Alert against WORM_MYTOB.MX

NEW DELHI: TrendLabs has declared a medium risk virus alert to control the spread of WORM_MYTOB.MX.





TrendLabs has received several infection reports indicating that this malware is spreading in Eastern Europe, Japan, India, China, Sweden, France, Spain, Austria, and Germany.





This memory-resident worm spreads copies of itself as an attachment to email messages, which it sends to target addresses, using its own Simple Mail Transfer Protocol (SMTP) engine.





Through this SMTP engine, it is able to easily send the said email message even without using other mailing applications, such as Microsoft Outlook.





This worm also propagates via network shares. It searches for available shared folders within the network and attempts to drop copies of itself into these shares.





It also generates random IP addresses and attempts to drop copies of itself into the said addresses' default shares. It uses the account details of the currently logged user to gain access to password-protected shares.





It has backdoor capabilities, which enable a remote malicious user to perform commands on the affected system, thus compromising system security.





It runs on Windows NT, 2000, and XP, Trendlabs said.