NEWS FROM THE LAB - Thursday, September 16, 2004

New day, New Mydoom Posted by Mikko @ 14:43 GMT

Yet another Mydoom variant has been found. This one is mostly detected as Mydoom.AB. It sends itself in email attachments with various file names, including "photo08.jpg                                      .pif".

The new Mydoom.AB is capable of spreading through Kazaa, ICQ and the LSASS vulnerability, the remaining characteritics are almost identical to previous variants.