MyDoom viruses probably work of one author

The two versions of the MyDoom virus may have the same parent, according to a security researcher. The name "andy" left in the code by the author of the MyDoom virus links the original program released a week ago with the B variant sent out two days later, Jimmy Kuo, McAfee fellow for security company Network Associates, said on Monday. Other hints, including numbers that appear to designate the version of the program, indicate that the fast-spreading virus was created by a professional programmer.

"It looks like what someone would write when they check in source code," said Kuo, who has been researching the virus. "The interpretation is that 'andy' is the person checking the code in."

Read Full Story