请输入您要查询的百科知识:

 

词条 Mumu (computer worm)
释义

  1. Description

  2. External links

{{Infobox computer virus | Fullname = Mumu
| Common name = Mumu
| Technical name = BAT/Mumu.A
| Family = Mumu
| Aliases = Muma
| Classification = Worm
| Type = Windows
| Subtype = Network share
| IsolationDate = June 2003
| Isolation = Unknown
| Origin = China
| Author = Unknown
}}

Mumu is a computer worm that was isolated in June 2003.

Description

Mumu consists of a mix of malicious files and actual utilities. Because of the easily customised nature of this worm, many variants have been discovered, but most are generically detected under the Mumu.A name. The lone exception is Mumu.B, which is detected separately by most antivirus programs.

The "standard" Mumu package consists of the following:

  • A range of malicious batch files
  • A number of "grey area" batch files, which use the utilities included in the Mumu package in a malicious way
  • pcGhost and/or an nVidia utility, both of which are legitimate utilities
  • Other various legitimate utilities
  • A number of text files

As previously mentioned, this varies by version. Mumu spreads by scanning IP addresses for open administrative network shares. It then attempts to guess the password to gain access and copy itself over.

Heavy correlation of Mumu infections with infections of the Valla virus have been observed. It is suspected that Mumu caused a resurgence in Valla infections after Valla infected one of the .exe files included in the Mumu package. Previous to this, Valla was considered obsolete. It now ranks among the most-reported viruses on the WildList.

External links

  • Mumu removal tool
  • Symantec
  • Sophos
  • McAfee
  • Muma
{{malware-stub}}

1 : Exploit-based worms

随便看

 

开放百科全书收录14589846条英语、德语、日语等多语种百科知识,基本涵盖了大多数领域的百科知识,是一部内容自由、开放的电子版国际百科全书。

 

Copyright © 2023 OENC.NET All Rights Reserved
京ICP备2021023879号 更新时间:2024/11/13 14:05:44