[an error occurred while processing this directive]
BBC News
watch One-Minute World News
Last Updated: Tuesday, 27 July, 2004, 21:32 GMT 22:32 UK
Virus that hit Google subsiding
Google search engine error message
Some Google searches returned an error message
The computer virus which affected Google and other search engines is on the wane, say net security experts.

But they warn that net users should be on the lookout for a new variant of the worm appearing in the next few days.

The MyDoom.O virus spread quickly on Monday, causing some outages on Google, as well as a slight slowdown in internet traffic.

It used a sneaky new technique to spread itself, scanning search engines for additional e-mail addresses.

Virus evolution

The MyDoom.O variant spreads in the form of an e-mail attachment.

The attached message pretended to be from the user's net provider's or company's support team saying that their PC has been used by hackers to send spam.

A virus is famous for 15 minutes, or in this case for 15 hours, and then there is a big drop off the next day as people update their anti-virus software
Jack Clark, McAfee
It first emerged early on Monday and quickly spread. By Tuesday afternoon, e-mail filtering firm MessageLabs said it had intercepted almost 600,000 copies of the virus.

The latest version marked a worrying evolution of the MyDoom worm that infected hundreds of thousands of computers earlier this year.

This latest variant, MyDoom.O, not only scanned infected machines for e-mail addresses, but it also used search engines to look for even more addresses.

Google, as well as Lycos, AltaVista and Yahoo were bombarded with requests until they could not cope.

"This virus has introduced a new technique in e-mail propagation, in this case using search engines," said Jack Clark, McAfee anti-virus expert.

"You had potentially ten of thousands of machines, each generating tens of thousands of request to Google. That would be enough to bring Google to its knees," he told BBC News Online.

The worms affects Windows systems but not Linux or Apple Mac computers.

'Warhol effect'

In a statement, Google confirmed it had been flooded with automated searches generated by the MyDoom virus.

Warning about MyDoom
Previous versions of MyDoom targeted Microsoft
But it said only a small number of users and networks had been affected and that the Google website was not "significantly impaired."

MyDoom now appears to be subsiding, with Google and other search engines working as normal.

"We can expect to see a massive slowdown," said Mr Clark. "You have this Warhol effect.

"A virus is famous for 15 minutes, or in this case for 15 hours, and then there is a big drop off the next day as people update their anti-virus software."

But he added that it was almost certain that more versions of the virus would appear in the coming days, incorporating the new technique used by MyDoom.O.

Trench warfare against viruses
06 May 04  |  Technology
Defences tested by virus attacks
05 May 04  |  Technology
Google recovers after virus hits
27 Jul 04  |  Technology
Mydoom mutants mount new attacks
10 Feb 04  |  Technology
Mydoom virus starts to fizzle out
04 Feb 04  |  Technology
Microsoft dodges Mydoom onslaught
03 Feb 04  |  Technology


The BBC is not responsible for the content of external internet sites


News Front Page | Africa | Americas | Asia-Pacific | Europe | Middle East | South Asia
UK | Business | Entertainment | Science/Nature | Technology | Health
Have Your Say | In Pictures | Week at a Glance | Country Profiles | In Depth | Programmes
Americas Africa Europe Middle East South Asia Asia Pacific