rabsonja
07-31-2004, 12:05 PM
Hi!
This I received this morning and maybe it's interesting to someone here
Worm.Win32.Mydoom.M Alert!
A new variant of the Mydoom Worm is spreading very well since Monday. Mydoom.M arrives via email as an attachment disguised as undeliverable email. The email subject and text is cleverly assembled to make the receiver think it is a returned email. The worm is located in the email attachment, sometimes packed in a ZIP archive file. If the receiver opens the archive and starts the included file, the worm will be activated. Once started, the worm tries to overload search engines like Google, Lycos, Altavista and Yahoo by harvesting new addresses. It also installs a backdoor trojan on the victim's PC which opens the port 1034 for remote administration.
Mydoom.M can be detected and removed with a² using the latest signature updates. The a² personal background guard blocks the worm immediately if it is started.
A more detailed description of the worm can be found at the a² Malware Database:
http://www.emsisoft.com/en/malware/?Worm.Win32.Mydoom.M
Much Greetings!
Rabsonja
This I received this morning and maybe it's interesting to someone here
Worm.Win32.Mydoom.M Alert!
A new variant of the Mydoom Worm is spreading very well since Monday. Mydoom.M arrives via email as an attachment disguised as undeliverable email. The email subject and text is cleverly assembled to make the receiver think it is a returned email. The worm is located in the email attachment, sometimes packed in a ZIP archive file. If the receiver opens the archive and starts the included file, the worm will be activated. Once started, the worm tries to overload search engines like Google, Lycos, Altavista and Yahoo by harvesting new addresses. It also installs a backdoor trojan on the victim's PC which opens the port 1034 for remote administration.
Mydoom.M can be detected and removed with a² using the latest signature updates. The a² personal background guard blocks the worm immediately if it is started.
A more detailed description of the worm can be found at the a² Malware Database:
http://www.emsisoft.com/en/malware/?Worm.Win32.Mydoom.M
Much Greetings!
Rabsonja