About
Subscribe

MyDoom creators want AV jobs

By Damian Clarkson, ITWeb junior journalist
Johannesburg, 13 Sept 2004

Creators of the latest MyDoom worms have inserted a job application within the code.

CEO of local Sophos distributor Netxactics, Brett Myroff, says the message "We searching 4 work in anti-virus (AV) industry" is hidden in the W32/MyDoom-V and W32/MyDoom-U code, and does not get displayed on infected computers.

While it is not yet clear whether the message is serious or not, Myroff says the writers shouldn`t hold much hope of being employed. "It`s hard to tell if the creators of these new versions of the MyDoom worm are being serious, but there is no way that anybody in the anti-virus industry would touch them with a bargepole.

"It`s very simple: If you write a virus, we will never ever employ you. Not only is it deeply unethical to write malicious code, but it raises issues as to whether you could ever be trusted to develop the which protects millions of users around the world from attack every day."

Myroff adds that developing AV software is far more difficult than creating viruses. "Anti-virus developers have to ensure that their software works reliably, detecting over 90 000 computer viruses on a wide variety of operating systems and configurations without making mistakes or causing problems.

"Virus writers don`t care if their code crashes or causes incompatibilities. You don`t have to be a genius to write a virus."

The W32/MyDoom-V and W32/MyDoom-U worms spread via e-mail in the form of a file attachment. If users open the malicious file, the worms activate and may attempt to download a backdoor Trojan horse called Surila, says Myroff.

Share