Author Topic: mimail.r  (Read 4656 times)

0 Members and 1 Guest are viewing this topic.

Offline mak77

  • Newbie
  • *
  • Posts: 11
  • I'm a llama!
mimail.r
« on: January 28, 2004, 12:02:16 PM »
Is this worm recognized by avast? i cannot find it in the database and i recieve notifications about my unsolicited mail with this worm...
Avast can't find nothing...
Is someone faking my mail account or is this worm not recognized by avast?

I also recieved a notify about I-Worm.Novarg\r, that i cannot find in virus database...

Offline Vlk

  • Global Moderator
  • Serious Graphoman
  • **
  • Posts: 11665
  • Please don't send me IM's. Email only. Thx.
    • ALWIL Software
Re:mimail.r
« Reply #1 on: January 28, 2004, 12:08:53 PM »
In a few words, Mimail.R = Novarg = Mydoom.
These are just different names that different AV companies use for the same thing.

See e.g. http://www.sarc.com/avcenter/venc/data/w32.novarg.a@mm.html (copy 'n paste the whole URL, including the part after the @ ) --  the 'Also Known As' paragraph.
« Last Edit: February 04, 2004, 10:57:41 PM by Vlk »
If at first you don't succeed, then skydiving's not for you.

Offline Pavel

  • Moderator
  • Massive Poster
  • *
  • Posts: 4305
  • Nostalgia isn't what it used to be...
    • ALWIL Software
Re:mimail.r
« Reply #2 on: January 28, 2004, 12:09:09 PM »
Is this worm recognized by avast? i cannot find it in the database

Mimail.r is wrong name of Mydoom given by Trend Micro (they promised to rename it soon after the epidemy will stop), another wrong one is Novarg (by Symantec, they will also rename it soon). And yes, avast is able to detect Mydoom without any problems...

and i recieve notifications about my unsolicited mail with this worm...
Avast can't find nothing...
Is someone faking my mail account or is this worm not recognized by avast?

The worm forges the senders address - so it does not come from your computer. If avast! did not find anything, you are not infected by this worm  ;D !

Pavel
All of us could take a lesson from the weather. It pays no attention to criticism.

Offline mak77

  • Newbie
  • *
  • Posts: 11
  • I'm a llama!
Re:mimail.r
« Reply #3 on: January 28, 2004, 12:14:45 PM »
thank you  ;D

Offline .: Mac :.

  • Avast Überevangelist
  • Ultra Poster
  • *****
  • Posts: 5051
Re:mimail.r
« Reply #4 on: January 28, 2004, 11:10:02 PM »
Quote
another wrong one is Novarg
Pavel F-Secure also calles it that are they going to chane the name?
"People who are really serious about software should make their own hardware." - Alan Kay

Offline Pavel

  • Moderator
  • Massive Poster
  • *
  • Posts: 4305
  • Nostalgia isn't what it used to be...
    • ALWIL Software
Re:mimail.r
« Reply #5 on: January 28, 2004, 11:25:14 PM »
Pavel F-Secure also calles it that are they going to chane the name?

I hope so  ;D - at least most AV companies we are in contact with promised to do sooner or later. Let see! At least all of them call the B variant Mydoom now!

All of us could take a lesson from the weather. It pays no attention to criticism.

Offline .: Mac :.

  • Avast Überevangelist
  • Ultra Poster
  • *****
  • Posts: 5051
Re:mimail.r
« Reply #6 on: January 28, 2004, 11:31:02 PM »
Quote
At least all of them call the B variant Mydoom now!
True its less less confusing that way


Mydoom.B [F-Secure], W32/Mydoom.b@MM [McAfee], WORM_MYDOOM.B [Trend], Win32.Mydoom.B [Computer Associates]
« Last Edit: January 28, 2004, 11:32:28 PM by MacLover2000 »
"People who are really serious about software should make their own hardware." - Alan Kay

Offline .: Mac :.

  • Avast Überevangelist
  • Ultra Poster
  • *****
  • Posts: 5051
Re:mimail.r
« Reply #7 on: January 28, 2004, 11:40:41 PM »
I just checked F-secure changed the name today!
"People who are really serious about software should make their own hardware." - Alan Kay

Offline PhilR

  • Jr. Member
  • **
  • Posts: 92
Re:mimail.r
« Reply #8 on: January 29, 2004, 09:23:53 PM »
Quote
At least all of them call the B variant Mydoom now!
True its less less confusing that way


Mydoom.B [F-Secure], W32/Mydoom.b@MM [McAfee], WORM_MYDOOM.B [Trend], Win32.Mydoom.B [Computer Associates]


ClamAV still calls it Worm.SCO.A, in case you see bounce messages from that.
AMD Richland A4-4000, 4GB RAM, XP SP3