W32/Mydoom.o@MM
 

Beware this little virus is doing the rounds since today:
http://vil.nai.com/vil/content/v_127033.htm

I know a couple of large organisations that got hit... :mad: ;)

Re: W32/Mydoom.o@MM
 

Just had four e-mails which may have this, One "apparently" from ntlworld.com team, one from ntlworld.com support team, and on my Zen dial up account one fron zen.co.uk users support and one from DAEMON mail undeliverable.Glad I saw this warning because although ZA Pro quarantined the attachments I scanned them with my AV and it reported them as clean.:shocked:

With the exception of the mail that purported to be undeliverable the other three had this type of message.

" We have detected that your email account has been used to send a large amount of spam during the recent week.
Probably, your computer was compromised and now runs a trojan proxy server.

Please follow instructions in order to keep your computer safe.

Sincerely yours,
The ntlworld.com team "

Re: W32/Mydoom.o@MM
 

what av do u use?

Re: W32/Mydoom.o@MM
 

Command from Authentium, just as I was posting my AV software auto updated the deffiles so if I receive any more I will check it out. I just deleted the four previous ones, I had no intention of opening them.

Re: W32/Mydoom.o@MM
 

just updated avg manually , hopefully i will be ok :erm:

Re: W32/Mydoom.o@MM
 

I have just updated Norton AV using the Intelligent Updater. Hopefully i will be safe.

Re: W32/Mydoom.o@MM
 

AVG 7.0 - AVI 263.4.9 and AVG 6.0 - 727
Added detection of new variants of I-Worm/Mydoom.O, I-Worm/Lovgate, I-Worm/Redrac.
- July 26, 2004 -

Re: W32/Mydoom.o@MM
 

phew :D :D :D

Re: W32/Mydoom.o@MM
 

IMHO This page is more readable than the corresponding McAfee one.

http://www.f-secure.com/v-descs/mydoom_m.shtml

Re: W32/Mydoom.o@MM
 

btw
I believe that since port 1034 is allocated to "activesync notifications" then anybody not using MS Active Directory should suffer no ill effects from blocking that port by way of extra protection.

Re: W32/Mydoom.o@MM
 

Yep, this is one

Re: W32/Mydoom.o@MM
 

Datafellows / FSecure have a removal tool available at
http://www.f-secure.com/tools/f-mydoom.zip

with instructions at
http://www.f-secure.com/tools/f-mydoom.txt

Re: W32/Mydoom.o@MM
 

Had another one this morning, headers reveal same IP in the [received from] field as the 4 from yesterday.
AV scan of attachment confirmed and disinfected W32/mydoom.O@mm. :tu: