{{Infobox computer virus , Fullname = Mumu , Common name = Mumu , Technical name = BAT/Mumu.A , Family = Mumu , Aliases = Muma , Classification =

Worm Worms are many different distantly related bilateral animals that typically have a long cylindrical tube-like body, no limbs, and no eyes (though not always). Worms vary in size from microscopic to over in length for marine polychaete wor ...

, Type =

Windows Windows is a group of several proprietary graphical operating system families developed and marketed by Microsoft. Each family caters to a certain sector of the computing industry. For example, Windows NT for consumers, Windows Server for serv ...

, Subtype =

Network share In computing, a shared resource, or network share, is a computer resource made available from one host to other hosts on a computer network. It is a device or piece of information on a computer that can be remotely accessed from another comput ...

, IsolationDate = June 2003 , Isolation = Unknown , Origin =

China China, officially the People's Republic of China (PRC), is a country in East Asia. It is the world's most populous country, with a population exceeding 1.4 billion, slightly ahead of India. China spans the equivalent of five time zones and ...

, Author = Unknown Mumu is a

computer worm A computer worm is a standalone malware computer program that replicates itself in order to spread to other computers. It often uses a computer network to spread itself, relying on security failures on the target computer to access it. It wil ...

that was isolated in June 2003.

Description

Mumu consists of a mix of malicious files and actual utilities. Because of the easily customised nature of this worm, many variants have been discovered, but most are generically detected under the Mumu.A name. The lone exception is Mumu.B, which is detected separately by most antivirus programs. The "standard" Mumu package consists of the following: * A range of malicious

batch file Batch may refer to: Food and drink * Batch (alcohol), an alcoholic fruit beverage * Batch loaf, a type of bread popular in Ireland * A dialect term for a bread roll used in North Warwickshire, Nuneaton and Coventry, as well as on the Wirral ...

s * A number of "grey area" batch files, which use the utilities included in the Mumu package in a malicious way * pcGhost and/or an

nVidia Nvidia CorporationOfficially written as NVIDIA and stylized in its logo as VIDIA with the lowercase "n" the same height as the uppercase "VIDIA"; formerly stylized as VIDIA with a large italicized lowercase "n" on products from the mid 1990s to ...

utility, both of which are legitimate utilities * Other various legitimate utilities * A number of text files As previously mentioned, this varies by version. Mumu spreads by scanning IP addresses for open administrative

network share In computing, a shared resource, or network share, is a computer resource made available from one host to other hosts on a computer network. It is a device or piece of information on a computer that can be remotely accessed from another comput ...

s. It then attempts to guess the password to gain access and copy itself over. Heavy correlation of Mumu infections with infections of the Valla virus have been observed. It is suspected that Mumu caused a resurgence in Valla infections after Valla infected one of the .exe files included in the Mumu package. Previous to this, Valla was considered obsolete. It now ranks among the most-reported viruses on the WildList.

External links

Mumu removal toolMuma
Windows malware Exploit-based worms