Slashdot Mirror


MyDoom Strikes Again

Renegade334 writes "Months after the last attack of MyDoom, MyDoom.AI returns. Like usual it was spread by e-mails with claims to have attachments that contain passwords for adult websites."

54 of 254 comments (clear)

  1. Nice by MPHellwig · · Score: 5, Funny

    The clients that are affected will not dare to tell me.

  2. Actually, it's under control by sebFlyte · · Score: 4, Informative

    It's being reported that thanks to pro-active action from the porn site in question, the problem is under control...

    --
    "Nothing can shake my belief that this world is the fruit of a dark god whose shadow I extend." - Emil Michel Cioran
    1. Re:Actually, it's under control by Mz6 · · Score: 5, Informative

      No... The email contained LINKED images to the website in question. Therefore, all the website had to do was swap the linked images in the email for warnings that this message contians a virus.

      --
      Hmmm.
    2. Re:Actually, it's under control by IainHere · · Score: 3, Funny

      It's being reported [zdnet.co.uk] that thanks to pro-active action from the porn site in question, the problem is under control...

      --
      One swallow does not a summer make.


      Excellent sig. Did you choose it just for this story?

    3. Re:Actually, it's under control by Skidge · · Score: 4, Funny

      Porn to the rescue, yet again! We have that industry to thanks for many things: rapidly accelerating the advance and acceptance of new media technologies, keeping First Amendment lawyers employed, and giving sorority girls a shot at fame during Spring Break, to name a few.

    4. Re:Actually, it's under control by maxwell+demon · · Score: 4, Interesting

      Unless they use a mailer which doesn't show images ... but then, they probably won't open random attachments anyway.

      --
      The Tao of math: The numbers you can count are not the real numbers.
    5. Re: Actually, it's under control by Black+Parrot · · Score: 3, Funny


      > Porn to the rescue, yet again!

      Porn is like God: it helps those who help themselves.

      --
      Sheesh, evil *and* a jerk. -- Jade
    6. Re:Actually, it's under control by CrankyFool · · Score: 3, Funny

      And then of course there's the Coupling (British relationship comedy -- think Friends, but smarter and funny) version -- 'One swallow does not a relationship make.'

  3. Passwords for Adult Websites!! by Tibor+the+Hun · · Score: 5, Funny

    Where? Which ones? How do we get them?

    --
    If you don't know what AltaVista is (was), get off my lawn.
    1. Re:Passwords for Adult Websites!! by lukewarmfusion · · Score: 4, Funny

      I'll email 'em to you.

    2. Re:Passwords for Adult Websites!! by Anonymous Coward · · Score: 3, Funny

      You must have Microsoft Windows with Outlook Express installed to get them. I'm sorry, Linux is useless here...

    3. Re:Passwords for Adult Websites!! by mrtroy · · Score: 3, Funny

      Free pron site right here!!!!

      This is all I need for a month!

      --
      [I can picture a world without war, without hate. I can picture us attacking that world, because they'd never expect it]
  4. Yay by Anonymous Coward · · Score: 5, Interesting


    The virus companies write variants and release them to enforce the upgrades. I worked at a popular AV company doing front end work, not the actual engine, and when we got together for drinks the engine writers would talk about upgrade paths from what they were working on. Ever wonder why most viruses don't destroy your system? Because there's no money in an erased system. There is a lot of money in AV upgrades.

    1. Re:Yay by Anonymous Coward · · Score: 4, Insightful

      I saw that movie too!

      A = Corruption probability
      B = Number of hosts on the network
      C = Cost of patch
      X = Cost of reinstall

      If A + B + C is less than X, then they don't do a download!

    2. Re:Yay by Damhna · · Score: 2, Interesting

      True-ish.

      The reasons why we are seeing a move away from the destructive payloads of yesteryear is that there is a lot more money to be made in compromising systems.

      Whether the intention is to harvest a shedload of zombie remailers for spam markering or for some of the recently seen rogues capable of using a 'distributed computing' model for decrytpting databases there is lots of money in malware.

      True , there is indeed a lot of money made by the AV companies for upgraded and improved software,stragey and infrasturcture consultation services. This is becasue companies are waking up to realise that they are no longer looking at script kiddies or disgruntled employees as the most likely vector but rather, well financed, educated professionals.

      Companies could once upon a time hide behind the "why would anyone target us ? We're small" mentality.
      No longer.

      Got Bandwidth ?
      Got CPU ?
      You are a target.

