Again, proof is in the received emails you get.

After receiving a HUGE number of infected emails over the last few days, I feel compelled to remind forum users to update their AV software.

Here is some info on the latest major threat (taken from SARC):


W32.Novarg.A@mm

Also Known As:* W32/Mydoom@MM [McAfee], WORM_MIMAIL.R [Trend], Win32.Mydoom.A [Computer Associates], W32/Mydoom-A [Sophos], I-Worm.Novarg [Kaspersky]

W32.Novarg.A@mm is a mass-mailing worm that arrives as an attachment with the file extension .bat, .cmd, .exe, .pif, .scr, or .zip.

When a computer is infected, the worm will set up a backdoor into the system by opening TCP ports 3127 through 3198, which can potentially allow an attacker to connect to the computer and use it as a proxy to gain access to its network resources.

In addition, the backdoor can download and execute arbitrary files.

The worm will perform a Denial of Service (DoS) starting on February 1, 2004. It also has a trigger date to stop spreading on February 12, 2004. These two events will only occur if the worm is run between or after those dates. While the worm will stop spreading on February 12, 2004, the backdoor component will continue to function after this date.

Manual Removal Instructions (http://securityresponse.symantec.com/avcenter/venc/data/w32.novarg.a@mm.html)
Update Norton Anti-Virus (http://securityresponse.symantec.com/avcenter/download.html)
Update McAfee Anti-Virus (http://download.mcafee.com/updates/updates.asp)

Taken from a previous post here on SW:

I recommend that user's here immediately update their AntiVirus software and run a complete scan of their computer. Remember, it is not enough just to update the software, you need to run a full scan. If you don't have AV software running on your computer that is updated, you need to, right now.

There are a few AV software downloads out there that are FREE (http://www.free-av.com), just make certain they are or have been updated to include new threats, such as MyDoom, etc.

Another FREE and great option which I highly recommend is to download the Network Associates STINGER AV Standalone Scanner (http://download.nai.com/products/mcafee-avert/stinger.exe). It is a quick download (only around 700K) and is a much smaller program than normal AV software. While it doesn't take the place of a good AV software, it does allow for quick background scanning for some of the bigger viruses out there right now, including MyDoom and SoBig.

Please, take the time to download or update your AV software and run a scan right now. If you want more information on MyDoom, Sobig, Lovsan or any other virus currently listed as a threat, please visit the Network Associates Updated Threat List (http://vil.nai.com/vil/recently-updated-viruses.asp) or click on the SARC link above.

Thank you!

{EDIT}: Due to the severity of this latest CAT 4 worm, McAfee's web site has been periodically unavailable lately. Symantec's site also has been experiencing problems. In order for SW users to get the Stand-alone Stinger program, I have placed the download below, on our server. This will only be up for a short time.

Darn computer nerds have nothing to do, but laugh at our crashing computers. Maybe someday they get a virus in their body and pay for all the sorrow they gave others. :cussing: Thanks for watching out for us corey.

those computer hackers are obviously some of the most talented people in the world and it is too bad because they are ripping themselves off.

I'm starting to see them show up on my machine already -- this stuff pisses me off!

The Sobig virus was a pain, but this one might be even worse.

DON'T OPEN ANY UNWANTED ATTACHMENTS!

Wouldn't it be nice to nail the little morons who write these things -- nail them to the wall, I say!

^^TRUE^^ If you are runnin XP Home you should be alright, it senses that if your computer is being hacked it automatically shuts down your computer and ingoing and outgoing ports. Like i hate viruses, who would invent them anyway, all they are is just numbers that comfuzzle your computers :dazed: And then you have to like pay 60 bucks to get it fixed. :(

Originally posted by XCR440SP@Jan 30 2004, 09:27 AM
^^TRUE^^ If you are runnin XP Home you should be alright, it senses that if your computer is being hacked it automatically shuts down your computer and ingoing and outgoing ports.* Like i hate viruses, who would invent them anyway, all they are is just numbers that comfuzzle your computers :dazed:* And then you have to like pay 60 bucks to get it fixed.* :(
Windows XP users are vulnerable to this worm as are all other MS OS users.