View Full Version : Alert! W32.Dumaru@mm Category 3 (Moderate)

08-19-03, 10:18 PM
From Symantec Security Response Center:

What is W32.Dumaru@mm and how does it affect me?
W32.Dumaru@mm is a mass-mailing worm that inserts an IRC Trojan onto the infected machine. The worm gathers email addresses from certain file types and uses its own SMTP engine to email itself.

The email has the following characteristics:

From: "Microsoft" <>

Subject: Use this patch immediately!

Dear friend , use this Internet Explorer patch now!
There are dangerous virus in the Internet now!
More than 500.000 already infected!

Attachment: patch.exe

This threat is written in the Microsoft C++ programming language and is compressed with UPX.

To read more about the W32.Dumaru@mm, please click here.

What action can I take from here?
Symantec Security Response posted virus definitions to protect against this threat on August 18, 2003 (via LiveUpdate). All users of Norton AntiVirus who do not have up-to-date virus protection should immediately run LiveUpdate for protection from W32.Dumaru@mm.

Virus definitions are available via the LiveUpdate feature in the Norton AntiVirus product or the Symantec Security Response Web site.

Symantec Security Response encourages all Norton AntiVirus users to regularly download virus definitions in order to protect against future threats.