Thank you for being a valued part of the CNET community. As of December 1, 2020, the forums are in read-only format. In early 2021, CNET Forums will no longer be available. We are grateful for the participation and advice you have provided to one another over the years.

Thanks,

CNET Support

General discussion

W32/Deadhat.worm.a

Feb 8, 2004 9:57AM PST

Date Discovered: 2/7/2004
Date Added: 2/7/2004
Origin: Unknown
Length: 55,808 bytes
Type: Virus
SubType: Internet Worm

Virus Characteristics

This threat is proactively detected as New Malware.b when scanning compressed files (default option) with program heuristics enabled using the 4.2.40 scan engine (or higher) and 4273 DAT files (or higher).

Analysis of this threat is on going, details will be posted as they become available.

This worm spreads via the peer to peer file-sharing application Soulseek, and may attempt to spread via the remote access component created by the W32/Mydoom.a@MM and W32/Mydoom.b@MM viruses; seeking out infected computers and instructing them to uninstall Mydoom and install this virus. The worm listens on TCP port 2766 and contains instructions to connect to an IRC server, login to a specified channel, and wait for further instructions.


More: http://us.mcafee.com/virusInfo/default.asp?id=description&virus_k=101000

Discussion is locked