|
|
Virus Warning: W32.Mydoom.M@mm
2004-07-26
W32.Mydoom.M@mm is a mass-mailing worm that drops and executes a backdoor, detected as Backdoor.Zincite.A, that listens on TCP port 1034. The worm uses its own SMTP engine to send itself to email addresses it finds on the infected computer.
The email contains a spoofed From address, and the Subject and Body text will vary. The attachment name will also vary.
Note:
- Symantec Consumer and Enterprise products that support Worm Blocking functionality automatically detect this threat as it attempts to spread.
- Due to a decreased rate of submissions, Symantec Security Response has downgraded W32.Mydoom.M@mm from a Category 4 to a Category 3 as of July 28, 2004.
W32.Mydoom.M@mm is packed with UPX
We recommend you get the removal tool at http://www.symantec.com
|