Thank you for being a valued part of the CNET community. As of December 1, 2020, the forums are in read-only format. In early 2021, CNET Forums will no longer be available. We are grateful for the participation and advice you have provided to one another over the years.

Thanks,

CNET Support

General discussion

Third Mydoom variant discovered in the wild - Doom.C, SyncZ , DoomJuice or DeadHeat ?

Feb 9, 2004 3:26AM PST

Doom.C parastie worm targets Microsoft.com by using machines infected with the first Mydoom.A virus
Yet another Mydoom variant (or variants) have been found in the wild, according to an alert sent out by iDefense Inc. this morning and by looking at the descriptions of the various reports from the anti-virus companies. Known as Mydoom.C, SyncZ, Doom.C, DoomJuince and DeadHat, the malicious code ( or codes ) appears to be scanning the Internet for systems already infected by the original Mydoom.A worm. When finding a vulnerable machine, it uploads itself via TCP Port 3127, and creates a copy of itself in the Windows System directory as "intrenat.exe" as well as several other files in various Windows directories. This virus, like the Mydoom.B version before it, attempts to find so-called zombie computers to launch a denial-of-service (DoS) attack on Microsoft's Web site. However, it does not appear to seek to e-mail itself to other systems.

More: http://www.securitynewsportal.com/index.shtml

Discussion is locked