NEW “MYTOB” E-MAIL WORM SPREADS RAPIDLY

NEW “MYTOB” E-MAIL WORM SPREADS RAPIDLY

Problem: Numerous variants of a new Internet worm are spreading rapidly via e-mail attachments.
March 31, 2005
Over the past month, at least 12 versions of a new computer worm dubbed “Mytob” have propagated over the Internet. Lurking inside files attached to e-mails, Mytob targets computers running the Windows operating system. Once the infected attachment has been opened or run, the worm proceeds to block the computer from accessing security updates or patches from websites belonging to Microsoft, Symantec, McAfee, or other providers of computer protection. In addition, it opens a backdoor to allow intruders to enter the system, and it generates copies of itself and distributes them to all e-mail addresses found on the infected computer.

Many e-mails containing Mytob have the following subject lines:
• Good day
• Hello
• Mail Delivery System
• Mail Transaction Failed • Server Report
• Status
• Error

Often the text inside the e-mail reads:
• Here are your banks documents.
• The original message was included as an attachments.
• The message cannot be represented in 7-bit ASCII encoding and has been sent as a binary attachment. • The message contains Unicode characters and has been sent as a binary attachment.
• Mail transaction failed. Partial message is available.

Generally, Mytob hides inside an e-mail attachment with a name like:
• body
• data
• document
• doc
• file • text
• test
• message
• readme

With one of the following extensions:
• .bat
• .cmd
• .exe • .pif
• .scr
• .zip

Or it may have a second file extension such as:
• .doc
• .txt • .htm
• .tmp


Do not open or run any attachments sent to you in an instant message or e-mail unless you are expecting to receive the attachments and unless you are 100% positive they are safe. If you are uncertain whether or not a friend or loved one intentionally sent you an attachment, simply call him/her or send an e-mail inquiry. The possibility exists that his/her computer is infected with a virus or worm that has sent copies of itself to each e-mail address found on the computer.

The best way to ensure the privacy of the files, credit card numbers, financial statements, and other sensitive data stored on your computer is to patch the holes in Windows by visiting the Windows Update website; use a trusted antivirus program and download the latest antivirus definitions; and use a software and/or hardware firewall to make your computer “invisible” to hackers while you use the Internet.