A new version of the MyDoom worm appears to be circulating on the Internet and may be responsible for some disruptions to Microsoft’s Web site Sunday night and Monday morning, researchers said. When it’s executed, the new variant, called MyDoom.C, or Doomjuice, begins scanning for machines listening on TCP port 3127. When it finds available PCs, it copies itself to the new machine’s Windows directory under the file name "intrenat.exe" and also creates a file named "sync-src-1.00.tbz" in several locations.

Read the complete story .