San Francisco, July 26 (Reuters): A fast-spreading computer worm disrupted the world’s most popular online search sites yesterday, scanning the vast databases of Google Inc. and other search engines to find the e-mail addresses of new victims.
The worm’s assault came on the same day that Google disclosed it was seeking as much as $3.3 billion in its highly anticipated initial public offering, although there was no indication that the two events were related. In a filing with stock regulators, Google made the prescient acknowledgment that “outages and delays” from viruses and worms could harm its business.
The online attack marked an evolution of a worm called MyDoom that infected hundreds of thousands of computers earlier this year. In the current variant, MyDoom not only scans the hard drives of victims for e-mail addresses, but also turns to online search sites to find additional leads.
The worm then sends a copy of itself as an e-mail attachment to those addresses. Users who open those attachments, and who are not protected by security software, infect their own computers.
“Those search requests have been overloading the search engines,” said Lloyd Taylor, vice-president of technology for Keynote Systems Inc., which measures website performance.
A Yahoo spokesman said the effect of the slowdown was limited solely to its search engine and said that by yesterday afternoon that impact had been mitigated. Google, in a statement, said that some of its users had experienced a slowdown but added that it expected full service would be “restored shortly” as of yesterday afternoon.
Symantec Corp., a maker of security software, said it received 250 reports about the new worm in two hours, on pace with the original MyDoom attack in January. “This is certainly equivalent to what we saw back then,” said Oliver Friedrichs, a senior manager with Symantec's security response group.
Initial signs of problems popped up yesterday morning, with reports from around the world that users were having problems searching on Google.com. Keynote said the attack appeared to have started when east coast office workers in the US arrive and check their e-mail. Web search sites had apparently found a way to block the automated search requests, Keynote’s Taylor said. Anti-virus vendors also had updates ready to protect against the latest strain of MyDoom, he said.