[ threats_virus_threats ]
W32.Mydoom.N@mm
Mild
Staff Writer
2004-07-29
 Insider Reports RSS Feed
W32.Mydoom.N@mm is a variant of W32.Mydoom.M@mm. It is a mass-mailing worm that drops and executes a backdoor that is detected as Backdoor.Zincite.A, which listens on TCP port 1034.
The worm uses its own SMTP engine to send itself to email addresses that it finds on the infected computer. The email contains a spoofed From address. The subject and body text will vary, as will the name of the attachment.
This threat is packed using ASPack.
Find more information at Symantec.com.
About the Author:
Mild: Considered to be of moderate concern. Update all software and virus definitions. Consider it a direct threat
More threats_virus_threats Articles
Insider Reports RSS Feed
|
|
iEntry 10th Anniversary
RSS
Archive
