Viruses Seen at U-M
This page lists some of the viruses (in alphabetical order) that have either caused problems at U-M or generated inquiries to Virus Busters. It is by no means an all-inclusive list of viruses. For more complete virus lists, see the F-Secure Computer Virus Information Center or the NAI's Virus Information Library. The years in parentheses indicate the year we first saw the virus; some of those viruses continued to cause problems for some time after the first sighting.
- AnnaKournikova (2001) Its subject line is typically, "Here you have, ;o)" and its message text is usually, "Hi: Check This!"
- Antrax (2001) A trivial virus with an incendiary name.
- BadTrans (2001) Appears to be an "empty" email. The address of the sender almost always begins with an underscore.
- Bagle.J (2004) Fills mailboxes with spurious e-mail account warnings.
- Braid (2002) Message text includes "Product Name: [Windows Version]."
- BugBear (2002) Takes text that it finds on the infected computer and uses it as the body of the email it sends.
- Chernobyl (1999) Triggers on April 26 of any year. Overwrites data on hard drive.
- CodeRed (2001) Attacks unpatched Microsoft IIS servers and defaces web pages.
- Frethem (2002) The subject line of email carrying this virus is "Re: Your password!"
- Gibe (2002) Gibe sends email that appears to be from Microsoft.
- Goner (2001) Has a subject of "Hi" and an attachment named "gone.scr."
- Happy99/Ska (1999) Contains the Happy99.exe file as an attachment.
- Hey, you (2000) An AOL Password Stealing Trojan horse. A symptom is that Windows cannot be properly shut down or be restarted.
- Klez family (2002)These viruses forge the "From" field of email, so the virus appears to come from someone other than the real victim. Including from your postmaster.
- LoveLetter (2000) Mass emails itself to all addresses in the infected computer's Microsoft Outlook addressbook. The message subject is usually "I LOVE YOU."
- Lovsan (2003) Update Windows and use antivirus software to protect your computer from Lovsan.
- Melissa (1999) A Microsoft Word macrovirus that can send itself through email.
- Mimail virux (2003) Attempts to fool PayPal users into revealing their credit card and PayPal info.
- MyDoom (2004) This mass-mailing virus sends mail with a forged "From" address, random "Subject" line, and randomly named infected attachment.
- My party (2002) This mass-emailing worm has a Subject of "new photos from my party!"
- Nachi (2003) Exploits Microsoft vulnerability; Update Windows to prevent infection.
- Nimda (2001) Exploits a Microsoft vulnerability. Mass e-mails itself.
- SirCam (2001) Emails itself, plus copies of files in your "My Documents" folder, to addresses in your addressbook.
- Sobig.C (2003) Sobig.C forges the "From" field; message text is "Please see the attached file."
- Sobig.E (2003) Forges "From" address. The text is, "Please see the attached zip file for details."
- Sobig.F (2003) Forges the "From" address. The text is "Please see the attached file for details" or "See the attached file for details."
- Swen (2003) Sends what appear to be Microsoft updates. Do not be fooled.
- Vote (2001) Message subject is "Fwd:Peace BeTweeN AmeriCa And IsLaM!"
- Witty worm (2004) Attacks users of BlackIce firewall v.3.6.ccf, causing data loss and network load.
- 911 (2000) Tries to dial 911.

virus.busters@umich.edu
ITCS | University of Michigan
Copyright © 1996-2005 The Regents of The University of Michigan
visits since this site was redesigned 5/21/04
This page last updated April 27, 2004
|