    3. Re:Yay by crimoid · · Score: 2, Insightful

      If you could prove this you'd be a rich man. Hire a lawyer, file a class-action lawsuit, change the world.

    4. Re:Yay by Twanfox · · Score: 2, Informative

      Don't like it? Support free AV programs like AVG. They just released a "new" free version just this January, their 7.0 (paid version is 8.0, I believe). Get all the updates np, doesn't cost you a dime unless you're a business.

    5. Re:Yay by accad · · Score: 2, Insightful

      I'm sorry, but I for one don't believe that AV companies write viruses just to make money.

      I mean think about it, 1st off, if they do that, they won't have the virus writers in the same setting as the other company employees, it's too risky.

      2nd, with the number of AV companies out there, why hasn't one of them figured this out by now and gone public.

      3rd, what is the propability of these employees staying silent all those years? No one has yet come forward AFAIK.

      Correct me if I am wrong, but we already have the means of tracing an outbreak to its source, and in fact it was used before for locking up the original writer.

      IF (big IF) AV companies actually do that, then they certainly would not allow the virus writers to mingle with the other employees over drinks, and we all know how much virus writers like to boast.

      just my 2 (canadian) c.

    6. Re:Yay by Tim+C · · Score: 3, Insightful

      Extraordinary claims require extraordinary proof: so prove it.

    7. Re:Yay by endoboy · · Score: 2, Informative

      Not to accept your premise, but you may want to work on your math skills...

      that should be:
      If A*B*CX then....

      multiply the probability times the cost... don't add it

    8. Re:Yay by BVis · · Score: 4, Informative

      I'd like to put a plug in for avast! antivirus as well. Updated often, unobtrusive, scans peer to peer and AIM traffic (if you're so inclined), just works. Finds stuff Norton doesn't even look for. http://www.avast.com/ .

      --
      Never underestimate the power of stupid people in large groups.
  5. Learned? by E+IS+mC(Square) · · Score: 3, Funny

    I think those who get affected actually deserve to be affected - mostly, they are the ones who keep on spreading those "forward this to 10 ppl in 10 seconds or you will throw third nipple". Give 'em more.

    1. Re:Learned? by MightyMartian · · Score: 3, Insightful

      > I think those who get affected actually deserve
      > to be affected - mostly, they are the ones who
      > keep on spreading those "forward this to 10 ppl in
      > 10 seconds or you will throw third nipple". Give
      > 'em more.

      And if it was just those morons too thick-headed to read or listen to the TV, then I'd say "infect away!"

      Unfortunately net admins like myself end up having to stare down the face of a hundred thousand zombies trying various means to bust in or break down my network.

      --
      The world's burning. Moped Jesus spotted on I50. Details at 11.
  6. Yay! by Gathers · · Score: 2, Funny

    Passwords for adult websites? Yay!!
    Oh, if only I knew how to open email attachments!

  7. Given how its spread... by DaveAtFraud · · Score: 3, Funny
    Like usual it was spread by e-mails with claims to have attachments that contain passwords for adult websites.
    I'm surprised it wasn't a /. reader who discovered it!

    --
    They that can give up essential liberty to obtain a little temporary safety deserve neither safety nor liberty.
    Ben
    1. Re:Given how its spread... by rbarreira · · Score: 2, Funny

      Who told you /.ers were adults?

      --

      The AACS key is NOT 0xF606EEFD628B1CA427BEA93A9CA9773F
  8. Last time.. by wpiman · · Score: 5, Interesting
    Last time our company got taken down by this thing-- the IT department got it fixed after two days.. In that week's company newsletter- there was a report about how quick our IT department worked to fix the problem. Guess who authored it- head of the IT department.

    What they failed to mention was that they never did the critical updates that would have prevented this. Way to go guys. I guess it is all about how you report it.

    1. Re:Last time.. by grub · · Score: 3, Insightful


      If your IT head doesn't have system updates somewhat automated with AV and spyware software he should be fired on the spot. That report he sent out was nothing more than a PR move to cover his ass.

      --
      Trolling is a art,
  9. I already have 6 of these. by SteelV · · Score: 3, Interesting

    I already got 6 of these in my gmail account, from people I don't know. Thankfully, they all ended up in the spam folder. Nice!

  10. Re:What's MyDoom? by stratjakt · · Score: 2, Insightful

    It's not a virus, and it doesn't really have shit to do with windows.

    It's just some code to do bad shit, you email to idiots and trick them into clicking it.

    This could be done on any OS. Just, no one really cares for an army of about 12 OSX-based bots, when they can get thousands of Windows boxes.

    --
    I don't need no instructions to know how to rock!!!!
  11. Eat that by Mr2cents · · Score: 4, Funny

    Eat that, Duke Nukem Forever!!

    Where can I download this new MyDoom thingy?

    --
    "It's too bad that stupidity isn't painful." - Anton LaVey
  12. Everyone forgets the most important question by RattRigg · · Score: 5, Funny


    Do the passwords work?

    --
    I started with nothing and I still have most of it.
  13. the rapture must be at hand! by RafeDawg · · Score: 4, Funny

    remember how God used to smite masturbators?

    --
    ------- Was it just a coincidence I got moderator points the first time I logged on to /. from linux?
    1. Re:the rapture must be at hand! by iluvcapra · · Score: 3, Funny

      Now he just smites kittens.

      --
      Don't blame me, I voted for Baltar.
    2. Re:the rapture must be at hand! by mangu · · Score: 3, Informative
      Onan was killed by God because he refused to have sex with his late brothers wife


      He didn't refuse to have sex with her, he just pulled out when he came. Just like in pr0n videos.

  14. Re:this is IT !! i'm outta here. by Hasai · · Score: 2, Insightful

    *shrug* Why do you think municipalities started requiring a license/certificate of training in order to legally operate an automobile?

    It's been my own long, painful experience that most people are as dumb as a box of rocks. But, hey; don't get upset about it, profit from it. Charge $250USD a pop to clean-up their brainless screw-ups. Long-term personal prosperity will be assured.

    --

    Regards;

    Hasai

  15. Amazing! "Free pussy" and brains switch off! by swb · · Score: 4, Funny

    I'm continually amazed by how quickly people turn their brains off when "free pussy" is in the air..

  16. Re:Too bad... by Oxy+the+moron · · Score: 2, Funny

    You mean like this one? :)

    --

    Proudly supporting the Libertarian Party.

  17. Next version of the virus by Anonymous Coward · · Score: 3, Funny

    will probably have links to provocative pictures of Bill Gates posing with computers.

    The virus will fail miserably.

  18. How to prevent this from affecting you by KiltedKnight · · Score: 2, Informative
    1. Don't open attachments from unknown sources
    2. Virus scan all attachments before opening
    3. Don't open attachments from unknown sources
    4. Don't use mail programs that ignore the MIME information (read: Outlook and Outlook Express)
    5. Don't open attachments from unknown sources
    6. There is no number 6, unless you're in The Village
    7. Don't open attachments from unknown sources
    --
    OCO is Loco
    1. Re:How to prevent this from affecting you by KiltedKnight · · Score: 2, Insightful

      Actually, one other thing you really need to do is to turn off all plugins, Java, JavaScript, downloading of images that are not embedded, etc., and be very leary of sending "confirmations of receipt."

      You should secure your e-mail client even more than your web browser.

      --
      OCO is Loco
  19. Re:What's MyDoom? by stratjakt · · Score: 3, Funny

    Believe me, OSX and Linux have more than their share of stupid users.

    They post here on slashdot all the time. They tell you silly shit like iPods make great external hard drives, and work well as backup devices.

    They talk about using Gentoo as a backend server, because all you have to do is put "emerge sync && emerge -u world" in your crontab and nothing will ever go wrong, and the -funroll-loops in your CFLAGS will make it unga bunga faster.

    --
    I don't need no instructions to know how to rock!!!!
  20. Re:this is IT !! i'm outta here. by innerweb · · Score: 5, Interesting
    This is the right attitude. It used to bother me that my clients would not listen and do things that were good for them (even the simple easy dirt cheap things), then I figured out, it is all about comfort levels. If the client is comfortable where things are they will not change. SO, now I simply give them a written explanation of what they need to do (or not do), and list the fee for fixing each of the problems they might encounter if they do not do as instructed. Get this, many have actually thanked me for letting them know the cost of fixing things up front. Instead of just doing things the right way, they were happy to have a dollar amount they could plug into their projected expenses. If that does not tell you anything, nothing will.

    We recently had major flooding. Several of my clients have businesses in the flood zone (much cheaper rent). Most of those followed my advice and moved their hardware upstairs. A few did not and are not paying me major bucks for reinstalling, rebuilding and recovering everything they need. If they had just taken a day and moved eveything the first time (they are all now moving upstairs), then they would have saved much money and even more downtime.

    But, in the end, how they run their business is their choice. All I can do is offer my advice and hope they listen.

