W32.Lanieca.A aka Eyeveg: uses its own SMTP
engine. Spreads by sending itself as email attachment
to addresses collected on the infected computer.
Check out the Latest
Worms (MS) page.
W32.Mydoom.BO aka Mytob: uses its own SMTP
engine. Spreads by sending itself as email attachment
to addresses collected on the infected computer.
Contains a backdoor that listens on TCP port 6677.
Check out the Latest
Worms (MS) page.
W32.Sober.O[P/S] aka Sober.O[P/S] :uses
its own SMTP engine. Spreads by sending itself as
email attachment to addresses collected on the infected
computer. Email subject varies and will be in English
or German.
Check out the Latest
Worms (MS) page.