W32/Mydoom@MM
W32/MyDoom-A is a worm which spreads by email. When the infected
attachment is launched, the worm harvests email addresses from address
books and from files with the following extensions: wab, txt, htm, sht, php,
asp, dbx, tbb, adb and pl.
W32/MyDoom-A creates a file called Message in the temp folder and runs Notepad to display the contents, which displays random characters.
W32/MyDoom-A uses randomly chosen email addresses in the "To:" and
"From:" fields as well as a randomly chosen subject line. The emails
distributing this worm have the following characteristics.
For more information, please read McAfee's page:
http://us.mcafee.com/virusInfo/default.asp?id=description&virus_k=100983
Mcafee has a new version of Stinger that will remove the virus.
For more info, contact the Support Desk at 740-593-1222 or send an e-mail to
servicedesk@ohio.edu.
Main Virus Page