    InnerWeb

    --
    Freud might say that Intelligent Design is religion's ID.
  21. Re:Question! Corporate-wide antispyware software? by MightyMartian · · Score: 5, Funny

    > Could you advice ANY good anti-spyware software
    > which can be deployed corporate-wide? (with trial
    > version)

    Sure, a baseball bat. Beat the dummy who downloads spyware to death. For a trial version, try a plastic bat, so they'll just go Ouch!

    --
    The world's burning. Moped Jesus spotted on I50. Details at 11.
  22. Command to check if your system is susceptible by captainclever · · Score: 5, Funny

    uname

    --
    Last.fm - join the social music revolution
  23. Re:this is IT !! i'm outta here. by EmperorKagato · · Score: 2, Interesting

    I agree. As a fellow member in the IT field you have to show why they should care. Especially users who are on your IT department's #1 call on the help desk list. Members of my department and I who respond to virus reports usually talk with them while cleaning their computers and try to give them an enjoyable experience while waiting for Ad-aware to clean up 1000 adware objects on a Gateway 350mhz P2.

    If you show that you care about them. They will care more about work than personal browsing.

    --
    ----- You know you have ego issues when you register a domain in your name.
  24. Yeah right by pcgamez · · Score: 3, Insightful

    "Like usual it was spread by e-mails"

    No, it was spread by stupid users.

  25. Preying upon the pitiful: 21st Century Darwin by pgfault · · Score: 2, Insightful

    The old adage holds true that all things, including virii, prey on society's pitiful. Unfortunately, counter to Darwinism, the weak are not eliminated from the Internet.

    Sigh...

  26. Re:Haven't had a problem by Mr.Sharpy · · Score: 2, Funny

    we exchange secret-admin handshakes and have a beer with lunch whenever the latest virus comes out.

    damn, you must be an alcoholic by now.

  27. Re:Doing Something by TheLittleJetson · · Score: 2

    Uh, you could always drop the platform for Mac instead. For the average home internet user who is using software with Mac counterparts (web, email, office...) this is not a bad idea. I switched my stuff and my parents too, and for the past 2 years the only effect all this spyware/worms/etc has had on me is cluttering up my news headlines, occasionally I get an inbox full of worms when one is rampant on the campus network.

    Honestly, there really is no excuse to stick with Windows unless there's some mission-critical program that is vital to your business needs or something. It's just not an enjoyable user experience to begin with, and security/viruses/spyware/adware is enough to make it a real pain in the ass. Just switch folks, it's easier than you think.

  28. Porn by jeffy210 · · Score: 3, Insightful

    Ah, never underestimate the stupidity of horny people.

    --
    ------
    "And may your days be long upon the earth."
  29. Systemic Problems vs User Problems by nurb432 · · Score: 4, Insightful

    The real problem is not the platform, its the user.

    Anytime you allow users to do anything, you have the potitional for an infection that casues troubles.

    Some platforms may currently be more prone to problems, but you can be assured whom ever has the largest market share will be the one under the greatest attack in the first place.

    Remember too, some problems are platform independant, such as the JPG problem from last year.. Or sendmail.. or ssh.. or or or..

    But regardless of any systemic issues, excluding true worms that come in at a system level, it still mostly boils down to users clicking things they shouldnt.. And it doesnt matter what system they are using.. They can still run a trojan and at the very least hose their profile.. ( and will ).

    So i guess there is a solution afterall, no users.

    Disclaimer: I'm a BSD user and am also virus free, but im not so blind ( or stupid ) to think we are invunerable.. We just are not a direct target, yet.

    --
    ---- Booth was a patriot ----
    1. Re:Systemic Problems vs User Problems by Quino · · Score: 3, Insightful

      The reason doesn't matter, the fact remains that switching will make things better.

      If half of computer users switched, we'd still be better off -- anything would be better than the monoculture we have now.

      The fact that Linux/OS X/BSD whatever (as good as they are, and I do think they're innately more secure than MS offerings) aren't perfect either is no reason to stand by and just live with these Microsoft virus/worm problems.

      There are valid reasons why it may not make sense for some people to switch, but pointing out that Linux/OS X/etc. aren't perfect (only better) either isn't one of them.

    2. Re:Systemic Problems vs User Problems by c0p0n · · Score: 2, Insightful

      The problem is mainly letting some moron to do design decisions like giving Outlook or IE the hability of executing things. Why the heck should be able Outlook to interact with the Windows kernel execution routines (mainly through ActiveX) in any way? It's a PIM, by god's sake!

      --

      Your head a splode