New Virus email MyDoom Variant

Spadata ^ | 050730

[steplock]

A new variant of the "MyDoom" virus just went out - I received one and it was NOT DETECTED since it is in zip/compressed file format!

CAREFUL!! If you get an email like below, simply delete and do not open the attachment!

If you are a COX-INTERNET customer, you have a higher chance of being infected since it is originating from their services. of course - they deny responsibility.

here is a copy of the message text:

-----Original Message----- From: abonds@cox-internet.com [mailto:abonds@cox-internet.com]

Sent: Friday, July 30, 2004 1:08 PM

To: xxxx@spadata.com

Subject: Returned mail: see transcript for details

Dear user xxxxx@spadata.com,

We have found that your account has been used to send a huge amount of junk email messages during this week. Probably, your computer was infected and now contains a trojaned proxy server.

Please follow our instruction in order to keep your computer safe.

Virtually yours, spadata.com user support team.

I suggest a quick trip to Trend Micro (my personal favorite) to be sure you're not infected if you are a COX-INTERNET user or you know of a COX-INTERNET user

for a thorough test / clean for free go to:

http://housecall.antivirus.com/housecall/start_corp.asp

It will take about 30 minutes total. A bit longer if you are on dial up.

[steplock]

They have another email version from COX-INTERNET now!

[steplock]

Virus Removal & Information


If you have opened an attachment of a suspect email or believe your computer has this virus, you may visit one of the following websites which contain more information and removal instructions:

http://us.mcafee.com/virusInfo/default.asp?id=description&virus_k=127033

http://securityresponse.symantec.com/avcenter/venc/data/w32.mydoom@mm.removal.tool.html">http://securityresponse.symantec.com/avcenter/venc/data/w32.mydoom@mm.removal.tool.html

http://www.sophos.com/support/disinfection/mydooma.html

http://www.trendmicro.com/vinfo/virusencyclo/default.asp?search=mydoom


The link below will take you to a free McAfee anti-virus removal tool called 'AVERT Stinger' that should be able to locate and remove this infection:

http://us.mcafee.com/virusInfo/default.asp?id=stinger

[sockmonkey]

I have NIS, but today I went to:
http://secunia.com/multiple_browsers_frame_injection_vulnerability_test/ and found out my browser could display things I would think are legitimate things from trusted sites which are not...
Time to switch to another browser? Are we all doomed (or just me)?

[Renfield]

bump

[laotzu]

Ya know, if you bought a Ford you wouldn't be having this problem.
(a little Mac lingo there)

[sneakers]

I got that one. Norton took care of it.

[El Gran Salseron]

Nah, we're not all doomed. Just you. :-)

[El Gran Salseron]

Well, if you had road runner you would not have to worry because road runner scans all emails and catches all of that stuff before it gets to my computer. heh

[cashion]

Looks like W32/Mydoom.o@MM to me..

[LouisWu]

ping for later read

[backhoe]

The link below, while mainly about my adventures with browser hijackers, has links for free firewalls, anti-viruses, online scans, alternatives to IE ( Too many security holes! ) and help forums:

http://www.freerepublic.com/focus/f-news/1168134/posts
Hijacked! New Browser Exploits Plague Web
various sites | 07-09-04 | The Heavy Equipment Guy

[backhoe]

Time to switch to another browser? Are we all doomed (or just me)?

[ irony ]

Naw, it's just you...

[ /irony ]

Seriously, I switched both home machines to Firefox when fighting that nasty hijacker, and haven't looked back. You have to keep IE on your machine since it's hooked into the OS, and certain sites- like MS update- don't like alternative browsers- but except for that, I don't use it anymore.

Some folks like Opera, and there are others in that link I posted. I've had Netscape 7.1, and liked it fine- it has email, an HTML editor, and you can download it free.