*

Recent Posts

Welcome, Guest. Please login or register.
November 15, 2024, 02:30:06 PM

Login with username, password and session length

Members
  • Total Members: 61
  • Latest: AciDeX
Stats
  • Total Posts: 28505
  • Total Topics: 1915
  • Online Today: 121
  • Online Ever: 569
  • (August 02, 2024, 06:20:39 AM)
Users Online
Users: 0
Guests: 15
Total: 15

Permissions

Author Topic: W32/Mydoom@MM  (Read 2021 times)

0 Members and 3 Guests are viewing this topic.

Offline ZWarrior

  • Administrator
  • Hero Member
  • *****
  • Posts: 7798
  • Karma: 8
  • Shhh! Be wery wery qwiet...
    • View Profile
    • Ambush!
W32/Mydoom@MM
« on: January 27, 2004, 10:00:19 AM »
------------------------------------------------------------
          ** VIRUS ALERT - W32/Mydoom@MM **
------------------------------------------------------------

Dear W. Andy,

W32/Mydoom@MM is a High-Outbreak mass-mailing worm flooding email servers worldwide. When run, the worm steals email addresses from the infected machine and also automatically generates random email addresses for propagation. This email generation engine is similar to technologies spammers use to generate addresses for spam email campaigns.

W32/Mydoom@MM generates emails with a spoofed "From: field", so incoming messages may appear to be from people you know.
Furthermore, the subject line and message body are both randomly generated by the worm.

------------------------------------------------------------
Caution: An infected email can come from addresses you recognize and may contain the following information:

From:      randomly generated <spoofed>
Subject:    randomly generated
Body:      randomly generated  - examples:
         
- The message cannot be represented in 7-bit ASCII
  encoding and has been sent as a binary attachment.
- The message contains Unicode characters and has been sent
  as a binary attachment.
- Mail transaction failed. Partial message is available.
         
Attachment:   randomly generated  
The icon used by the file tries to make it appear as if the attachment is a text file.  The attachment type varies [.exe, .pif, .cmd, .scr] -- often arrives in a ZIP archive, though the attachment size is 22,528 bytes.

Aliases: Novarg, W32.Novarg.A@mm, Win32/Shimg, WORM_MIMAIL.R
------------------------------------------------------------

NOTE: Up-to-date McAfee VirusScan users with dat 4319 are protected from this threat.

Learn More about W32/Mydoom@MM:
==> http://us.mcafee.com/root/campaign.asp?cid=9539

Scan for W32/Mydoom@MM:
==> http://us.mcafee.com/root/campaign.asp?cid=9540
--------------------------------
Zoƫ: Shepard, isn't the Bible kind of specific about killing?
Book: Very specific. It is, however, somewhat fuzzy around the area of kneecaps.