Author Topic: mimail.r  (Read 6033 times)

0 Members and 1 Guest are viewing this topic.

mak77

  • Guest
mimail.r
« on: January 28, 2004, 12:02:16 PM »
Is this worm recognized by avast? i cannot find it in the database and i recieve notifications about my unsolicited mail with this worm...
Avast can't find nothing...
Is someone faking my mail account or is this worm not recognized by avast?

I also recieved a notify about I-Worm.Novarg\r, that i cannot find in virus database...

Offline Vlk

  • Avast CEO
  • Serious Graphoman
  • *
  • Posts: 11658
  • Please don't send me IM's. Email only. Thx.
    • ALWIL Software
Re:mimail.r
« Reply #1 on: January 28, 2004, 12:08:53 PM »
In a few words, Mimail.R = Novarg = Mydoom.
These are just different names that different AV companies use for the same thing.

See e.g. http://www.sarc.com/avcenter/venc/data/w32.novarg.a@mm.html (copy 'n paste the whole URL, including the part after the @ ) --  the 'Also Known As' paragraph.
« Last Edit: February 04, 2004, 10:57:41 PM by Vlk »
If at first you don't succeed, then skydiving's not for you.

Pavel Baudis

  • Guest
Re:mimail.r
« Reply #2 on: January 28, 2004, 12:09:09 PM »
Is this worm recognized by avast? i cannot find it in the database

Mimail.r is wrong name of Mydoom given by Trend Micro (they promised to rename it soon after the epidemy will stop), another wrong one is Novarg (by Symantec, they will also rename it soon). And yes, avast is able to detect Mydoom without any problems...

and i recieve notifications about my unsolicited mail with this worm...
Avast can't find nothing...
Is someone faking my mail account or is this worm not recognized by avast?

The worm forges the senders address - so it does not come from your computer. If avast! did not find anything, you are not infected by this worm  ;D !

Pavel

mak77

  • Guest
Re:mimail.r
« Reply #3 on: January 28, 2004, 12:14:45 PM »
thank you  ;D

Offline .: Mac :.

  • Avast Überevangelist
  • Ultra Poster
  • *****
  • Posts: 5093
Re:mimail.r
« Reply #4 on: January 28, 2004, 11:10:02 PM »
Quote
another wrong one is Novarg
Pavel F-Secure also calles it that are they going to chane the name?
"People who are really serious about software should make their own hardware." - Alan Kay

Pavel Baudis

  • Guest
Re:mimail.r
« Reply #5 on: January 28, 2004, 11:25:14 PM »
Pavel F-Secure also calles it that are they going to chane the name?

I hope so  ;D - at least most AV companies we are in contact with promised to do sooner or later. Let see! At least all of them call the B variant Mydoom now!


Offline .: Mac :.

  • Avast Überevangelist
  • Ultra Poster
  • *****
  • Posts: 5093
Re:mimail.r
« Reply #6 on: January 28, 2004, 11:31:02 PM »
Quote
At least all of them call the B variant Mydoom now!
True its less less confusing that way


Mydoom.B [F-Secure], W32/Mydoom.b@MM [McAfee], WORM_MYDOOM.B [Trend], Win32.Mydoom.B [Computer Associates]
« Last Edit: January 28, 2004, 11:32:28 PM by MacLover2000 »
"People who are really serious about software should make their own hardware." - Alan Kay

Offline .: Mac :.

  • Avast Überevangelist
  • Ultra Poster
  • *****
  • Posts: 5093
Re:mimail.r
« Reply #7 on: January 28, 2004, 11:40:41 PM »
I just checked F-secure changed the name today!
"People who are really serious about software should make their own hardware." - Alan Kay

PhilR

  • Guest
Re:mimail.r
« Reply #8 on: January 29, 2004, 09:23:53 PM »
Quote
At least all of them call the B variant Mydoom now!
True its less less confusing that way


Mydoom.B [F-Secure], W32/Mydoom.b@MM [McAfee], WORM_MYDOOM.B [Trend], Win32.Mydoom.B [Computer Associates]


ClamAV still calls it Worm.SCO.A, in case you see bounce messages from that.