[muglo] Re: Symantec Virus alert ?
- From: Barry Takayesu <prestige.print@xxxxxxxxxxx>
- To: muglo@xxxxxxxxxxxxx
- Date: Tue, 27 Jan 2004 01:20:35 -0500
Ilbert wrote:
>I received this today fro Symantec
>What is W32.Novarg.A@mm and how does it affect me?
>
>W32.Novarg.A@mm is an encrypted mass-mailing worm that arrives as an
>attachment, with either a .exe, .scr, .zip, or .pif extension.
>
>Note: Symantec Consumer products that support Worm Blocking
>functionality automatically detect this threat as it attempts to
>spread.
>
>The worm creates a mass mailing of itself, which may:
>
>1. Clog mail servers or degrade network performance
>2. Impact system performance
>
>This worm is currently undergoing analysis. The record at Security
>Response will be updated as information becomes available.
>
>To read more about the W32.Novarg.A@mm, please click here.
>
>Is this applicable to Macs ?
>
>Or are they just trying to chase up more business ? :-)
A number of friends have received bogus emails today - generated by
this virus. Subject line - "Test" or "Hello".
When the machine gets infected, the worm will set up a backdoor into
the system by opening TCP ports 3127 thru 3198. This will potentially
allow a hacker to connect to the machine and utilize it as a proxy to
gain access to it's network resources. In addition, the backdoor has
the ability to download and execute arbitrary files.
The worm will perform a DoS starting on February 1, 2004. On February
12, 2004 the worm has a trigger date to stop spreading.
Systems Affected: Windows 2000, Windows 95, Windows 98, Windows
Me, Windows NT, Windows Server 2003, Windows XP
Systems Not Affected: DOS, Linux, Macintosh, OS/2, UNIX, Windows 3.x
More here: <http://www.sarc.com/avcenter/venc/data/w32.novarg.a@xxxxxxx>
--
==============================================
Barry Takayesu
Prestige Print & Graphics
10592 Wellington Road * St.Thomas, ON Canada N5P 3T1
(519) 631-8800 * Fax (519) 631-6316
prestige.print@xxxxxxxxxxx
==============================================
_________________________________________________
For information concerning the MUGLO List just click on
http://muglo.on.ca/pages/members.html#Joinmuglo
Don't forget to periodically check our web site at:
http://muglo.on.ca/
- Follow-Ups:
- [muglo] Re: Symantec Virus alert ?
- From: Barry Takayesu
- References:
- [muglo] Symantec Virus alert ?
- From: Ilbert Walker
Other related posts:
- » [muglo] Symantec Virus alert ?
- » [muglo] Re: Symantec Virus alert ?
- » [muglo] Re: Symantec Virus alert ?
- » [muglo] Re: Symantec Virus alert ?
- » [muglo] Re: Symantec Virus alert ?
- » [muglo] Re: Symantec Virus alert ?
- » [muglo] Re: Symantec Virus alert ?
- [muglo] Re: Symantec Virus alert ?
- From: Barry Takayesu
- [muglo] Symantec Virus alert ?
- From: Ilbert Walker