View Single Post
  #12  
Old 02-06-2004, 10:52 AM
MagicalTux MagicalTux is offline
Registered User
Join Date: Oct 2003
Location: Paris - FRANCE
Posts: 176
MagicalTux is on a distinguished road
Some informations about MyDoom.A (and apply also to MyDoom.B) :

- The virus is transmitted by mail. The subject and the content of the mail is random.
- There is always an attached file of type : .pif .cmd .exe .zip .bat etc... (any dangerous attachement)
- When you open the virus, you'll see a notepad document with random binary characters

When you run the virus, it will open all text, html, etc.. files on your computer (Internet Explorer cache too) and try to send himself to all email addresses found. The "from" and "to" fields are random. If Spark have his email address on many webpages he will have more chances to be in one of the two fields.

I personally got more than 100 copies of MyDoom.A during the first hour of infection. I had to block all mails with .zip, .exe, etc.. files in order to protect me.

It has been reported by some companies that their mail server (managing only one domain name) were getting more than 3000 emails per minute.
Reply With Quote