A rose by any other name? Mydoom.bb?

The supposedly new version of Mydoom that is being discussed today is not new at all. We have been detecting it since July 26, 2004.

We detect the email worm some av vendors are calling version Mydoom.bb as Email-worm.Win32.Mydoom.m. The so-called new version is the same worm only only packed with a different packer – this time it was MEW, whereas in the summer it was UPX.

Related Posts

Leave a Reply

Your email address will not be published. Required fields are marked *