hardest then! lol
I've got a mac, so don't get infected, but recived (marked as junk though) 2000 messages, looking at them, 80 percent were, as per another post, an email virus notification from someone's mail server, of the remaining 20 percent, 5 percent were actually infected messages, the remaing 15 percent were 'mail delivery' errors, again, due to the virus.
Thankfully the email notifcation thing seems to have stopped, as it was getting very silly.
Funny thing is that the PC users have not reported that many alerts from Norton AV, neither have the other mac users, looks like it's me that has been hit the hardest then! lol
I've got a mac, so don't get infected, but recived (marked as junk though) 2000 messages, looking at them, 80 percent were, as per another post, an email virus notification from someone's mail server, of the remaining 20 percent, 5 percent were actually infected messages, the remaing 15 percent were 'mail delivery' errors, again, due to the virus.
Thankfully the email notifcation thing seems to have stopped, as it was getting very silly.
Thread
Thread Starter
Forum
Replies
Last Post
smunns
Dealer and Third Party Supplier Queries
5
14 September 2015 08:08 PM
David_Wallis
Computer & Technology Related
7
13 June 2002 04:32 PM
BigGT3Fan
Computer & Technology Related
4
14 March 2002 11:11 AM