Same virus
W32/Mydoom@MM [McAfee], WORM_MIMAIL.R [Trend],
Worm.SCO.A [ClamAV], W32.Novarg.A@mm [Symantec]
Also note, if you find this infecting systems on
campus, clean them quickly, it opens a proxy the
port range of 3127 through 3198.
Hope this helps.
-Russell
Ed Symanzik wrote:
> It sounds like you're talking about Worm.SCO.A. We blocked our first
> one at 5:36pm yesterday and a total of 261955 before midnight.
>
> It sounds like there is another one called MyDoom out there as well. If
> someone would send me a copy, we can try making our own signature.
>
> --
> Ed Symanzik
> Mail Team
> [log in to unmask]
>
> .
>
|