Outbreak Name: W32/Mytob-FF

Outbreak Date: 11-03-05

IronPort's Virus Outbreak Filters Protect Customers from Email Variant of Mytob Additional 1 Hour and 44 Minutes Protection

Background

IronPort's Virus Outbreak Filters protect customers within the critical period between the first exploit of a virus outbreak and the release of an AV signature. During the recent Mytob-FF outbreak, Outbreak Filters users received 1 hour and 44 minutes of protection over the first AV signature availability. Mytob-FF is a mass-mailing worm and IRC backdoor Trojan. It runs continuously in the background, providing a backdoor server which allows a remote intruder to gain access and control over the computer via IRC channels, including the ability to download and execute files on the infected computer. Mytob-FF spreads by sending itself as an email attachment to email addresses it harvests from the infected computer.

Timeline

Outbreak Details & Timeline

Date November 1, 2005
Name W32/Mytob-FF (Mytob variant)
07:18 GMT Virus Threat Level raised and protection starts
09:02 GMT Gateway Anti-virus Signature published

Benefits

1 hour and 44 minutes of additional protection with Virus Outbreak Filters