In order to participate in the GunBroker Member forums, you must be logged in with your GunBroker.com account. Click the sign-in button at the top right of the forums page to get connected.

Warning: A new worm!

alledanalledan Member Posts: 19,541
edited February 2004 in General Discussion
People whose computers are infected with the Mydoom virus that has been spreading via e-mail for the past couple of weeks now have one more thing to worry about. A new worm, called "Myjuice" or "Mydoom.c" is attacking infected computers though a backdoor left by the Mydoom virus.

Although technically a new worm, Myjuice is being called a "variant" of Mydoom because it is related. Some antivirus experts speculate that it was probably written by the same person or persons responsible for Mydoom.

Mydoom, which circulated via files attached to email, infected hundreds of thousands of Windows computers over the past couple of weeks. Infected computers that are connected to the Internet could be further infected by Myjuice, which is an opportunistic worm that looks for the backdoor left open by Mydoom.

Computers infected with Myjuice will launch an attack against Microsoft's Web site. Microsoft.com has reportedly experienced some slowdown, though it is still operating. Mydoom.a succeeded in shutting down the SCO Group's web site (www.sco).

Unlike Mydoom and most other worms and viruses, Myjuice does not travel by email. Instead it spreads on its own via the Internet, looking for machines that are open.

If your machine is not infected with Mydoom, you're not vulnerable to this particular worm. Computers that have been inoculated with an up-to-date antivirus program should be OK. You also have some level of protection if your PC or network is protected via a "firewall" that helps filter out programs looking for computers to attack.

If you are infected, you will likely have a file on your machine called intrenat.exe. You can search for such a file using the search command from the Windows Start menu. Regardless of whether you find such a file, you should scan your machine with an up-to-date antivirus program. All the major antivirus programs have features that can update them via the Internet but some require that you go into the program to execute this feature.

A spokesperson from Symantec, a leading antivirus company, says that the worm is not spreading rapidly, but is having some impact. Panda Software calls the worm "extremely dangerous" because it "cannot be detected or viewed by the user via e-mail."



Gun_smokes.gif


Swanton.gif

Comments

  • offerorofferor Member Posts: 8,625 ✭✭
    edited November -1
    I just got a report this morning. Apparently the recommended fix is simply to manually update the virus definitions in your AV software.

    T. Jefferson: "[When doing Constitutional interpretation], let us [go] back to the time when [it] was adopted. [Rather than] invent a meaning [let us] conform to the probable one in which it was passed."

    NRAwethepeople.jpgNRA Life Member fortbutton2.gif
Sign In or Register to comment.