|
|
Worm.Mytob.B Worm Information
| Name: |
Worm.Mytob.B |
| Category: |
Worm |
| Advice: |
Remove |
| Risk: |
Severe Risk
Severe threats typically are remotely exploitable vulnerabilities, which can lead to system compromise. Successful exploitation does not normally require any interaction and exploits are in the wild. There exists a high possibility of potential system damage or security flaw. Attacker has complete control over your computer or install new software on your machine. |
| Description:
|
Worm.Mytob.B is a variant of the Mytob/Mydoom family.
Mytob.B shares many of the same characteristics as other variants Mytob variants including harvesting email addresses from the infected computer and sending itself to all the addresses.
Mytob.B lowers system security and can block access to anti-virus updates and security sites by altering the hosts file.
Mytob.B creates backdoor functionality by connecting to an IRC (Internet Relay Chat) server to wait for commands from its creator.
|
| Signatures:
|
process: wid32.exe: MD5 Hash: 716f1ff355ce68bde2a...
process: document.doc .exe: MD5 Hash: 716f1ff355ce68bde2a.. |
| Type: |
Worm - A worm is program that propagates by attacking other computers and copying itself to them. Worms may replace files, but do not insert themselves into files (as viruses do). |
Top Worm Visited Pages:
Wukill.mstray - Alias: Win32/HLLW.Wukill - 295 visits
Rbot - Alias: Backdoor.Rbot.Gen - 276 visits
SDBot - Alias: Wootbot.gen, Wootbot, Donk, spybot, Agobot - 229 visits
Trojan.Downloader.winstall - 182 visits
Worm.Brit.e - Alias: VBS/Chick.e@M virus - 89 visits
Worm.P2P.SpyBot.gen - 56 visits
Gaobot - 45 visits
Win32/Darby.O - 42 visits
Worm.Trilissa.e - 42 visits
JS.Lame - Alias: HTML.Lame - 40 visits
Random Worm Pages:
SdBot.svchost
Goejnago Worm - Alias: I-Worm.Hybris.b, W32/Hybris.gen@MM, W32/Hybris.worm.B
Virus.Frethem.e@mm
VBS.Kremp - Alias: HTML.Tramp
Bat.Hotcakes - Alias: I-Worm.Jerm.b
Worm.Rous.b
Worm.Netres.h
Worm.Desire - Alias: IRC-Worm.Desire
Worm.Stator.a - Alias: W32/Stator.A, W32/Stator@MM
IRC.Worm.Milbug.b
|
|
