[muglo] Re: Symantec Virus alert ?

  • From: Barry Takayesu <prestige.print@xxxxxxxxxxx>
  • To: muglo@xxxxxxxxxxxxx
  • Date: Tue, 27 Jan 2004 01:20:35 -0500

Ilbert wrote:

>I received this today fro  Symantec
>What is W32.Novarg.A@mm and how does it affect me?
>
>W32.Novarg.A@mm is an encrypted mass-mailing worm that arrives as an
>attachment, with either a .exe, .scr, .zip, or .pif extension.
>
>Note: Symantec Consumer products that support Worm Blocking
>functionality automatically detect this threat as it attempts to
>spread.
>
>The worm creates a mass mailing of itself, which may:
>
>1. Clog mail servers or degrade network performance
>2. Impact system performance
>
>This worm is currently undergoing analysis. The record at Security
>Response will be updated as information becomes available.
>
>To read more about the W32.Novarg.A@mm, please click here.
>
>Is this applicable to Macs ?
>
>Or are they just trying to chase up more business ?   :-)

A number of friends have received bogus emails today - generated by 
this virus. Subject line - "Test" or "Hello".

When the machine gets infected, the worm will set up a backdoor into 
the system by opening TCP ports 3127 thru 3198. This will potentially 
allow a hacker to connect to the machine and utilize it as a proxy to 
gain access to it's network resources. In addition, the backdoor has 
the ability to download and execute arbitrary files.

The worm will perform a DoS starting on February 1, 2004. On February 
12, 2004 the worm has a trigger date to stop spreading.


Systems Affected:       Windows 2000, Windows 95, Windows 98, Windows 
Me, Windows NT, Windows Server 2003, Windows XP

Systems Not Affected:   DOS, Linux, Macintosh, OS/2, UNIX, Windows 3.x

More here: <http://www.sarc.com/avcenter/venc/data/w32.novarg.a@xxxxxxx>

-- 
==============================================
Barry Takayesu
Prestige Print & Graphics
10592 Wellington Road * St.Thomas, ON  Canada  N5P 3T1
(519) 631-8800 * Fax (519) 631-6316
prestige.print@xxxxxxxxxxx
==============================================

_________________________________________________

For information concerning the MUGLO List just click on

           http://muglo.on.ca/pages/members.html#Joinmuglo

Don't forget to periodically check our web site at:

           http://muglo.on.ca/

Other related posts: