Ilbert wrote: >I received this today fro Symantec >What is W32.Novarg.A@mm and how does it affect me? > >W32.Novarg.A@mm is an encrypted mass-mailing worm that arrives as an >attachment, with either a .exe, .scr, .zip, or .pif extension. > >Note: Symantec Consumer products that support Worm Blocking >functionality automatically detect this threat as it attempts to >spread. > >The worm creates a mass mailing of itself, which may: > >1. Clog mail servers or degrade network performance >2. Impact system performance > >This worm is currently undergoing analysis. The record at Security >Response will be updated as information becomes available. > >To read more about the W32.Novarg.A@mm, please click here. > >Is this applicable to Macs ? > >Or are they just trying to chase up more business ? :-) A number of friends have received bogus emails today - generated by this virus. Subject line - "Test" or "Hello". When the machine gets infected, the worm will set up a backdoor into the system by opening TCP ports 3127 thru 3198. This will potentially allow a hacker to connect to the machine and utilize it as a proxy to gain access to it's network resources. In addition, the backdoor has the ability to download and execute arbitrary files. The worm will perform a DoS starting on February 1, 2004. On February 12, 2004 the worm has a trigger date to stop spreading. Systems Affected: Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows Server 2003, Windows XP Systems Not Affected: DOS, Linux, Macintosh, OS/2, UNIX, Windows 3.x More here: <http://www.sarc.com/avcenter/venc/data/w32.novarg.a@xxxxxxx> -- ============================================== Barry Takayesu Prestige Print & Graphics 10592 Wellington Road * St.Thomas, ON Canada N5P 3T1 (519) 631-8800 * Fax (519) 631-6316 prestige.print@xxxxxxxxxxx ============================================== _________________________________________________ For information concerning the MUGLO List just click on http://muglo.on.ca/pages/members.html#Joinmuglo Don't forget to periodically check our web site at: http://muglo.on.ca/