[oracle-l] Re: Hello
- From: <bulbultyagi@xxxxxxxxxxxxxxxx>
- To: <oracle-l@xxxxxxxxxxxxx>, <ORACLE-L@xxxxxxxxxxx>
- Date: Tue, 27 Jan 2004 13:00:28 +0530
This looks like the Novarg worm
What say people ?
If yes, then thank you Listguru for filtering out the binaries
W32.Novarg.A@mm is a mass-mailing worm. The worm will arrive as an
attachment with a file extension of .bat, .cmd, .exe, .pif, .scr, or .zip.
When the machine gets infected, the worm will set up a backdoor into the
system by opening TCP ports 3127 thru 3198. This will potentially allow a
hacker to connect to the machine and utilize it as a proxy to gain access to
it's network resources. In addition, the backdoor has the ability to
download and execute arbitrary files.
The worm will perform a DoS starting on February 1, 2004. On February 12,
2004 the worm has a trigger date to stop spreading.
----- Original Message -----
From: <eca@xxxxxxxxxxxxxxxxx>
To: "Multiple recipients of list ORACLE-L" <ORACLE-L@xxxxxxxxxxx>
Sent: Tuesday, January 27, 2004 04:04
Subject: Hello
>
>
>
-------------------------------------------------------------
Please see the official ORACLE-L FAQ: http://www.orafaq.com
-------------------------------------------------------------
To unsubscribe send email to: oracle-l-request@xxxxxxxxxxxxx
put 'unsubscribe' in the subject line.
-------------------------------------------------------------
Other related posts:
- » [oracle-l] Re: Hello
- » Hello- Manuela Atoui
