Backdoor Worm

[Guest guest]

The following virus tried to get into my system when I began

downloading my e-mail messages this morning. I believe the

only way they could have gotten my e-mail address was from

yahoo.... This is my personal e-mail address and I don't give it

out except to friends and these yahoo groups....

So please be careful out-there. You can see more info on it at

www.norton.com.

kathy

WORM INFO:

W32.Novarg.A@mm is a mass-mailing worm. The worm will

arrive as an attachment with a file extension of .bat, .cmd, .exe,

..pif, .scr, or .zip.

When the machine gets infected, the worm will set up a

backdoor into the system by opening TCP ports 3127 thru

3198. This will potentially allow a hacker to connect to the

machine and utilize it as a proxy to gain access to it's network

resources. In addition, the backdoor has the ability to

download and execute arbitrary files.

The worm will perform a DoS starting on February 1, 2004.

On February 12, 2004 the worm has a trigger date to stop

spreading.

Subject:

(The subject will be one of the following)

test

hi

hello

Mail Delivery System

Mail Transaction Failed

Server Report

Status

Error