Network Computing is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them. Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

'Mydoom' Possibly The Fastest Spreading Virus Ever: Page 4 of 5

The virus, however, was expected to taper off over the next 24 hours, Huger said.

"Mydoom" arrives in a zip file carried in an e-mail with the subject lines "test," "mail delivery system," or "mail transaction failed." The body of the e-mail tries to trick the receiver into thinking that the actual message is in the attachment. The message contains such statements as "The message contain Unicode characters and has been sent as a binary attachment."

Once opened, the worm installs a program in the infected PC and opens a "backdoor" that enables a hacker to take control of the computer, apparently in preparation to flood the SCO server with information Feb. 1, security experts said. The kill date for the worm is Feb. 12.

The virus, which affects computers running Windows 95, 98, ME, NT, 2000 and XP, scours the infected computer's hard drive for e-mail addresses to send copies of itself. Mydoom also copies itself to the download directory on PCs for the file-sharing service Kazaa.

Symantec's Huger said the company had received unsubstantiated reports that spammers were already using infected machines to send spam. Technologically savvy spammers can sometimes piggyback on the malevolent code sent by others.