Bat/Mumu-A

Bat/Mumu-A

Aliases
Worm.Win32.Muma, BAT.Muma, Bat/Mumu.worm, BAT.Mumu.A.Worm, BAT_SPYBOT.A

Type
Batch file worm

Description
Bat/Mumu-A is a worm which spreads by copying its constituent parts to IPC$ and ADMIN$ shares on remote computers which have weak passwords.

The worm is mainly composed of the following BAT files which it copies across to the shares:

10.BAT
HACK.BAT
IPC.BAT
MUMA.BAT
NEAR.BAT
RANDOM.BAT
REPLACE.BAT
START.BAT

Read more:
http://www.sophos.com/virusinfo/analyses/batmumua.html