Notice
This is a Low-Profiled Threat Notice Update for W32/Mydoom.b@MM worm.
Justification
This worm has been Updated from Low to Low-Profiled due to Media Attention
at:
<http://www.eweek.com/article2/0,4149,1472436,00.asp>
W32/Mydoom.b@MM is referred to as Mydoom.b within the article.
Read About It
Information about W32/Mydoom.b@MM is located on VIL at:
<http://vil.nai.com/vil/content/v_100988.htm>
The worm overwrites the local hosts file to prevent infected computers from
accessing specific sites. AVERT recommends updating to the 4320 dat files
as soon as they are available, so that your computer may continue to access
NAI and other important sites for future updates.
Detection
W32/Mydoom.b@MM was first discovered on 01/28/2004 and detection will be
added to the 4320 dat files (Release Date: 01/28/2004). Though we consider
this a low threat, AVERT has posted an extra.dat as part of the above
description for your convenience.
If you suspect you have W32/Mydoom.b@MM, please submit a sample to
http://www.webimmune.net/
Risk Assessment Definition
For further information on the Risk Assessment and AVERT Recommended Actions
please see:
http://www.networkassociates.com/us/security/resources/risk_assessment.htm
Best Regards,
McAfee AVERT - Anti Virus Research, Analysis, and Outbreak Management visit
us at www.avertlabs.com
--
Jurren Bouman
MVP Windows - Security
"Protect Your PC"
http://www.microsoft.com/security/