Full Disclosure mailing list archives

RE: New Variant of mydoom in the wild


From: "Randal, Phil" <prandal () herefordshire gov uk>
Date: Thu, 29 Jan 2004 10:01:02 -0000

McAfee has a disinfection tool out (which also disinfects a host of other
"in the wild" viruses).  http://vil.nai.com/vil/stinger - version 1.9.9
covers MyDoom.B

Cheers,

Phil

---------------------------------------------
Phil Randal
Network Engineer
Herefordshire Council
Hereford, UK 

-----Original Message-----
From: full-disclosure-admin () lists netsys com
[mailto:full-disclosure-admin () lists netsys com]On Behalf Of Helmut
Hauser
Sent: 28 January 2004 19:15
To: full-disclosure () lists netsys com
Subject: [Full-disclosure] New Variant of mydoom in the wild


There is a new variant of mydoom in the wild, much harder - 
overwrites the
hosts file and therefore gives the victims no chance to 
update their virus
defs ...
and the second target is now microsoft.

Trend-Micro has it first:

here is the link:

http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VNam
e=WORM_MYDOOM.B&VSect=T

Helmut

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html


_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html


Current thread: