high
Summary
Summary
Action- More Information
| Affected operating systems | Windows |
|---|---|
| Characteristics |
|
| Included in our products from | April 2008 (4.28) |
| Protection available since | 13 February 2008 15:09:19 (GMT) |
| Detected by | All Sophos products |
Action
- Summary
- Action
- More Information
Your options
- Please send us a sample to assist in improving our technology
- Use the instructions for removing generically detected files to delete the file from your computer
- If problems persist, contact Sophos support for assistance with removal
More Information
Mal/Daymay-A is a malicious program for the Windows platform.
Detection for members of Mal/Daymay-A is behavior based. It is extremely important that customers report detections of Mal/Daymay-A to Sophos and send a sample for analysis.
The main purpose of Mal/Daymay-A is to participate as a node in a network of bots sending spam.
Members of Mal/Daymay-A set the following Registry entry to modify internet security:
HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy
\StandardProfile\AuthorizedApplications\List
<pathname of the worm executable>
<Current Folder>\<original filename>:*:Enabled:
HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy
\StandardProfile\IcmpSettings
AllowInboundEchoRequest
1
|
