MyDoom Strikes Again

Renegade334 writes "Months after the last attack of MyDoom, MyDoom.AI returns. Like usual it was spread by e-mails with claims to have attachments that contain passwords for adult websites."

Comments

Nice

[MPHellwig]

The clients that are affected will not dare to tell me.

Passwords for Adult Websites!!

[Tibor the Hun]

Where? Which ones? How do we get them?

Yay

[Anonymous Coward]

The virus companies write variants and release them to enforce the upgrades. I worked at a popular AV company doing front end work, not the actual engine, and when we got together for drinks the engine writers would talk about upgrade paths from what they were working on. Ever wonder why most viruses don't destroy your system? Because there's no money in an erased system. There is a lot of money in AV upgrades.

Last time..

[wpiman]

Last time our company got taken down by this thing-- the IT department got it fixed after two days.. In that week's company newsletter- there was a report about how quick our IT department worked to fix the problem. Guess who authored it- head of the IT department.

What they failed to mention was that they never did the critical updates that would have prevented this. Way to go guys. I guess it is all about how you report it.

Re:Actually, it's under control

[Mz6]

No... The email contained LINKED images to the website in question. Therefore, all the website had to do was swap the linked images in the email for warnings that this message contians a virus.

Everyone forgets the most important question

[RattRigg]

Do the passwords work?

Re:this is IT !! i'm outta here.

[innerweb]

This is the right attitude. It used to bother me that my clients would not listen and do things that were good for them (even the simple easy dirt cheap things), then I figured out, it is all about comfort levels. If the client is comfortable where things are they will not change. SO, now I simply give them a written explanation of what they need to do (or not do), and list the fee for fixing each of the problems they might encounter if they do not do as instructed. Get this, many have actually thanked me for letting them know the cost of fixing things up front. Instead of just doing things the right way, they were happy to have a dollar amount they could plug into their projected expenses. If that does not tell you anything, nothing will.

We recently had major flooding. Several of my clients have businesses in the flood zone (much cheaper rent). Most of those followed my advice and moved their hardware upstairs. A few did not and are not paying me major bucks for reinstalling, rebuilding and recovering everything they need. If they had just taken a day and moved eveything the first time (they are all now moving upstairs), then they would have saved much money and even more downtime.

But, in the end, how they run their business is their choice. All I can do is offer my advice and hope they listen.

InnerWeb

Re:Question! Corporate-wide antispyware software?

[MightyMartian]

> Could you advice ANY good anti-spyware software
> which can be deployed corporate-wide? (with trial
> version)

Sure, a baseball bat. Beat the dummy who downloads spyware to death. For a trial version, try a plastic bat, so they'll just go Ouch!

Command to check if your system is susceptible

[captainclever]

uname