Bat/Mumu-A

Discussion in 'malware problems & news' started by FanJ, Jun 4, 2003.

Thread Status:
Not open for further replies.
  1. FanJ

    FanJ Guest

    Bat/Mumu-A

    Aliases
    Worm.Win32.Muma, BAT.Muma, Bat/Mumu.worm, BAT.Mumu.A.Worm, BAT_SPYBOT.A

    Type
    Batch file worm

    Description
    Bat/Mumu-A is a worm which spreads by copying its constituent parts to IPC$ and ADMIN$ shares on remote computers which have weak passwords.

    The worm is mainly composed of the following BAT files which it copies across to the shares:

    10.BAT
    HACK.BAT
    IPC.BAT
    MUMA.BAT
    NEAR.BAT
    RANDOM.BAT
    REPLACE.BAT
    START.BAT

    Read more:
    http://www.sophos.com/virusinfo/analyses/batmumua.html
     
Thread Status:
Not open for further replies.