Dumaru Computer Virus

Discovered on: January 25, 2004

Systems infected: Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows Server 2003, Windows XP

System not infected: DOS, Linux, Macintosh, OS/2, UNIX, Windows 3.x

W32.Dumaru.Z@mm is a multi-threaded, mass-mailing worm that downloads and runs a file, runs a keylogger, and attempts to steal personal information.

The email has the following characteristics:

From: "Elene" (censored)
Subject: Important information for you. Read it immediately !
Attachment: Myphoto.zip

The attachment is a zip file that contains the worm executable as myphoto.jpg .exe". (There are numerous spaces between ".jpg" and ".exe".)