
Be really careful opening attachments. This new MyDoom virus is spreading faster than anything we've ever seen. I have received the virus 6 times this morning in e-mails sent to my ARRL.ORG e-mail address. The e-mail is much better written than most, so it's fooling lots of people. One estimate is 1000 new infections per minute. Some descriptive information appears below.
Here's a good article from eWEEK magazine: <http://www.eweek.com/article2/0,4149,1460853,00.asp>MyDoom E-Mail Worm Spreading Quickly
Extract from the Sophos web site. We started seeing these viruses late Monday afternoon. W32/MyDoom-A and W32/MyDoom.A Type: Win32 worm Description W32/MyDoom-A is a worm which travels by email. The worm harvests email addresses from your hard disk and uses randomly-chosen addresses for both the "to" and "from" fields. This means that the "from" address is spoofed and does not tell you where the mail really came from. W32/MyDoom-A arrives in emails with the following characteristics: Subject lines include: error hello hi mail delivery system mail transaction failed server report status test [random collection of characters] Attachment names include: body data doc document file message readme test [random collection of characters] Attachment extensions: bat cmd exe pif scr zip W32/MyDoom-A attaches itself to emails in either EXE (Windows program) or ZIP (Zip archive) format. 73, Andy Oppel, N6AJO Vice Director, Pacific Division, ARRL n6ajo@arrl.org home: (510) 864-2299 cell: (510) 910-1508