« previous next »
Pages: [1]   Go Down

Author Topic: mimail.r  (Read 5992 times)

0 Members and 1 Guest are viewing this topic.

mak77

  • Guest
mimail.r
« on: January 28, 2004, 12:02:16 PM »
Is this worm recognized by avast? i cannot find it in the database and i recieve notifications about my unsolicited mail with this worm...
Avast can't find nothing...
Is someone faking my mail account or is this worm not recognized by avast?

I also recieved a notify about I-Worm.Novarg\r, that i cannot find in virus database...
Logged

Offline Vlk

  • Avast CEO
  • Serious Graphoman
  • *
  • Posts: 11658
  • Please don't send me IM's. Email only. Thx.
    • ALWIL Software
Re:mimail.r
« Reply #1 on: January 28, 2004, 12:08:53 PM »
In a few words, Mimail.R = Novarg = Mydoom.
These are just different names that different AV companies use for the same thing.

See e.g. http://www.sarc.com/avcenter/venc/data/w32.novarg.a@mm.html (copy 'n paste the whole URL, including the part after the @ ) --  the 'Also Known As' paragraph.
« Last Edit: February 04, 2004, 10:57:41 PM by Vlk »
Logged
If at first you don't succeed, then skydiving's not for you.

Pavel Baudis

  • Guest
Re:mimail.r
« Reply #2 on: January 28, 2004, 12:09:09 PM »
Quote from: mak77 on January 28, 2004, 12:02:16 PM
Is this worm recognized by avast? i cannot find it in the database

Mimail.r is wrong name of Mydoom given by Trend Micro (they promised to rename it soon after the epidemy will stop), another wrong one is Novarg (by Symantec, they will also rename it soon). And yes, avast is able to detect Mydoom without any problems...

Quote from: mak77 on January 28, 2004, 12:02:16 PM
and i recieve notifications about my unsolicited mail with this worm...
Avast can't find nothing...
Is someone faking my mail account or is this worm not recognized by avast?

The worm forges the senders address - so it does not come from your computer. If avast! did not find anything, you are not infected by this worm  ;D !

Pavel
Logged

mak77

  • Guest
Re:mimail.r
« Reply #3 on: January 28, 2004, 12:14:45 PM »
thank you  ;D
Logged

Offline .: Mac :.

  • Avast Überevangelist
  • Ultra Poster
  • *****
  • Posts: 5093
Re:mimail.r
« Reply #4 on: January 28, 2004, 11:10:02 PM »
Quote
another wrong one is Novarg
Pavel F-Secure also calles it that are they going to chane the name?
Logged
"People who are really serious about software should make their own hardware." - Alan Kay

Pavel Baudis

  • Guest
Re:mimail.r
« Reply #5 on: January 28, 2004, 11:25:14 PM »
Quote from: MacLover2000 on January 28, 2004, 11:10:02 PM
Pavel F-Secure also calles it that are they going to chane the name?

I hope so  ;D - at least most AV companies we are in contact with promised to do sooner or later. Let see! At least all of them call the B variant Mydoom now!

Logged

Offline .: Mac :.

  • Avast Überevangelist
  • Ultra Poster
  • *****
  • Posts: 5093
Re:mimail.r
« Reply #6 on: January 28, 2004, 11:31:02 PM »
Quote
At least all of them call the B variant Mydoom now!
True its less less confusing that way


Mydoom.B [F-Secure], W32/Mydoom.b@MM [McAfee], WORM_MYDOOM.B [Trend], Win32.Mydoom.B [Computer Associates]
« Last Edit: January 28, 2004, 11:32:28 PM by MacLover2000 »
Logged
"People who are really serious about software should make their own hardware." - Alan Kay

Offline .: Mac :.

  • Avast Überevangelist
  • Ultra Poster
  • *****
  • Posts: 5093
Re:mimail.r
« Reply #7 on: January 28, 2004, 11:40:41 PM »
I just checked F-secure changed the name today!
Logged
"People who are really serious about software should make their own hardware." - Alan Kay

PhilR

  • Guest
Re:mimail.r
« Reply #8 on: January 29, 2004, 09:23:53 PM »
Quote from: MacLover2000 on January 28, 2004, 11:31:02 PM
Quote
At least all of them call the B variant Mydoom now!
True its less less confusing that way


Mydoom.B [F-Secure], W32/Mydoom.b@MM [McAfee], WORM_MYDOOM.B [Trend], Win32.Mydoom.B [Computer Associates]


ClamAV still calls it Worm.SCO.A, in case you see bounce messages from that.
Logged
Pages: [1]   Go Up
« previous next »