Results 1 to 3 of 3

Thread: Nodoom.A

  1. #1
    Senior Member
    Join Date
    Feb 2002
    Posts
    1,210

    Nodoom.A

    It's a few days old but see no mention of this here yet..

    "New Worm May Pose as MessageLabs Advisory in Attempt to Spread"

    MessageLabs, the world’s largest provider of managed email security services, is today warning computer users against a new worm known as W32/Nodoom.A. As yet, no copies of the worm have been intercepted from the wild. MessageLabs is issuing this advisory due to the fact that the worm refers to a non-existent advisory issued by MessageLabs.


    General


    The worm contains its own SMTP engine in order to send itself to addresses harvested from infected machines. In order to find target email addresses, W32/Nodoom.A searches files with the following extensions:

    .DBX
    .EML
    .HTM
    .HTML
    .MBX
    .MMF
    .NCH
    .OCS
    .TBB
    .TXT


    The worm has been programmed to execute during January and February 2004.

    W32/Nodoom.A also spoofs the sender field of the email making it difficult to ascertain where the infected file has been sent from.


    Email Characteristics


    From: Spoofed


    Subject: Various.. (etc)
    read more about it here
    .
    .


    http://securityresponse.symantec.com...doom.a@mm.html

    W32.Nodoom.A@mm is a mass-mailing worm that uses its own SMTP engine to send itself to all the email addresses it finds in the files with the extensions .dbx, .eml, .htm, .html, .mbx, .mmf, .nch, .ocs, .tbb, or .txt. The "From" address of the email is spoofed.

    This threat is compressed with FSG.


    Also Known As: Win32.Nodoom.A[CA], W32/Nodoom.a@MM [McAfee], WORM_NODOOM.A [Trend Micro]


    Infection Length: 5,568
    mydoom.. Nodoom, what's next.. OURdoom ?

  2. #2
    Senior Member
    Join Date
    Nov 2001
    Posts
    4,785
    whats with this...it doesn't do anything but spread? although sometimes that's enough. at least netsky patched the systems it infected and removed reg settings from other virus even though it created a panic
    Bukhari:V3B48N826 “The Prophet said, ‘Isn’t the witness of a woman equal to half of that of a man?’ The women said, ‘Yes.’ He said, ‘This is because of the deficiency of a woman’s mind.’”

  3. #3
    Thanks for the update.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •