dougaross

As of yesterday, a mass-mailing worm named Novarg.A -- also being called Mydoom or MiMail.R by antivirus firms -- began
spreading and has been received via e-mail by several users in our office . To help you identify this specific threat, I have listed
common characteristics of the worm below. As always, please report any suspicious e-mails or attachments to the New
Technologies staff immediately. Moreover, if you believe or know that you have opened an infected attachment, please contact
me directly at x227 and I will walk you through determining whether your computer has been infected. Thank you for your
cooperation.

The Subject: field will display one of the following:
test
hi
hello
Mail Delivery System
Mail Transaction Failed
Server Report
Status
Error

The Message: or Body of the E-mail will contain one of the following:

-Mail transaction failed. Partial message is available.
-The message contains Unicode characters and has been sent as a binary attachment.
-The message cannot be represented in 7-bit ASCII encoding and has been sent as a binary attachment.

The Attachment: will most likely be called one of the following:
-document
-readme
-doc
-text
-file
-data
-test
-message
-body

Novarg "spoofs" (or imitates) the e-mail addresses shown in the FROM: field, so return e-mails, such as "undeliverable" notices,
are being sent to unsuspecting third parties around the Internet.

All of these variations possess a single objective - to coax recipients into opening the attached file, which contains a malicious
virus.

Visit the link below for more information about the threat and its removal.
http://securityresponse.symantec.com/avcenter/venc/data/w32.novarg.a@mm.html<ul><li><a href="http://securityresponse.symantec.com/avcenter/venc/data/w32.novarg.a@mm.html">http://securityresponse.symantec.com/avcenter/venc/data/w32.novarg.a@mm.html</a</li></ul>

April

Just look down the page ;-) Doesn't hurt to remind folks though, if they don't know.

Egil A64.2s - S6

People still open attachments without know the sender?

NorCal Terminator

<center><img src="http://pictureposter.audiworld.com/67057/dr_evil.jpg"></center><p>because they represent &gt;5% of the user market. Wouldn't even make the news if they did.

April

It's kind of along the lines of the establisnment saying they don't need AWD, and you drive an Audi..... and then everybody jumps on the bandwagon. Just played with XP, as huge improvement and very Mac-like in some ways. MS needs Apple as a goal to shoot for if nothing else ;-)