Jim Doty - Photo Blog

Photography: Photos, News, and Tips
Wednesday, January 28, 2004

Green Anole, Photo (c) Jim Doty, Jr.


A new and widespread worm is hitting the internet. Sometimes called "MyDoom", it is technically called "W32.Novarg.A@mm". I have received (but not opened) over 100 worm-infected emails over the last three days.

Beware of any emails with attachments, especially if they contain the subjects listed below. The following Subject, Message, and Attachment information is from Symantec:

*** ***

(one of the following)
* test
* hi
* hello
* Mail Delivery System
* Mail Transaction Failed
* Server Report
* Status
* Error

(one of the following)
o Mail transaction failed. Partial message is
o The message contains Unicode characters and has been
sent as a binary attachment.
o The message cannot be represented in 7-bit ASCII
encoding and has been sent as a binary attachment.

(one of the following)
o document
o readme
o doc
o text
o file
o data
o test
o message
o body

*** ***

If your virus definitions are up to date, you are protected by McAfee, Norton's, and PC-cillin virus protection software.

The worm fakes the sent email address. If you receive an email message that you sent out an infected email, that does NOT mean your computer has been infected. It probably means ANOTHER computer is infected and sent out infected emails and faked YOUR email return address.

If you opened an email with one of the above subject headings and inadvertently triggered the worm, you can
remove it from you computer with the following utility from Symantec.

More information is here and here.


  This page is powered by Blogger, the easy way to update your web site.  

Home  |  Archives