Update on Mydoom.AX

Friday, February 18, 2005

Update on Mydoom.AX

Well, I believe that I have contained the virus from spreading outside the company at least by blocking all PCs except the mail servers from communicating to outside servers using Port 25.

Would still like to know why our AV software isn't catching the virus even though the latest Dat file supposedly has protection for the virus.

The virus is launched through a file (jave.exe in my case) in the %windows% directory (C:\windows in my case). I ran multiple scans against this file using the Mydoom tool that Symantec provides as well as the regular Symantec Antivirus scanner and neither found it.

Will try to use one of the web based scanner to see if they catch it.

Feb 18, 2005 6:23:58 PM | Network Security

The comments to this entry are closed.

Update on New Virus Looks like the virus is the W32.Mydoom.AX@mm (Symantec's name) and protection for it is supposedly in the 17 Feb 2005 dat for Symantec, but it still made it through Postini's antivirus system and our Symantec AV systems. Very annoying. Here's...

Thoughts on Firefox I've been trying out Firefox for about a month or so now. I've got to say that it's a pretty good browser. Certainly seems to have less problems with spyware, popups and the like than IE. But lately, I've been...