Mumu is a
computer worm
A computer worm is a standalone malware computer program that replicates itself in order to spread to other computers. It often uses a computer network to spread itself, relying on security failures on the target computer to access it. It wi ...
that was isolated in June 2003.
Description
Mumu consists of a mix of malicious files and actual utilities. Because of the easily customised nature of this worm, many variants have been discovered, but most are generically detected under the Mumu.A name. The lone exception is Mumu.B, which is detected separately by most antivirus programs.
The "standard" Mumu package consists of the following:
* A range of malicious
batch file
Batch may refer to:
Food and drink
* Batch (alcohol), an alcoholic fruit beverage
* Batch loaf, a type of bread popular in Ireland
* A dialect term for a bread roll used in North Warwickshire, Nuneaton and Coventry, as well as on the Wirra ...
s
* A number of "grey area" batch files, which use the utilities included in the Mumu package in a malicious way
* pcGhost and/or an
nVidia
Nvidia CorporationOfficially written as NVIDIA and stylized in its logo as VIDIA with the lowercase "n" the same height as the uppercase "VIDIA"; formerly stylized as VIDIA with a large italicized lowercase "n" on products from the mid 1990s to ...
utility, both of which are legitimate utilities
* Other various legitimate utilities
* A number of text files
As previously mentioned, this varies by version. Mumu spreads by scanning IP addresses for open administrative
network share
In computing, a shared resource, or network share, is a computer resource made available from one host to other hosts on a computer network.
It is a device or piece of information on a computer that can be remotely accessed from another compu ...
s. It then attempts to guess the password to gain access and copy itself over.
Heavy correlation of Mumu infections with infections of the Valla virus have been observed. It is suspected that Mumu caused a resurgence in Valla infections after Valla infected one of the .exe files included in the Mumu package. Previous to this, Valla was considered obsolete. It now ranks among the most-reported viruses on the WildList.
External links
Mumu removal toolMuma
Windows malware
Exploit-based worms