A variant of the MyDoom virus has started spreading, albeit slowly, and security experts expect it to target the main Web site of the music industry.
The variant, MyDoom.F, deletes several different types of files stored on an infected computer and aims to attack the Web sites of Microsoft and the Recording Industry Association of America with a flood of data, antivirus companies said Friday.
Neither site may feel much pain, however, as the virus has failed to spread quickly.
“It is not very prevalent,” said Craig Schmugar, virus research manager for Network Associates’ vulnerability emergency response team. “We haven’t seen anything beyond (a single) sample in the past 24 hours.”
The original MyDoom spread through e-mail in late January, infecting a new computer every time an unwary person opened the attached file containing the program. Between several hundred thousand and 2 million computers were infected, according to estimates.
Antivirus firms believe that the writer of the MyDoom.F virus is different from the person believed to have authored the first two versions of the code. A later worm, Doomjuice, spread to computers that were already infected by MyDoom and dropped copies of the original virus’ source code. It’s thought that the author of MyDoom.F used that code to write this new virus.
Related Posts
- Kazaa Protects Against MyDoom Virus
- RIAA site disabled for five days
- New Virus Targets KaZaA Users, Hits SCO
- Fake FBI virus catches net users
- Countdown for nasty Windows virus

