Dumaru is more of an irritant than anything else. If, however, you don't have an up-to-date virus signature, it could do you some damage. It's a WORM and it's a password stealer. The irritating details with this one is that with the McAfee Virus Scan (maybe others) and Outlook Express, your email will appear to be locked up. McAfee tells you the virus is there and you can delete it, however, it doesn't want to go away. Go to McAffee's site to read more about what this Dumaru virus can do:
McAfee.com.
If your email program is locked up and you can't dump this little bug, I'd suggest a little tool that I use.
Popcorn is little program that allows you to see what email is on your server. You can find this email and delete it before it ever gets to your computer. I've found this utility quite usefull on several occasions (you know those 5000MB movies that you're brother-in-law thinks is funny) to remove badly behaving emails.
Look for the suject of the email "Use this patch immediately !" and delete it. Gone!
Return-Path:
Received: from maia.host4u.net (maia.host4u.net [216.71.64.68])
by keto.host4u.net (8.11.6/8.11.6) with ESMTP id h8FGC7003232
for ; Mon, 15 Sep 2003 11:12:07 -0500
Received: from m1.dnsix.com (m1.dnsix.com [63.251.171.166])
by maia.host4u.net (8.11.6/8.11.6) with ESMTP id h8FGC1t13424
for ; Mon, 15 Sep 2003 11:12:02 -0500
Received: from [24.197.242.140] (helo=localhost)
by m1.dnsix.com with smtp (Exim 3.36 #1)
id 19yvxE-0005mp-00
for info@trasannetwork.com; Mon, 15 Sep 2003 09:11:56 -0700
From: "Microsoft"
To:
Subject: Use this patch immediately !
MIME-Version: 1.0
Content-Type: multipart/mixed;boundary="xxxx"
Message-Id:
Date: Mon, 15 Sep 2003 09:11:56 -0700
Status: O
--xxxx
Content-Type: text/plain;
Content-Transfer-Encoding: 7bit
Dear friend , use this Internet Explorer patch now!
There are dangerous virus in the Internet now!
More than 500.000 already infected!
--xxxx
Dear friend , use this Internet Explorer patch now!
There are dangerous virus in the Internet now!
More than 500.000 already infected!
