Avast WEBforum

Other => Viruses and worms => Topic started by: mak77 on January 28, 2004, 12:02:16 PM

Title: mimail.r
Post by: mak77 on January 28, 2004, 12:02:16 PM
Is this worm recognized by avast? i cannot find it in the database and i recieve notifications about my unsolicited mail with this worm...
Avast can't find nothing...
Is someone faking my mail account or is this worm not recognized by avast?

I also recieved a notify about I-Worm.Novarg\r, that i cannot find in virus database...
Title: Re:mimail.r
Post by: Vlk on January 28, 2004, 12:08:53 PM
In a few words, Mimail.R = Novarg = Mydoom.
These are just different names that different AV companies use for the same thing.

See e.g. http://www.sarc.com/avcenter/venc/data/w32.novarg.a@mm.html (copy 'n paste the whole URL, including the part after the @ ) --  the 'Also Known As' paragraph.
Title: Re:mimail.r
Post by: Pavel Baudis on January 28, 2004, 12:09:09 PM
Quote from: mak77 on January 28, 2004, 12:02:16 PM
Is this worm recognized by avast? i cannot find it in the database

Mimail.r is wrong name of Mydoom given by Trend Micro (they promised to rename it soon after the epidemy will stop), another wrong one is Novarg (by Symantec, they will also rename it soon). And yes, avast is able to detect Mydoom without any problems...

Quote from: mak77 on January 28, 2004, 12:02:16 PM
and i recieve notifications about my unsolicited mail with this worm...
Avast can't find nothing...
Is someone faking my mail account or is this worm not recognized by avast?

The worm forges the senders address - so it does not come from your computer. If avast! did not find anything, you are not infected by this worm  ;D !

Pavel
Title: Re:mimail.r
Post by: mak77 on January 28, 2004, 12:14:45 PM
thank you  ;D
Title: Re:mimail.r
Post by: .: Mac :. on January 28, 2004, 11:10:02 PM
Quote
another wrong one is Novarg
Pavel F-Secure also calles it that are they going to chane the name?
Title: Re:mimail.r
Post by: Pavel Baudis on January 28, 2004, 11:25:14 PM
Quote from: MacLover2000 on January 28, 2004, 11:10:02 PM
Pavel F-Secure also calles it that are they going to chane the name?

I hope so  ;D - at least most AV companies we are in contact with promised to do sooner or later. Let see! At least all of them call the B variant Mydoom now!

Title: Re:mimail.r
Post by: .: Mac :. on January 28, 2004, 11:31:02 PM
Quote
At least all of them call the B variant Mydoom now!
True its less less confusing that way


Mydoom.B [F-Secure], W32/Mydoom.b@MM [McAfee], WORM_MYDOOM.B [Trend], Win32.Mydoom.B [Computer Associates]
Title: Re:mimail.r
Post by: .: Mac :. on January 28, 2004, 11:40:41 PM
I just checked F-secure changed the name today!
Title: Re:mimail.r
Post by: PhilR on January 29, 2004, 09:23:53 PM
Quote from: MacLover2000 on January 28, 2004, 11:31:02 PM
Quote
At least all of them call the B variant Mydoom now!
True its less less confusing that way


Mydoom.B [F-Secure], W32/Mydoom.b@MM [McAfee], WORM_MYDOOM.B [Trend], Win32.Mydoom.B [Computer Associates]


ClamAV still calls it Worm.SCO.A, in case you see bounce messages from that.