I had already received this email but did not open the zip attachment. Email address of this sender to me was: e.ppipent@ascrum.de Subject: Read this, very important Fast spreading MyDoom worm marks first big attack of 2004 [PC Pro] 11:56 The first big worm attack of 2004 is spreading fast throughout the world today. The MyDoom worm, which is a variant of the MiMail virus, spreads via email or to any available shared directories used by Kazaa. The worm harvests email addresses from the hard disk and then generatees randomly-chosen addresses for both the 'to' and 'from' fields. This means that the 'from' address is spoofed and does not tell the next victim where the mail came from. The subject lines of the worm include such things as 'error', 'hello', 'hi', 'mail delivery system' or 'mail transaction failed'. The worm can arrive either as an .exe or .zip attachment and can appear as a text file icon although it is an executable. MyDoom-A copies itself to the System folder with the name taskmon.exe. it also drops the backdoor program shimgapi.dll, which is loaded by the worm. The backdoor allows a hacker access to TCP port 3127 on the computer. The worm also amends the registry so that it loads every time the computer is switched on. According to security firm Sophos, the backdoor access has been designed to launch a denial of service (DoS) attack against SCO's website. By midnight, MessageLabs estimated that it had intercepted some 165,000 copies of the worm yet was still spreading rapidly. -------------------------------------------------------------------------------- There are now three new levels of MSN Hotmail Extra Storage! Learn more. _________________________________________________________________ Add photos to your messages with MSN 8. Get 2 months FREE*. http://join.msn.com/?page=dept/features&pgmarket=en-ca&RU=http%3a%2f%2fjoin.msn.com%2f%3fpage%3dmisc%2fspecialoffers%26pgmarket%3den-ca