NEWS FROM THE LAB - Thursday, November 11, 2004

Some MyDooms renamed to Bofra Posted by Gergo @ 13:18 GMT

Even though they seem to originate from the same source code, some samples we called MyDoom earlier have been renamed to Bofra. More specifically this affects MyDoom.AG, MyDoom.AH and MyDoom.AI.

The Bofra family of worms uses a different way of propagation which we explained in this earlier post.

A link page for the Bofra family has been posted to