Advertisement
To print: Select File and then Print from your browser's menu
-------------------------------------------------------------- This story was printed from ZDNet Australia. --------------------------------------------------------------
New MyDoom offers 'how to' details

By Dan Ilett, ZDNet UK
September 17, 2004
URL: http://www.zdnet.com.au/news/security/soa/New-MyDoom-offers-how-to-details/0,130061744,139159708,00.htm


A new version of the Internet worm MyDoom includes a photo of suspected Netsky worm writer Sven Jaschan and a description of the worm itself.

In the latest bizarre twist in the worm's development, authors included a detailed account of what MyDoom.Y does and how it works. This particular tactic has left antivirus vendors baffled.

"It's like they wanted to help us, which is weird," said Mikko Hypponen, director of antivirus research at F-Secure. "The photo could be making the point that MyDoom has won the virus war. But then again, Netsky was much more widespread than MyDoom."

The description of the virus included two signatures, Nemog and Zincite, which Hyponnen said he had seen before in back-door code. "We don't know whether they have been planted or not," he said.

Jaschan, who was recently charged by German police for creating several variants of the Netsky virus, is believed to be responsible for 70 percent of the virus infections that plagued Internet users in 2004.

Several new versions of MyDoom have popped up recently, prompting speculation among security experts that worm writers may be trying to improve on the earlier design of the potent Internet interloper. One version even included an apparent job request.

ZDNet UK's Dan Ilett reported from London. For more coverage from ZDNet UK, click here.

Copyright © 2009 CBS Interactive, a CBS Company. All Rights Reserved.
ZDNET is a registered service mark of CBS Interactive. ZDNET Logo is a service mark of CBS Interactive.