stickman
01-28-2004, 17:38 PM
Hello everyone! In case you haven't already heard, there is a new virus on the loose as of yesterday. The name of this new virus is W32.Novarg.A@mm It is spreading fast across the internet, infecting everything with e-mail. I received several e-mails yesterday that were infected and in fact, my own computer was found to be infected as well. I have since deloused my computer and got yesterday's virus update applied (since I have been away from my computer for the last couple of days).
Here's Symantec's official description of this virus:
W32.Novarg.A@mm is a mass-mailing worm that arrives as an attachment with the file extension .bat, .cmd, .exe, .pif, .scr, or .zip.
When a computer is infected, the worm will set up a backdoor into the system by opening TCP ports 3127 through 3198, which can potentially allow an attacker to connect to the computer and use it as a proxy to gain access to its network resources.
In addition, the backdoor can download and execute arbitrary files.
The worm will perform a Denial of Service (DoS) starting on February 1, 2004. It also has a trigger date to stop spreading on February 12, 2004. These two events will only occur if the worm is run between or after those dates. While the worm will stop spreading on February 12, 2004, the backdoor component will continue to function after this date.
If you reveive any e-mails from people or sources you don't know, delete them, then empty your recycle bin on the desktop. These e-mails will come with different attachments on them DO NOT OPEN THE ATTACHMENTS!
If you think your computer may be infected, Symantec has a tool on their website you can use to scan your computer and identify any viruses found. You can find these tools at:
securityresponse.symantec.com
Here's Symantec's official description of this virus:
W32.Novarg.A@mm is a mass-mailing worm that arrives as an attachment with the file extension .bat, .cmd, .exe, .pif, .scr, or .zip.
When a computer is infected, the worm will set up a backdoor into the system by opening TCP ports 3127 through 3198, which can potentially allow an attacker to connect to the computer and use it as a proxy to gain access to its network resources.
In addition, the backdoor can download and execute arbitrary files.
The worm will perform a Denial of Service (DoS) starting on February 1, 2004. It also has a trigger date to stop spreading on February 12, 2004. These two events will only occur if the worm is run between or after those dates. While the worm will stop spreading on February 12, 2004, the backdoor component will continue to function after this date.
If you reveive any e-mails from people or sources you don't know, delete them, then empty your recycle bin on the desktop. These e-mails will come with different attachments on them DO NOT OPEN THE ATTACHMENTS!
If you think your computer may be infected, Symantec has a tool on their website you can use to scan your computer and identify any viruses found. You can find these tools at:
securityresponse.symantec.com