New MyDoom Worm Has No File, Just a URL, Exploits I.E. Hole 11/10/2004 - 1,686 views, 1 Comment
|
Previous Article « Microsoft Takes Sender I.D.’s Case to the FTC Authentication Summit
Read Next Article » Transferring Domains No Longer Requires Consent - Registrars Advise That You Lock Your Domain
The newest version of MyDoom does not even have a file attached to it, making it look even less suspect, and less worm- or virus-like. Instead, it exploits one of the more recently discovered holes in Internet Explorer, through which clicking on a URL can cause a file to be downloaded to the unsuspecting user’s computer. Once downloaded to the user’s machine, the file executes, harvests email addresses, and starts spewing spam from the user’s computer. The MyDoom email spam is sometimes appearing to come from PayPal, bearing a message which says “Congratulations! PayPal has successfully charged $175 to your credit card. Your order tracking number is A866DEC0, and your item will be shipped within three business days. “To see details please click this link.” Of course, clicking the link causes the program to be downloaded to your machine. Microsoft says that if you are using XP, and you have Service Pack 2 for XP installed, that you are at “reduced risk” (how comforting). You can read more about this here.
|
|
Email the link for this page to a friend! |
Read more:
» Bad Enough it’s an Email Worm, Now MyDoom is Rude, Too
» New Windows MyDoom Worm Searches and Destroys
» Newest AIM Opanki Worm says “LOL Look at Him”
» New Worm Variant Attacking Windows - New Sober Worm Bilingual
For additional similar stories check out our archives on Virus & AntiVirus, Windows, Worms
New MyDoom Worm Has No File, Just a URL, Exploits IE Hole
The newest version of MyDoom does not even have a file attached to it, making it look even less suspect and less worm- or virus-like. Instead, it exploits one of the more recently discovered holes in Internet Explorer, through which…
Trackback by Lockergnome's Windows Fanatics — 11/10/2004 @ 12:12 pm