Mumu consists of a mix of malicious files and actual utilities.
Because of the easily customised nature of this worm, many variants have been discovered, but most are generically detected under the Mumu.A name.
The lone exception is Mumu.B, which is detected separately by most antivirus programs.
The "standard" Mumu package consists of the following: As previously mentioned, this varies by version.
Mumu spreads by scanning IP addresses for open administrative network shares.