Options

New High-Distribution Virus Alert

Unknown
edited January 2004 in Science & Tech
Symantec calls it W32.Novarg.A@mm, McAffee calls it W32/Mydoom@MM, We just call it another pain in the a**

[link=http://securityresponse.symantec.com/avcenter/venc/data/w32.novarg.a@mm.html]Symantec Security Response[/link]

[link=http://us.mcafee.com/virusInfo/default.asp?id=description&virus_k=100983]McAfee VirusInfo[/link]

Submitted by Dexter & profd
«1

Comments

  • DexterDexter Vancouver, BC Canada
    edited January 2004
    Apparently, this virus is also designed to run a DoS attack on www.sco.com, probably as retaliation for SCO's efforts to force users of certain Linux distributions to purhcase a license from them, as SCO claims intellectual property over part of these distributions.

    http://www.news.com.au/common/story_page/0,4057,8507028%255E15306,00.html

    Dexter...
  • BlackHawkBlackHawk Bible music connoisseur There's no place like 127.0.0.1 Icrontian
    edited January 2004
    Bah.

    SCO = owned.

    [edit] the reply with quote thing that's on the side of the button doesn't actually work[/edit]
  • ShortyShorty Manchester, UK Icrontian
    edited January 2004
    Does work, you need to tick the "Quote message in reply" :p

    This is just another nasty virus. Haven't these guys got better things to do?!
  • BlackHawkBlackHawk Bible music connoisseur There's no place like 127.0.0.1 Icrontian
    edited January 2004
    Meh. It should've done it automatically...
  • ShortyShorty Manchester, UK Icrontian
    edited January 2004
    Virtues of Evil wrote:
    Meh. It should've done it automatically...
    The click is for when you want to reply at the top of a long page.. as it scrolls straight to the bottom for you ;)

    You still have to tick the box :)
  • profdlpprofdlp The Holy City Of Westlake, Ohio
    edited January 2004
    Virtues of Evil wrote:
    Bah.

    ...the reply with quote thing that's on the side of the button doesn't actually work...
    Could you be confusing these two - they do different things; both work for me. :beer:
  • BlackHawkBlackHawk Bible music connoisseur There's no place like 127.0.0.1 Icrontian
    edited January 2004
    Uhh...I meant the "Quick reply to this message".

    Well this went off topic... ;D
  • profdlpprofdlp The Holy City Of Westlake, Ohio
    edited January 2004
    Virtues of Evil wrote:
    Well this went off topic... ;D
    I blame it on that new virus. Sneaky little fellers... :vimp:
  • KwitkoKwitko Sheriff of Banning (Retired) By the thing near the stuff Icrontian
    edited January 2004
    I got 6 of these yesterday. They all came disguised as bounced emails.

    //EDIT: Just got another one.
  • EnverexEnverex Worcester, UK Icrontian
    edited January 2004
    I have been getting these for the last 5 months and have had over 3000+ in total. SpamAssassin now automatically picks them all up and bins them.
    This is a mass-mailing and peer-to-peer file-sharing worm that arrives in an email message as follows:

    From: (spoofed email sender)
    Subject: (Varies, such as)

    * Error
    * Status
    * Server Report
    * Mail Transaction Failed
    * Mail Delivery System
    * hello
  • ThraxThrax 🐌 Austin, TX Icrontian
    edited January 2004
    I've gotten 9 in the last few days.

    Is the virus delivered upon opening, or if the attachment is opened? If the former is true, I'm pwned.
  • AranyicAranyic Casstown, OH Icrontian
    edited January 2004
    From what I can tell you have to manually open the attachment to become infected.
  • ThraxThrax 🐌 Austin, TX Icrontian
    edited January 2004
    Mmk. Safe then.
  • panzerkwpanzerkw New York City
    edited January 2004
    Had nine infected emails in my box when I woke up this morning. Between these and the porn/free meds/penis enlargement spam, my email box is starting to be a real hassle.
  • ThraxThrax 🐌 Austin, TX Icrontian
    edited January 2004
    I added message rules to outlook that automatically deletes any email with the keywords this virus uses in the subject line. I haven't had one since.
  • TheLostSwedeTheLostSwede Trondheim, Norway Icrontian
    edited January 2004
    Stupid Outlook. I made a rule to delete all mess with Penis, Viagra, Microsoft, Enlargement etc and putted it on. I then sent a mail to myself with all the words in the mail and the subject line. No dice. I still had the word penis in the fontsize 200 on teh screen. =\
  • AranyicAranyic Casstown, OH Icrontian
    edited January 2004
    ;) this virus is spreading like wildfire, messagelabs users have reported 575,000+ emails with it, 1 in every 41 of the emails or there abouts infects the user.
    http://messagelabs.com/viruseye/info/default.asp?frompage=top+ten&fromURL=%2Fviruseye%2Fthreats%2F&virusname=W32%2FMyDoom%2EA%2Dmm
  • EyesOnlyEyesOnly Sweden New
    edited January 2004
    But so far i haven't gotten it. Hope it stays that way.
  • Straight_ManStraight_Man Geeky, in my own way Naples, FL Icrontian
    edited January 2004
    SM-Bot wrote:
    Symantec calls it W32.Novarg.A@mm, McAffee calls it W32/Mydoom@MM, We just call it another pain in the a**

