[Blake]

Security experts issued fresh alerts over a new, file-deleting version of the MyDoom e-mail worm that was targeting computer users with greater ferocity on Wednesday.
The new outbreak, known as MyDoom.F, emerged late last week and has been gathering steam ever since.

The virus is programmed to infect personal computers and use them to unleash a crippling digital barrage known as a denial-of-service attack on select Web sites belonging to Microsoft Corp. and the Recording Industry Association of America (RIAA).

The attacks failed to bring down the sites, though access to the Web site for the RIAA was hampered slightly on Wednesday, security firms reported. The RIAA, a lobbying group for the music industry, has drawn the ire of computer users since it began suing American online song swappers last year.

While it was not spreading as fast as its MyDoom predecessors nor as rapidly as last week's Netsky.B outbreak, MyDoom.F is considered a growing risk as it deletes random Microsoft Word and Excel files, plus photos and movies stored on an infected computer.

"MyDoom.F has been picking up pace since Monday and Tuesday," said Mikko Hypponen, manager of Finnish anti-virus research firm F-Secure. "The disturbing thing is that it has a destructive payload. We haven't seen a destructive virus like this in a while," he said. more>>

[Logan]

i don't know, all the work the VXers put into their creations... i think they deserve to cause at least SOME havok.. even though i totally don't agree with them...

as a kind of update... this virus is now old news.. it won't be forgotten anytime soon though...

[phase]

This version just need to land in your email box and your screwed. It also travels in zip files via email. Blocking all zip files coming in is how we defended it.

I must say that I detest these worms and the trouble that they may sysadmins go through. But you almost have to say "kudos" because these guys really were thinking out of the box on this one. But in no way do I agree with what they are doing.


The only sure way to defend it is block all attachments, which stinks but works.

[Logan]

oh well, people have to realize that there's other ways to transfer files...

geocities is my favorite way, never failed for me! (meaning host it on some free webservice).. very nice

[gman24]

I really see no point in random destructive packages. What is the point and what's being accomplished. You destroy peoples documents, possibly something that may very important to them.

I would think with the intellegence (I'll assume coding knowlege) would come at least some maturity.

Symantec source:
"Searches for files that have the extensions .mdb, .doc, .xls, .sav, .jpg, .avi, and .bmp, and may delete them."

[Alex Trust]

Quote

"Searches for files that have the extensions .mdb, .doc, .xls, .sav, .jpg, .avi, and .bmp, and may delete them."

gsus that's sick how useless why the (filtered) would you delete those files man i hate these programmers :angry:

[Logan]

if he was REALLY mean, he would of deleted .mpg, .mp3 (OH NO!!!), .exe, .bat, .html, .pdf, .txt, and alot of others ;)

[TRi]

Damnit, shame on these kiddies thinking they are the greatest just because they make some lame worm, which annoys the normal pc user and other victims.

Making a worm is fun, spreading too, but making a worm which really harms other user's computers is really dishonorable. :angry:

In that case im happy that my fw filters these virii...

[Logan]

kiddies? if i remember correctly, my doom is in ASM... i don't know any kiddie that can script in ASM...

yeah, it's dishonorable, but some of these guys are losers and have nothing better to do than annoy (and destroy) others' property... whatever, they'll go to hell, so i don't care

[TRi]

Ok, you're right, not kiddies related to experience but kiddies related to honor and respect. Hope that's understandable now ;)