
02-06-2004, 10:52 AM
|
Registered User
|
Join Date: Oct 2003
Location: Paris - FRANCE
Posts: 176
|
|
Some informations about MyDoom.A (and apply also to MyDoom.B) :
- The virus is transmitted by mail. The subject and the content of the mail is random.
- There is always an attached file of type : .pif .cmd .exe .zip .bat etc... (any dangerous attachement)
- When you open the virus, you'll see a notepad document with random binary characters
When you run the virus, it will open all text, html, etc.. files on your computer (Internet Explorer cache too) and try to send himself to all email addresses found. The "from" and "to" fields are random. If Spark have his email address on many webpages he will have more chances to be in one of the two fields.
I personally got more than 100 copies of MyDoom.A during the first hour of infection. I had to block all mails with .zip, .exe, etc.. files in order to protect me.
It has been reported by some companies that their mail server (managing only one domain name) were getting more than 3000 emails per minute. |
|
|