Re: Outbreak warning: possibly Mydoom.C

[Papp Geza <pappgeza () tolna net>]

Hello,

Yes - this is two worm, that use the Mydoom backdoor`s. This is not
"binaris" and not is .zip archive.

This twoo worm are hexa. and is padked to UPX. My attachement picture
from worm W32/Doomjuice.worm.a,aliases: W32.HLLW.Doomjuice, WORM_DOOMJUICE.A,
Win32.Doomjuice.A, Worm.Win32.Doomjuice

From second worm i`have not pitures, but description...

The worm is comlex. W32/Deadhat-A
Aliases :
Win32.Vesser.A, W32.HLLW.Deadhat, Vesser, W32/Vesser.worm.a


-- 
Üdvözlettel,
  Geysap                             mailto:pappgeza () tolna net

www.gyik.com
"VIRUS CORE TEAM"
====================================
Fiat justitia, pereat mundus!
------------------------------------
we protect your digital worlds... 
====================================