BAT.Mumu.B.Worm

BAT.Mumu.B.Worm is a collection of batch files and utilities, as well as a hacktool named Hacktool.Hacline. The names and functions of the files may change. The information discussed in this writeup is based on the samples that Security Response have reviewed.

This worm will spread using administrative shares on Windows NT, 2000, and XP systems. Although the worm can execute on Windows 95/98/Me systems, it does not harm these systems.

Protection

• Initial Rapid Release version November 7, 2003
• Latest Rapid Release version August 20, 2008 revision 017
• Initial Daily Certified version November 7, 2003
• Latest Daily Certified version August 20, 2008 revision 016
• Initial Weekly Certified release date November 12, 2003

Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.

Threat Assessment

Wild

• Wild Level: Low
• Number of Infections: 0 - 49
• Number of Sites: 0 - 2
• Geographical Distribution: Low
• Threat Containment: Easy
• Removal: Easy

Damage

• Damage Level: Low

Distribution

• Distribution Level: Low