Tuesday, December 29, 2009

All about My Doom/Novar Virus

My Doom/Novar virus is identified on January 26, 2004. It propagates mainly through email attachments and infects Windows-based workstations and servers. Attachment with a .exe, .scr, .zip,pif, .cmd, or .bat extension are particularly considered to carry dangerous virus Novar.

It creates a “back door” into the system by establishing a file (proxy server). This helps a hacker to connect to the system and use the proxy to gain access or connection to the computer’s network resources. This virus finds addresses not only in Address Books but also in text and HTML documents. The attached file containing the virus uses a Microsoft Windows icon that seems to be a harmless text file or screen saver fooling or misleading the users.

My Doom virus when executed opens up Windows' Notepad with rubbish data in it. As on February 12, 2004, it is found that My Doom/Novar virus stopped spreading. This virus can be removed from system with Symantec free tool.

No comments: