Virus: High Alert for W32/Mydoom@MM File

Article originally published in a different format

SOFTWARE: SuperDAT File 4319 for VirusScan for Windows 9x/Me/NT/2000/XP, Netshield NT/2000, GroupShield for Microsoft Exchange, GroupShield for Lotus Domino, WebShield SMPT

*ALERT* This is a HIGH Threat Advisory UPGRADE for the W32/Mydoom@MM virus. W32/Mydoom@MM alert has been deemed HIGH due to prevalence.

Information about W32/Mydoom@MM is located at: http://vil.nai.com/vil/content/v_100983.htm

Note from the above site these characteristics:

This is a mass-mailing and peer-to-peer file-sharing worm that arrives in an e-mail message as follows:

From: (spoofed e-mail sender)
Subject: (Varies, such as)

- Error
- Status
- Server Report
- Mail Transaction Failed
- Mail Delivery System
- hello
- hi

Body: (Varies, such as)

- The message cannot be represented in 7-bit ASCII encoding and has been sent as a binary attachment.
- The message contains Unicode characters and has been sent as a binary attachment.
- Mail transaction failed. Partial message is available.

Attachment: varies (.bat, .exe, .pif, .cmd, .scr) - often arrives in a ZIP archive (22,528 bytes)

This virus is detected by DAT 4319.

DESCRIPTION: DAT files contain up-to-date virus signatures and other information that Network Associates anti-virus products use to protect your computer against the thousands of computer viruses in circulation.

The SuperDAT utility lets you update the DAT files and the scan engine contained in the software with a single installation. Netshield Netware does not support the Superdat utility at this time, so those users should utilize the DAT AutoUpdate feature. Consult the Netshield Netware user documentation available via the web pages cited below for details.

PLATFORM: PC or PC compatible.

SYSTEM REQUIREMENTS: The 4319 DAT file is compatible with Network Associates anti-virus products that use scan engine versions 4.1.60 and higher only. The SuperDAT Utility is for use with VirusScan version 4.5 or higher.

DISTRIBUTION METHOD: The software is distributed electronically. To receive a download connect to the Software Downloads page at

http://osusls.osu.edu

Then go to "Windows", then "VirusScan".

DOCUMENTATION: Installation instructions are included on the above download web pages. "SuperDAT User's Guide" is also available as a PDF file as part of the download.

DISTRIBUTION QUESTIONS: May be directed to the OIT Support Center at 688-help or 8help@osu.edu.

Posted in: