MyDoom strikes!

[IMQueen]

I got knocked off MSN Msg about half an hour ago and haven't been able to get back in since. My friend who is knowledgable in these matters says MSN is being struck by MyDoom right now. I wasn't able to get into Hotmail half an hour ago, but am able to now. Hopefully this doesn't last much longer...

[ladie_vennom]

The Mydoom virus is a mass mailing worm, it only affects your computer if u open up am email attachemnt with a file extention bat, .cmd, .exe, .pif, .scr, or .zip. So it can't affect your msn, unless someone sends u an attachment with a virus.

[detn8r]

Actually MyDoom was supposed to attack microsoft.com a few days back. Apparently Microsoft capped it before anything could happen. Like I said in another topic, my contact list went from 32 online to 6 an hour ago. Something's happening.

[ladie_vennom]

Here's your answer from www.neowin.net

A new version of the MyDoom worm appears to be circulating on the Internet and may be responsible for some disruptions to Microsoft Corp.'s Web site Sunday night and Monday morning, researchers say. When it's executed, the new variant, called MyDoom.C, begins scanning for machines listening on TCP port 3127. When it finds available PCs, it copies itself to the new machine's Windows directory under the file name "internat.exe" and also creates a file named "sync-src-1.00.tbz" in several locations.

But unlike the two previous versions of MyDoom, this third variant does not spread via e-mail, nor does it install a backdoor on infected machines or have a kill date, according to an analysis done by Ken Dunham, malicious code manager for iDefense Inc., based in Reston, Va. The worm's code is not encrypted, but it contains all of the source code for MyDoom.A.

[detn8r]

Damn... beat me to it vennom... Well.... weirdly enough I was still the only one I know of actually using MSN Messenger and was not dropped. I was down to 4 contacts which were all using Trillian. But finally it just dropped me.

My internet seems to he pretty slow as well..... maybe this isn't a bad idea anyway.. http://www.microsoft.com/security/se...02_windows.asp

[detn8r]

OK... messenger.msn.com is down. and so is mess.be. I had DXtremz (pluslie admin) speak with a Microsoft official, and he told us that it isn't mydoom.c
Seems to be some sort of an attack, but SOME of their servers are still up. For the time being mess.be has had a server overload because of this, but just be paticent.

[pisces866]

Funny hearing all bills little quarky programs called viruses,like that e-mail about that jdbgmgr.exe that went around last year (which is java debug manager)
WinTasks Process Library



internat - internat.exe - Process Information
Process File: internat or internat.exe
Process Name: Input Locales
Description: Application that provides multi-language support on keyboards for Microsoft Windows programs.
Company: Microsoft Corp.
System Process: Yes
Security Risk ( Virus/Trojan/Worm/Adware/Spyware ): No
Common Errors: N/A

[Jeff]

It's apparently a new variant of MyDoom called 'DoomJuice'. Unlike previous strains, DoomJuice spreads by an open TCP port 3127. Infected computers are attacking Microsoft websites with no programmed shutoff date for the DOS (denial of service) attack.

Please post any updates or comments in this discussion.