    [link=http://securityresponse.symantec.com/avcenter/venc/data/w32.novarg.a@mm.html]Symantec Security Response[/link]

    [link=http://us.mcafee.com/virusInfo/default.asp?id=description&virus_k=100983]McAfee VirusInfo[/link]

    Submitted by Dexter & profd

    Kaspersky Link here:

    http://www.viruslist.com/eng/viruslist.html?id=841769

    John-- who is seeing a lot of construction kit style plus addons Trojan+Internet Worm hybrids right now. BTW, Kaspersky AND NAV can be run on same XP box, if I end up with (legal OEM) XP on the Intel box after motherboard upgrade will license and run both together.
  • AranyicAranyic Casstown, OH Icrontian
    edited January 2004
    Just got this in an email:
    Updated at 14.20 GMT/09.20 New York/01.20 Sydney

    MessageLabs has now intercepted 1.2 million copies of W32/Mydoom.A-mm. The company is processing between 50,000 and 60,000 copies of the worm an hour. To date, the worm's peak infection rate is 1 in 12 of all email scanned be MessageLabs. So far, the worm has been seen in 168 countries.

    W32/Mydoom.A has exceeded the infamous SoBig.F virus in terms of copies intercepted, and the number continues to rise
  • DexterDexter Vancouver, BC Canada
    edited January 2004
    Mackanz wrote:
    Stupid Outlook. I made a rule to delete all mess with Penis, Viagra, Microsoft, Enlargement etc and putted it on. I then sent a mail to myself with all the words in the mail and the subject line. No dice. I still had the word penis in the fontsize 200 on teh screen. =\

    Ya, I deleted all my Outlook filters a while back after it started filtering out legitimate e-mails form clients, even though there were no matches to my keywords in their subject lines.

    Stupid Outlook.

    Dexter...
  • SpinnerSpinner Birmingham, UK
    edited January 2004
    Mr. Kwitko wrote:
    I got 6 of these yesterday. They all came disguised as bounced emails.

    //EDIT: Just got another one.

    Yeah same here, I got four this morning.
  • TheLostSwedeTheLostSwede Trondheim, Norway Icrontian
    edited January 2004
    I have never used a Antivirusproggy. Which one would you guys recommend? Money isn't an issue.
  • croc_croc_ New
    edited January 2004
    Mackanz wrote:
    .... I still had the word penis in the fontsize 200 on teh screen. =\

    Yeah maybe I am immature .... but for some reason that is hilarious. ;D

    But back on topic ... here at work we get 100-300 spam emails a day mostly consisting of penis enlargement and viagra-like supplements. The rest are all worms. I have message rules set, but they are starting to spell words to get around the rules "enlagrement" "v|agra" etc.... how troublesome. SUPPOSEDLY the company who hosts our websites is supposed to setup a spam blocker on the server side .... but it hasn't happened yet ....
  • LawnMMLawnMM Colorado
    edited January 2004
    Norton
  • SpinnerSpinner Birmingham, UK
    edited January 2004
    LawnMM wrote:
    Norton

    I second that. Mack', I'm genuinely shocked you don't use an Antivirus program. Any specific reason why you haven't decided to up until now?
  • croc_croc_ New
    edited January 2004
    Spinner wrote:
    I second that. Mack', I'm genuinely shocked you don't use an Antivirus program. Any specific reason why you haven't decided to up until now?

    I don't use them either. I haven't really had the need. As long as you don't open foreign emails/files and you are careful what/where you download, you shouldn't really ever get a virus. Lately though I have been using Norton AV 03. I just don't like how AV progs like to invade your system and use resources, and I have had bad experiences with bugged Norton installs destroying my system (well my windows install anyways).

    But yeah, I would have to say Norton also.
  • EnverexEnverex Worcester, UK Icrontian
    edited January 2004
    I don't use one either. Don't see the point in unnecessary slowdowns when I don't open random files from people and don't have any other things that would have dangerous files. The only time I may ever use one is if I think I may have to handle potentially dangerous files at some point.
  • ShortyShorty Manchester, UK Icrontian
    edited January 2004
    Im getting loads but the anti-virus is keeping them at bay :)
  • TheLostSwedeTheLostSwede Trondheim, Norway Icrontian
    edited January 2004
    Spinner wrote:
    I second that. Mack', I'm genuinely shocked you don't use an Antivirus program. Any specific reason why you haven't decided to up until now?

    I'm just lazy and always thought that running such program always messes things up more than it helps. Reason i wan't to try one is to se if i already have any virus on the system. If i don't, i'll uninstall it.
Sign In or Register to comment.