MyDoom.Y baffles antivirus firms

MyDoom.Y baffles antivirus firms

Summary: The latest version of MyDoom includes a description of how the virus works and a photo of Netsky creator Sven Jaschan

TOPICS: Security
A new version of the Internet worm MyDoom includes a photo of Netsky worm writer Sven Jaschan and a description of the worm itself.

In the latest bizarre twist in the worm's development, authors included a detailed account of what MyDoom.Y does and how it works. This particular tactic has left antivirus vendors baffled.

"It's like they wanted to help us, which is weird," said Mikko Hypponen, director of antivirus research for F-Secure. "The photo could be making the point that MyDoom has won the virus war. But then again, Netsky was much more widespread than MyDoom."

The description of the virus included two signatures, Nemog and Zincite, which Hyponnen said he had seen before in back-door code. "We don't know whether they have been planted or not," he said.

Jaschan, who was charged earlier this year by German police for creating several variants of the Netsky virus, is believed to be responsible for 70 percent of the virus infections that plagued Internet users in 2004.

Topic: Security

Kick off your day with ZDNet's daily email newsletter. It's the freshest tech news and opinion, served hot. Get it.


Log in or register to join the discussion
  • Since everyone does the newspaper crosswords in the UK, no doubt this has already been pointed out, but just in case:

    nemog = gnome
    zincite = citizen
  • Nemog Citizen = Gnome Citizen