Sonicwall Signatures


Go to All Categories list.

Mytob.IR-3 is a Worm. Worms spread from computer to computer, making copies of themselves over the network. They could spread over email, IM, peer-to-peer networks, or directly over the wire by leveraging vulnerabilities. Mytob.IR-3 is compressed using the PESPIN executable packer and its file size is 49,664 bytes. It creates the following mutex to ensure only one instance is running: LEMOxLEMO. It also contains anti-debugging code, attempts to acquire the "SeDebugPrivilege" privileges, monitors the list of running processes, is executed every time Windows starts.

Relevant Information