Thursday, September 16, 2004
New day, New Mydoom Posted by Mikko @ 14:43 GMT

Yet another Mydoom variant has been found. This one is mostly detected as Mydoom.AB. It sends itself in email attachments with various file names, including "photo08.jpg                                      .pif".

The new Mydoom.AB is capable of spreading through Kazaa, ICQ and the LSASS vulnerability, the remaining characteritics are almost identical to previous variants.

<<< Mydoom.Y contains a virus description of Mydoom.Y
Fascinating post on visualizing virus & spam traffic >>>