My Doom Virus Returns


Recommended Posts

  • 3 weeks later...

Hey Nerelda...

Hope this is not considered like a thread hijack...i remembered your post on this...Sorry i didn't say thanks BTW...i meant to...OK i found this article at Geeks News...Looks like Bofra aka MyDoom is causing a bit of havoc that includes a bit more than Email distribution...

Stay Safe!

Geek News

Link to post
Share on other sites
Hey Nerelda...

Hope this is not considered like a thread hijack...i remembered your post on this...Sorry i didn't say thanks BTW...i meant to...OK i found this article at Geeks News...Looks like Bofra aka MyDoom is causing a bit of havoc that includes a bit more than Email distribution...

Stay Safe!

Geek News

Thanks echobay for the info and link.

Barb :D

Link to post
Share on other sites

Hi Matt,

I noticed it comes through port 6667; and IRC port...

No, it doesn't come through an IRC port. What happens is once it is executed it attemps to connect to a few IRC servers through that port. So you don't get it through IRC it just happens to be one of the things it trys to do once it gets you infected.

When W32.Bofra.D@mm is executed, it performs the following actions:

10. Attempts to connect to the following IRC servers on TCP port 6667:

B

Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

Loading...