"a new worm dubbed 'Doomjuice' targeting Microsoft's Web site emerged on the Internet on Monday, which security experts said slowed parts of the software maker's home page"

Viewed by some as MyDoom.C, in other words a variant of the earlier MyDoom worm, 'Doomjuice' spreads via e-mail systems already infected by the earlier worm - between already infected computers directly, not by e-mail.

Doomjuice uses the "backdoor" program installed by Mydoom.A that allows a hacker to gain access to an infected computer. To locate machines with the backdoor open, it scans random IP addresses and if the TCP Port 3127 is open, the worm sends itself in a specially crafted package that makes the Mydoom.A infected machine execute the file, thus infecting it with Doomjuice too.

Doomjuice triggers a denial of service attack against www.microsoft.com by trying to overload the site with information requests. Microsoft's Web site is reported to have been was slower - and was intermittently unavailable - over the weekend.

• MyDoom Comes From Russia With Hate, Moscow Times Confirms
• SCO & Microsoft Post Bounties of $250,000 Each on the Head of MyDoom Author
• Huge MyDoom Zombie Army Wipes Out SCO
• MyDoom - SCO/Microsoft Update
• LINUX VIEWPOINT: MyDoom Worm "Harmful to Linux Reputation"