(Today's Windoze virus) - Doomjuice Worm Aims at Microsoft

[Wonk]

SEATTLE -- A new worm dubbed "Doomjuice" targeting Microsoft's website emerged on the Internet on Monday, which security experts said slowed parts of the software maker's home page.

Doomjuice, which some are describing as a variant of the MyDoom worm, spreads through e-mail systems already infected with the first version, which became the fastest-spreading virus ever when it was unleashed on the Internet at the end of January.

It's only looking for machines that are compromised by MyDoom A or B," said Vincent Gullotto, vice president of the antivirus emergency response team at Network Associates. He said it was not spreading as rapidly as the initial MyDoom worms.

Because Doomjuice spreads directly between infected computers, rather than via e-mail, experts said that it would not be accurate to call it a variant of MyDoom, which accounted for as many as one in five e-mails at its peak in late January.

more...
http://www.wired.com/news/infostructure/0,1377,62229,00.html

[Wonk]

1. New viruses feed on MyDoom infections

By Robert Lemos
CNET News.com

Two worms that take advantage of computers whose security has already been compromised started spreading on Monday, antivirus software companies warned.

The two opportunistic programs--dubbed Doomjuice and Deadhat--threatened only those users still infected with a version of the MyDoom virus, and didn't pose a major problem for businesses, which had previously cleaned systems infected with the virus, the companies said.

"There are only about 50,000 or 75,000 machines left that are infected," said Vincent Gullotto, vice president for antivirus and vulnerability emergency response team at Network Associates.

more...
http://zdnet.com.com/2100-1104_2-5156105.html

[Wonk]

5. MyDoom author may be covering tracks

A worm that started spreading on Sunday places the source code for the original MyDoom virus on victims' hard drives, an action equivalent to planting evidence, antivirus experts said Tuesday.

The worm, Doomjuice, spreads to computers that have already been infected by either the original MyDoom virus or the MyDoom.B variant, and among other actions, places several copies of the source code for MyDoom.A on a victim's computer.

The author may be using the tactic to create a crowd of PC users in which to hide, or the author could be spreading the code in hopes that other virus writers will create variations on MyDoom, said Graham Cluley, senior technology consultant for antivirus company Sophos.

"If he has spread his code around the Net onto innocent computers in an attempt to hide in the crowd, then he's more sneaky than the average virus writer," Cluley said in a statement.

more...
http://zdnet.com.com/2100-1104_2-5156836.html

[JailForBush]

2. "A new worm dubbed "Doomjuice" targeting Microsoft's website emerged

on the Internet on Monday, which security experts said slowed parts of the software maker's home page."

Bummer.

[burrowowl]

3. Poor M$

snarf!
Remeber M$ exports or outsources jobs abroad! As does the Intel Inside.

[david_vincent]

4. Network Associates?

The McAfee AV folks?
The same people who knowingly marketed faulty AV products for years...